Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c76ed431-6000-3686-a578-f160427c1baf.roa
File: c76ed431-6000-3686-a578-f160427c1baf.roa (raw, json)
Hash identifier: LCpMKUnTzq58ejUQSJvfJS8Br1sCwnmHuJsaP90Y15Y=
Subject key identifier: C9:F9:8D:4B:AD:6B:FA:9B:5C:93:D0:F4:C9:6B:A6:01:F1:77:77:74
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F8038C119432C47A450CD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c76ed431-6000-3686-a578-f160427c1baf.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:38:c1:19:43:2c:47:a4:50:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=dba657f1-a71c-4593-aeeb-f78e29d3b0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:89:e7:24:41:2f:b6:f7:30:d9:5e:63:32:a4:
ff:18:4f:1d:3c:ac:09:fe:bf:e7:a4:d2:d4:5b:a4:
ac:7c:c7:e1:2d:1e:ce:0c:ed:0e:43:f9:a4:a1:ec:
c4:e8:d6:8e:1d:de:3b:52:7c:7d:e3:04:c3:c1:db:
f9:d4:3d:47:f3:3d:1f:ae:18:b5:dc:79:cd:29:43:
3b:c6:ef:93:bb:29:de:14:de:7e:59:48:56:af:a8:
6f:ae:b4:f6:08:cb:2d:80:0d:3b:57:b7:bf:56:52:
77:bc:e2:57:f3:67:ff:3c:ee:b6:3f:b0:38:9c:2b:
84:b6:05:c0:9b:b4:d9:24:00:de:7d:c6:2e:7b:28:
b4:43:52:b8:20:53:05:94:e8:4a:78:af:d1:6a:48:
49:7f:0c:40:3d:68:48:fb:28:f5:47:a5:1f:97:43:
cd:95:55:b0:61:17:4d:ac:ed:db:ad:5a:69:18:14:
eb:2d:d6:03:b5:3a:b8:15:3c:9e:1f:aa:54:b5:50:
d9:90:3d:cc:ac:aa:31:30:4b:07:a6:d7:d9:0e:6d:
97:03:64:b2:02:b1:74:86:38:b5:60:0d:02:56:31:
97:5e:c7:90:0a:4e:b2:1f:04:b6:41:ca:a3:e9:72:
46:88:6f:0e:6f:cd:c0:be:81:03:e0:61:c3:e2:8c:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:8D:4B:AD:6B:FA:9B:5C:93:D0:F4:C9:6B:A6:01:F1:77:77:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c76ed431-6000-3686-a578-f160427c1baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:86:28:6b:3a:15:db:97:5b:48:72:04:ad:fe:f1:02:e5:58:
7b:fe:23:73:1a:03:c8:ea:89:cc:87:2b:64:e8:7a:34:6f:72:
82:b6:45:e0:f6:51:b9:6d:23:4f:e7:61:ce:35:76:f3:58:fc:
c1:af:63:0e:05:60:63:a7:e4:33:36:67:bc:bf:d4:f0:df:c5:
34:eb:a5:12:86:25:11:d8:aa:2a:25:26:78:4d:22:93:68:9b:
50:5e:51:da:d4:02:1f:b5:bd:d5:be:c2:b8:e5:e9:f7:2e:a9:
33:59:a6:b0:8c:47:11:48:60:62:fa:2f:9f:1f:3b:d5:1c:64:
26:5d:fc:5a:9d:a4:ac:ee:a1:c5:13:43:c3:bc:67:90:68:04:
f0:15:d3:3e:1d:74:bf:45:1f:00:f0:c2:83:d9:0f:27:b5:a4:
c3:19:1e:0e:eb:49:15:4d:41:06:e5:ea:c5:33:3d:be:e7:47:
15:e7:02:07:98:05:60:e2:fa:82:57:04:e9:69:4b:16:b3:a4:
c0:b9:e4:b3:19:30:45:62:f8:58:71:e4:a0:98:a2:ad:89:ca:
27:90:4e:d9:8b:37:ca:61:aa:64:ad:87:0e:ca:c4:e9:2f:1c:
ab:ca:31:2a:9a:5e:76:6f:e2:b8:0f:6d:2b:fe:be:3b:10:8b:
f5:07:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:40 2025 by rpki-client