Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fb25f09-19c3-3dd4-aa6f-58d0b84a4a66.roa
File: 9fb25f09-19c3-3dd4-aa6f-58d0b84a4a66.roa (raw, json)
Hash identifier: 6z1+NwL2PUH772lKkXr6echQYEpwenz2e0+gcmy+aQM=
Subject key identifier: 67:D1:66:57:85:A2:A6:2A:E7:17:BF:9F:F7:D6:73:9C:CE:F6:A5:BF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848705AF59807168126F6864DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fb25f09-19c3-3dd4-aa6f-58d0b84a4a66.roa
Signing time: Sun 05 Jan 2025 02:00:39 +0000
ROA not before: Sun 05 Jan 2025 02:00:39 +0000
ROA not after: Sat 05 Apr 2025 01:00:39 +0000
asID: 395559
IP address blocks: 166.0.128.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:5a:f5:98:07:16:81:26:f6:86:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 5 02:00:39 2025 GMT
Not After : Apr 5 01:00:39 2025 GMT
Subject: CN=6db0c2e8-ea9c-4d73-a05d-2fb59a9cb9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:2e:e7:f8:98:9b:9e:f2:ac:69:7b:be:d0:
e8:cd:6e:ba:cd:a5:47:45:16:11:37:f7:68:49:0c:
69:79:87:0b:30:53:d4:12:e5:fd:30:47:74:70:e9:
f5:fc:63:fa:f1:7b:fc:95:53:67:e9:41:f1:e9:3c:
e2:07:45:6c:dd:41:95:8f:6a:c2:8e:85:ab:18:0f:
94:f9:93:28:61:cf:d5:44:6d:9a:d3:51:fc:7a:7c:
65:8e:88:3b:83:97:d4:0f:a2:c6:cd:fa:a8:93:ea:
88:bf:28:e1:a7:44:e1:08:b5:63:41:5d:f4:04:38:
7f:45:f7:2e:08:00:15:c7:eb:3e:e6:0b:13:c2:ba:
48:b2:65:ee:2a:0c:da:24:48:87:b7:bf:ae:47:96:
0e:24:da:60:f6:4b:3d:41:f3:c0:ac:24:9c:44:6f:
a2:4d:fe:fc:54:9d:88:aa:a7:96:47:d9:35:84:42:
13:e0:ef:25:13:a9:9b:e0:e7:02:cd:07:1e:34:67:
f8:8b:94:db:0e:06:47:33:cf:08:d2:c8:20:cf:9b:
5d:9e:94:5d:bd:13:de:9b:d6:dd:51:d3:c5:c8:51:
af:38:16:a1:1b:9a:62:21:75:2e:74:6e:b7:42:e7:
02:c4:ec:85:e6:9d:f6:4c:20:b5:af:72:fd:01:53:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:66:57:85:A2:A6:2A:E7:17:BF:9F:F7:D6:73:9C:CE:F6:A5:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fb25f09-19c3-3dd4-aa6f-58d0b84a4a66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:0d:ca:36:f2:80:6d:ea:4e:eb:fc:d6:0f:f9:80:e7:26:f2:
a6:ba:55:d1:74:c1:53:77:11:40:f7:4f:6d:8d:c6:46:cc:d2:
01:7c:0c:b6:cb:17:65:31:37:c4:91:ea:73:b2:d5:37:93:e7:
bc:14:91:5a:12:25:85:00:b2:46:3f:e4:86:f2:e6:31:5e:b8:
de:3f:81:09:4c:ac:aa:de:f4:d9:71:b8:20:7b:db:3f:d5:68:
51:c0:23:b9:f3:d2:45:e9:a4:44:c0:03:ce:8b:02:ab:05:c2:
f4:c9:50:22:c2:21:62:b4:86:49:70:f9:52:3e:2c:39:96:d3:
0c:f4:a5:84:a9:4d:91:7f:23:ce:e2:8e:10:73:62:7d:ae:d3:
bf:18:16:64:8b:bc:0b:b8:be:67:89:95:78:ea:c3:94:d6:ce:
14:c9:97:95:af:ab:22:52:da:cb:84:08:de:d4:e9:01:e1:5a:
c1:aa:9c:bd:04:a0:7c:2c:d7:64:78:9e:6e:34:01:c5:bd:5f:
e9:c3:4f:93:16:0e:f4:97:b9:92:01:e7:71:e6:bd:07:37:cd:
b1:13:d4:4e:25:0f:05:7c:37:71:8d:6a:bc:82:fc:12:38:dc:
ab:ad:0e:04:57:e8:3d:6b:a7:ea:69:f4:28:b5:9b:79:18:f4:
a5:37:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:11 2025 by rpki-client