Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9f60436-6ffd-3641-ab8e-655d4214c9a3.roa
File: c9f60436-6ffd-3641-ab8e-655d4214c9a3.roa (raw, json)
Hash identifier: syZpj2wjnr9vI9ofMBxa+lzHXDlz4PCowHpx1QvcfkE=
Subject key identifier: 66:F2:A6:6E:AC:C4:96:09:BA:2E:41:AF:44:8F:75:BA:89:D7:99:85
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858453E42AC363F2B065FF7286500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9f60436-6ffd-3641-ab8e-655d4214c9a3.roa
Signing time: Mon 18 Mar 2024 01:00:25 +0000
ROA not before: Mon 18 Mar 2024 01:00:25 +0000
ROA not after: Sun 16 Jun 2024 01:00:25 +0000
asID: 11798
IP address blocks: 166.1.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:3e:42:ac:36:3f:2b:06:5f:f7:28:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 18 01:00:25 2024 GMT
Not After : Jun 16 01:00:25 2024 GMT
Subject: CN=b85e935d-b351-483d-bd34-22916695170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:e0:41:1e:4a:b7:3d:18:69:5b:f0:0c:09:
ae:cc:cd:59:7e:6e:19:20:15:ef:f2:83:ea:46:e7:
fa:cc:ab:3b:d3:b5:74:67:04:5e:6c:13:d2:28:d2:
48:85:5c:e0:bb:0c:95:fe:1a:93:5e:e8:10:3f:56:
ec:8c:91:90:e7:60:68:9e:fe:15:e4:7b:40:97:7a:
5f:30:c1:ff:83:c1:9e:32:d2:65:2e:a9:95:8e:a8:
40:11:2f:d3:6f:8c:4d:8c:74:5d:63:e6:d0:34:9b:
79:07:33:60:82:9c:d9:63:b1:8d:71:dc:1e:01:60:
72:81:d1:20:56:d6:be:e4:11:dc:34:34:f4:b4:38:
2c:b8:36:c6:cb:d1:53:d2:2e:87:90:80:e9:ae:1f:
a9:22:5b:36:98:10:a0:f8:40:e1:31:81:93:47:a4:
2f:ae:15:f2:17:e7:e7:28:6a:63:e7:da:63:71:56:
67:4f:cb:34:4a:fc:9a:a7:18:8d:d0:e3:65:bf:a2:
50:7f:d3:20:bb:43:b0:87:d2:75:69:e6:8c:60:79:
60:08:0e:ba:21:c2:94:43:3f:b9:24:e4:19:84:3d:
e1:4d:ba:79:07:ad:65:2a:a3:41:cb:31:40:3c:65:
0f:aa:86:46:9e:ff:9e:da:4f:f8:cf:55:46:34:81:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:A6:6E:AC:C4:96:09:BA:2E:41:AF:44:8F:75:BA:89:D7:99:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9f60436-6ffd-3641-ab8e-655d4214c9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:b3:69:3e:5b:d6:a5:cd:bc:94:b1:43:26:37:50:f8:bc:85:
61:0f:c2:97:f0:26:db:8b:c6:c1:64:1a:bf:79:a3:8c:2e:e8:
aa:90:cd:34:3f:97:f6:f8:9c:99:46:40:2f:54:80:08:d1:02:
a5:e3:fd:3b:f2:88:5c:21:61:83:4d:e8:c4:c1:85:8e:9e:74:
4e:f6:45:2f:e8:6c:e5:b7:26:89:50:c4:69:af:9c:3e:c0:b6:
61:fc:e7:7b:cb:e3:00:eb:ba:99:62:ed:6c:fe:a0:25:24:67:
c9:39:35:b1:16:0d:87:c7:3f:c0:cc:2d:1d:7c:04:b9:0d:6b:
e2:ba:a6:33:2f:33:37:b9:49:d0:ec:a7:59:9d:17:dc:05:1c:
37:fc:d8:d1:b8:0a:fb:1b:a3:55:e5:f6:56:ae:da:88:79:7e:
31:89:a0:72:d5:6a:32:a0:91:40:8a:0a:de:31:f8:94:d5:41:
35:c2:f3:6a:0b:00:91:bf:29:b0:1d:06:da:48:e2:ec:d7:16:
9d:73:59:36:fb:58:61:7b:62:9a:d0:82:aa:3a:d0:b1:2c:f1:
94:5b:98:bc:dc:a9:54:07:70:c9:b9:50:22:55:26:fb:5d:2b:
c1:96:b7:f4:65:8f:42:56:c1:38:b5:ce:2c:50:c3:a9:23:cb:
96:34:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:49 2025 by rpki-client