Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c438c893-cff0-34aa-9971-2e9125b01ea6.roa
File: c438c893-cff0-34aa-9971-2e9125b01ea6.roa (raw, json)
Hash identifier: 8LKgq55RMcU/NChoEKyYHJa4JdOFLeVaEL2ms6ghor4=
Subject key identifier: 9A:34:EA:DD:7F:1E:66:2B:62:9F:CA:99:49:7E:E9:C7:A9:84:A2:20
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583A55AAE3ACB7660144C40AFF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c438c893-cff0-34aa-9971-2e9125b01ea6.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sun 24 Sep 2023 04:00:00 +0000
asID: 25369
IP address blocks: 166.0.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:55:aa:e3:ac:b7:66:01:44:c4:0a:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Sep 24 04:00:00 2023 GMT
Subject: CN=bb83b584-ca66-4744-9b21-4e4eb92fd379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:2a:9e:92:ff:eb:44:0d:8c:1b:b6:cd:02:
ee:5a:a6:c7:9b:c5:ac:e8:f5:6e:f6:44:51:9d:48:
93:6a:44:02:8e:fd:cb:c3:25:fe:73:31:03:40:99:
9b:0f:3c:eb:b0:51:10:8e:24:0c:78:2e:0c:b3:37:
f7:94:24:a5:b3:30:97:fe:b6:ab:68:2b:24:ec:43:
99:c4:bc:0f:db:6b:10:d2:6b:9e:1c:9f:10:6d:ed:
80:12:93:95:32:c5:ee:0a:4b:7d:e2:fe:f1:e0:f2:
e8:fc:af:d8:b9:40:7a:18:8e:53:88:90:95:70:52:
ec:96:c1:b2:42:ae:44:87:6b:93:2f:89:18:d3:e2:
fc:bf:2b:f6:9b:86:66:ac:41:de:73:0f:4b:a0:ac:
88:ea:57:da:fb:80:29:62:68:89:dc:cf:89:51:a8:
12:82:eb:bb:6a:85:22:87:26:5a:08:4e:11:63:52:
21:ef:2f:96:c5:9b:d2:97:84:5e:8a:8e:8e:05:d9:
30:b4:b9:72:41:60:d7:d5:07:9f:49:ec:67:e6:5c:
2f:71:c9:26:f7:1f:4d:75:50:b3:d1:6b:7a:c8:97:
80:77:28:35:df:16:fc:ff:ba:18:4e:7d:33:97:62:
93:28:e5:70:63:f7:fb:46:9c:68:53:8c:4e:43:cf:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:EA:DD:7F:1E:66:2B:62:9F:CA:99:49:7E:E9:C7:A9:84:A2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c438c893-cff0-34aa-9971-2e9125b01ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b3:99:95:c4:b0:47:95:47:31:f0:d0:20:2a:bd:44:41:4a:
0f:10:54:f7:c5:b2:ed:42:1d:10:b3:27:c4:35:0d:10:b8:66:
a8:cb:24:dd:42:b0:8e:a6:3c:52:73:b9:1e:cc:ae:75:85:9f:
a0:f9:1f:a6:36:a3:f8:2a:ac:f6:79:bd:e6:40:ef:d1:e7:64:
39:1b:44:bb:d5:df:6a:63:9e:2e:ed:8a:74:aa:b2:67:6e:d5:
23:0f:d9:fa:0d:80:9b:0a:27:74:d8:42:ee:32:10:9b:5e:bc:
75:94:df:65:92:99:44:12:f9:1c:3c:55:c1:b1:e0:88:9c:a6:
c0:66:b1:76:07:c5:94:03:27:6c:a1:12:51:ec:38:49:e2:23:
f3:1d:31:b2:49:39:e1:b5:9a:bf:4a:8b:a2:c8:80:9e:05:4b:
35:7b:d2:cc:de:7e:5c:30:33:8d:2c:35:65:22:21:f7:bf:39:
53:87:12:6a:20:eb:f7:60:b5:c7:d6:1e:bd:09:17:f4:4c:50:
90:28:9d:14:37:6b:3a:eb:90:42:45:e0:2d:91:1e:3e:91:8c:
7c:27:e0:7d:0f:13:45:4e:fa:3a:f4:c1:b4:d7:6e:b4:1f:0e:
64:52:0d:71:63:59:8d:6f:8d:19:00:5b:0d:a0:95:41:07:46:
5d:f3:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 15:13:29 2025 by rpki-client