Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd461b26-2a7e-3b27-842f-55e1fc6d16b1.roa
File: bd461b26-2a7e-3b27-842f-55e1fc6d16b1.roa (raw, json)
Hash identifier: hQp6LR3u6QPZLOND/Pnngqh46mtMLWRu2ijshY245jU=
Subject key identifier: C0:D4:39:AD:09:AD:B8:CA:B3:BD:BA:9A:9C:61:5E:EB:43:8E:08:24
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843D4D8D750DDBBD450952A0C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd461b26-2a7e-3b27-842f-55e1fc6d16b1.roa
Signing time: Thu 09 Nov 2023 14:00:20 +0000
ROA not before: Thu 09 Nov 2023 14:00:20 +0000
ROA not after: Wed 07 Feb 2024 14:00:20 +0000
asID: 834
IP address blocks: 166.0.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d4:d8:d7:50:dd:bb:d4:50:95:2a:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 9 14:00:20 2023 GMT
Not After : Feb 7 14:00:20 2024 GMT
Subject: CN=47d4b952-7e73-4254-802f-f64dddfd8a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4c:e4:88:49:e9:46:ce:5a:66:1c:66:b6:ce:
4c:e4:23:2c:a1:f4:ae:f6:be:d1:58:f3:92:84:72:
ad:e1:41:59:00:e1:ee:80:ad:54:21:e9:dc:47:5f:
f0:a5:89:e4:26:2a:79:1e:04:7c:00:5d:5d:21:a0:
b4:04:53:ae:12:37:70:dd:1d:9c:30:65:48:e4:b9:
40:73:57:40:35:fd:37:d5:9b:3b:43:fb:4f:98:3e:
43:88:80:55:da:39:26:c2:be:9f:c0:80:04:62:ed:
a6:e2:fd:c0:52:d3:35:0d:b8:aa:19:8d:47:9d:b4:
35:31:ff:50:10:70:96:68:c0:65:ee:41:9b:53:18:
28:64:0c:c5:1f:9d:d9:fe:52:9f:ba:dc:04:56:a3:
d1:01:53:2e:74:e8:03:37:e2:65:68:f4:80:de:81:
8c:9e:5b:90:c0:74:ee:09:9b:9c:b3:f7:3d:88:77:
a1:8b:63:91:47:1a:24:9e:36:2d:b6:c4:8d:06:67:
a6:fd:f2:da:01:7f:62:d7:4b:c4:04:94:34:f9:b3:
b2:49:4c:7b:03:3f:bd:04:d2:c4:0b:40:7f:1e:16:
a8:10:d5:ff:71:2d:05:b7:25:95:f7:a7:ef:b4:88:
70:f8:8c:72:9d:38:d1:6c:c9:0e:d0:a5:b0:74:6f:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:39:AD:09:AD:B8:CA:B3:BD:BA:9A:9C:61:5E:EB:43:8E:08:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bd461b26-2a7e-3b27-842f-55e1fc6d16b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:4a:f0:4d:15:42:c0:ea:fa:8e:38:03:66:b4:fc:a8:d2:d1:
c7:3b:85:68:17:8b:8b:31:e6:3c:69:c1:66:88:b1:6c:37:a7:
05:52:a2:9d:1c:66:e3:d7:f5:cb:2c:c2:e6:4e:94:30:c1:6d:
16:e9:1b:02:19:bd:2b:0e:2d:43:41:5c:4f:59:91:11:ab:bb:
3c:84:6f:c0:37:2c:cf:02:1d:3a:9f:41:aa:fc:a4:da:a2:ed:
55:cb:cf:27:ae:4d:eb:62:01:f8:3c:1c:bc:7e:19:3d:1f:73:
6f:74:9a:c5:74:9a:bd:6c:1f:74:20:1b:fb:d4:7a:5d:bf:4c:
c0:32:d2:71:1e:6d:f4:60:27:58:81:a0:05:40:d7:c9:6e:94:
b8:e0:a1:14:c3:23:27:dc:66:4c:e9:e2:11:f6:15:1b:c5:30:
ef:61:0d:6c:16:ca:ff:26:2e:cd:0c:ed:9b:15:da:04:26:61:
dc:c8:5b:99:27:d7:f7:bd:f3:eb:66:13:ad:93:4e:71:90:88:
f0:c7:df:d4:78:cc:05:b0:09:4c:b0:6f:17:df:f3:8f:16:3d:
20:31:01:04:12:60:fd:70:83:8c:ab:e5:50:5c:6c:d5:7d:a8:
4b:98:92:1c:aa:bb:32:16:d4:66:09:0d:c5:5e:93:de:88:55:
69:33:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:45:00 2025 by rpki-client