Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b7a84b-b8ee-3b07-a7c9-08607254e55d.roa
File: b2b7a84b-b8ee-3b07-a7c9-08607254e55d.roa (raw, json)
Hash identifier: Az64vCiyUEgnw4BH1kVvzKQ45W16uLHC9sdnx/WCKh4=
Subject key identifier: DC:F7:6E:BC:37:A8:EA:56:96:3D:BB:F8:69:14:FB:94:2E:BF:E0:FA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842A739226EACCE21E961972600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b7a84b-b8ee-3b07-a7c9-08607254e55d.roa
Signing time: Mon 24 Jul 2023 13:00:19 +0000
ROA not before: Mon 24 Jul 2023 13:00:19 +0000
ROA not after: Sun 22 Oct 2023 13:00:19 +0000
asID: 54600
IP address blocks: 166.1.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a7:39:22:6e:ac:ce:21:e9:61:97:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 24 13:00:19 2023 GMT
Not After : Oct 22 13:00:19 2023 GMT
Subject: CN=0edb3263-24de-4b8a-a59e-9b8ba55d205f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:fa:3a:03:0e:f2:58:8d:28:9e:1f:88:2a:
19:06:30:c3:e3:04:7d:63:a4:82:1c:82:eb:78:45:
e5:e1:88:70:a8:02:2b:2a:1f:54:9a:24:96:d0:ca:
b4:16:45:71:ef:bd:d2:c5:86:34:4e:ed:bf:2b:04:
7d:f6:0b:90:c7:e0:46:ae:76:03:d8:c8:9a:80:5c:
bd:a4:27:db:27:db:a8:73:24:15:a7:36:08:80:9e:
ae:db:51:f8:d1:fd:a0:e4:b3:9c:99:1e:21:1c:7a:
30:72:34:91:7a:fe:c7:7f:b0:e4:28:c1:73:2a:bc:
3d:82:7b:38:d2:b5:33:c9:64:85:cf:01:c0:d5:be:
62:ed:96:83:38:ca:e5:40:3e:bf:a0:53:f4:4c:d9:
74:d5:9e:f7:d1:70:4e:94:9d:dd:bb:e2:73:d4:48:
8c:42:94:c0:02:98:1f:4d:bb:33:3f:92:39:53:94:
24:6f:49:d6:cd:ab:a8:ac:75:b9:fd:44:d6:57:1e:
8e:ba:6c:a7:55:86:68:d0:d1:34:62:a1:f1:20:8d:
05:ea:03:22:cf:4e:28:75:ae:c1:3f:ca:8b:28:89:
62:00:07:7d:27:73:e1:f4:38:6d:e3:39:25:42:6f:
d9:5c:83:ed:70:ff:9d:4d:e9:1d:7e:26:b5:4b:e0:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:6E:BC:37:A8:EA:56:96:3D:BB:F8:69:14:FB:94:2E:BF:E0:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b2b7a84b-b8ee-3b07-a7c9-08607254e55d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:44:89:84:50:78:fc:c0:cc:3a:15:24:27:38:31:83:75:00:
15:34:2c:2e:12:38:19:d9:86:df:1d:98:01:0c:ae:e5:0d:bb:
43:10:98:7e:45:05:8e:4d:44:de:05:92:e5:40:ba:7f:0a:0d:
aa:ff:f3:9d:29:87:92:76:00:fe:64:ea:16:3e:30:d5:4c:6d:
88:0f:5f:24:fc:f2:c2:8a:32:40:47:32:43:41:da:fe:d4:6c:
3f:9a:29:4f:d4:df:7c:17:ac:dd:0d:a8:cd:30:ca:eb:86:47:
32:e0:af:59:0d:37:56:44:49:09:b8:24:d7:c5:8d:46:2a:cd:
1b:0a:29:fc:93:4d:1f:52:9c:69:33:9a:e2:d7:9c:c8:76:11:
85:0f:ef:72:44:d0:71:ba:bb:c7:82:fd:4a:13:4a:a1:2a:19:
9c:4e:1b:6b:23:4e:72:9a:bc:ec:0f:94:b5:65:44:91:74:c2:
34:06:50:d9:f9:b7:c0:7d:08:b4:b8:dd:cd:ad:99:2b:19:ff:
e6:66:a6:b1:17:a2:14:4e:f8:ff:cd:b9:b6:70:0c:6f:3e:93:
4c:69:94:13:df:cc:8d:10:8f:c8:03:d4:8d:fe:96:68:b2:f7:
d5:7d:43:f1:94:10:c0:0d:0d:b2:31:fd:2d:7d:31:34:2e:53:
dd:b1:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 02:45:24 2025 by rpki-client