Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aba75f72-30a6-3f25-95d7-adf873028160.roa
File: aba75f72-30a6-3f25-95d7-adf873028160.roa (raw, json)
Hash identifier: 3okl9YHiKT9ZdYGoxaxGunjsgRRZKe7vc6WgacKA66E=
Subject key identifier: DC:B0:52:5C:A8:A6:C1:5E:84:45:8B:75:EE:83:25:16:AC:51:7C:78
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843EDF8F87F799C21B2F9068340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aba75f72-30a6-3f25-95d7-adf873028160.roa
Signing time: Sat 18 Nov 2023 14:00:20 +0000
ROA not before: Sat 18 Nov 2023 14:00:20 +0000
ROA not after: Fri 16 Feb 2024 14:00:20 +0000
asID: 834
IP address blocks: 166.0.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ed:f8:f8:7f:79:9c:21:b2:f9:06:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 18 14:00:20 2023 GMT
Not After : Feb 16 14:00:20 2024 GMT
Subject: CN=87eddd83-e3fd-4142-bbb6-992d8dbd906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:f4:d7:93:5f:c3:06:7d:63:0d:d3:f1:d5:
82:08:6b:ef:ed:0e:cd:79:c9:a2:19:0b:6e:30:2e:
88:12:50:ab:81:e0:2a:3e:8d:67:d9:87:f7:46:a9:
fa:76:db:46:e6:f7:3a:c7:65:9f:0f:db:85:96:98:
ba:fb:7a:78:52:bf:ca:8d:47:0e:38:5e:bf:f9:c3:
32:fb:72:fc:97:b4:23:be:d1:a2:5b:a7:86:7f:1f:
ea:d0:bc:26:02:25:dc:90:4b:88:a2:a8:79:88:22:
23:18:40:ba:2c:96:2a:f0:aa:db:7e:bc:20:aa:57:
40:dc:a6:c2:65:18:7b:b4:9f:16:1c:f9:16:63:13:
aa:6c:55:41:e4:c9:5d:19:77:1f:a4:2b:fa:cd:bc:
22:96:e6:1d:e1:82:d5:45:fd:09:99:34:e0:61:e0:
a9:8a:2e:8e:0f:7c:4d:61:15:aa:47:f9:06:d2:f0:
e2:d4:1c:3a:8a:ae:dc:6d:63:9b:20:6b:19:75:8c:
b4:aa:94:60:ef:71:c2:ab:80:8e:82:c0:67:91:6d:
54:3e:b8:49:9c:3a:e4:78:0d:2e:d7:93:2f:45:d2:
81:59:3d:c9:70:02:2d:d6:b0:77:8a:86:54:99:46:
f6:33:19:f3:59:e2:7c:5f:d9:bd:1a:c9:8f:13:dd:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:52:5C:A8:A6:C1:5E:84:45:8B:75:EE:83:25:16:AC:51:7C:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aba75f72-30a6-3f25-95d7-adf873028160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:a2:f3:25:3c:1c:ac:0a:c5:68:e8:39:22:a8:82:b2:bf:ed:
80:29:7d:e7:33:0f:dd:ad:22:26:e0:07:13:32:ac:0d:ae:f0:
64:4c:a8:c0:57:55:e6:17:5f:78:35:4a:b8:4f:c9:b4:15:db:
fc:b0:70:d8:7b:e5:da:b8:c0:3d:de:e9:87:8f:dd:b6:87:4d:
43:e2:0d:78:1d:98:c6:76:02:da:67:c5:70:0d:5c:16:69:ab:
91:82:07:ea:5a:61:57:91:44:89:69:57:a9:1a:0e:f8:b0:af:
00:0c:bf:26:4d:02:2b:9e:3e:c2:9b:6d:97:31:29:d8:04:42:
9f:4f:a9:f6:15:e7:5f:d5:1b:aa:7d:01:41:ba:3b:0a:52:8e:
e7:27:8e:27:33:ed:33:84:9b:52:4c:2f:47:b8:09:e5:5f:ae:
40:35:c3:fe:1c:92:61:21:0b:7b:4f:1d:e5:7c:b5:fc:98:71:
1a:4a:62:cd:ae:6c:ce:34:c7:25:2e:5a:46:15:33:a6:c8:61:
f1:34:5f:b2:e6:1d:3a:03:26:55:60:46:80:5b:a1:3b:40:fe:
d4:af:79:5b:3b:da:f6:74:a1:27:0e:3b:69:c2:f6:3e:90:1a:
83:76:75:0b:65:26:e2:bd:b4:f8:d4:62:3e:77:69:87:46:5d:
fc:b9:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:18:03 2025 by rpki-client