Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abb395a8-8832-3cd5-867a-5cdfedc11d1f.roa
File: abb395a8-8832-3cd5-867a-5cdfedc11d1f.roa (raw, json)
Hash identifier: bRQup2ISyjL3xcRv0PTLvWM7U5PGqnX+ZSpaqdcnyRA=
Subject key identifier: 25:9D:A5:93:5C:A5:36:66:4D:D9:07:06:DE:37:EA:76:62:F2:49:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858424B8EBA4E1D74C48577325280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abb395a8-8832-3cd5-867a-5cdfedc11d1f.roa
Signing time: Wed 21 Jun 2023 16:58:28 +0000
ROA not before: Wed 21 Jun 2023 16:58:28 +0000
ROA not after: Tue 19 Sep 2023 16:58:28 +0000
asID: 51722
IP address blocks: 166.1.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4b:8e:ba:4e:1d:74:c4:85:77:32:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 21 16:58:28 2023 GMT
Not After : Sep 19 16:58:28 2023 GMT
Subject: CN=4c7b3b3c-2c21-4f63-96d5-7c13427f5618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:91:33:4c:a4:e0:8a:1e:26:a8:1d:3d:3d:
d1:66:c8:42:7c:0a:98:86:c9:32:ba:bf:9a:c6:3a:
42:4f:44:1d:3c:e5:74:46:3f:7f:78:52:80:a9:a6:
e8:1f:a5:f2:75:42:ea:2b:d7:7e:2c:05:1b:bc:db:
fc:79:3a:47:ed:a8:ab:bb:5f:65:fc:0f:0a:98:e5:
b8:e4:a0:73:4d:04:ae:5a:53:7e:29:f7:85:d6:e1:
ed:84:e8:4e:6d:32:94:78:99:62:6a:c2:34:f9:c4:
ab:ac:55:30:6a:61:cf:87:26:b2:a0:2c:a9:85:34:
80:7a:5c:f6:12:5b:61:d8:22:31:fc:79:ee:6e:2a:
87:69:36:28:9a:2b:5a:6f:f2:0d:78:20:13:83:45:
96:0c:5b:ad:cc:2e:82:47:7f:19:fb:eb:60:da:28:
7a:03:18:28:7f:64:21:ac:7e:98:d4:1b:a2:10:b1:
35:69:44:54:b8:02:55:47:f9:da:41:c3:4f:64:d6:
9a:5c:e7:b9:69:1e:67:66:e5:b1:1a:19:e0:12:02:
35:f0:d7:c6:72:23:25:5a:a3:39:bf:65:b2:0a:23:
cb:41:1a:5f:44:73:ed:96:d5:8f:b0:b4:93:20:20:
f3:91:e1:04:8c:22:4d:4e:7a:b7:af:2f:1f:b6:1d:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9D:A5:93:5C:A5:36:66:4D:D9:07:06:DE:37:EA:76:62:F2:49:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abb395a8-8832-3cd5-867a-5cdfedc11d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:31:b0:b1:16:1f:07:98:a1:2b:27:6a:dd:f9:96:e2:04:67:
e3:f4:d3:ba:b5:21:e5:18:78:5b:64:44:f7:d3:79:ab:61:de:
ca:88:06:cd:25:ab:72:2c:b5:05:2e:62:07:36:fa:9e:76:58:
16:a7:2c:57:4c:d8:74:67:e8:a9:b5:6c:7a:dc:54:ae:f9:b0:
08:e2:05:79:70:49:57:a7:05:91:c8:c5:30:83:61:c5:dc:4b:
22:63:44:49:f0:d2:64:18:4c:13:eb:69:ef:ea:d4:8c:3c:a6:
41:14:ed:45:c7:f3:c8:08:77:d7:ce:8b:ea:8a:b5:ab:68:e5:
43:91:d6:87:c7:88:ff:99:eb:0a:b6:e8:cc:19:be:69:ec:67:
b8:c4:1e:70:f1:54:a9:91:0f:89:d5:e1:da:1a:43:6e:68:bd:
19:bf:40:22:9b:67:4c:2a:50:d3:6d:15:a5:5a:01:49:41:60:
39:8e:c0:cc:18:0f:dd:c1:13:40:ec:a8:e2:31:19:cf:c9:a8:
85:8d:ec:34:b6:fa:05:2e:8f:0e:2e:f5:01:9f:90:d5:32:b5:
45:45:24:91:ea:07:3a:ed:2d:04:d9:3f:c6:68:8c:3f:ee:39:
ce:c3:d9:24:26:94:d4:86:b1:8c:a1:b9:7d:39:b3:c0:d6:44:
b2:82:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 02:26:35 2025 by rpki-client