Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca0b5255-7cc3-38fe-ad8b-a99a556bbcdd.roa
File: ca0b5255-7cc3-38fe-ad8b-a99a556bbcdd.roa (raw, json)
Hash identifier: MXDNH4ipaTJYgsuTVmFYA4LFQUwJny0ZCUQedztSofg=
Subject key identifier: E3:64:38:ED:5F:3B:91:A0:4C:0E:54:2D:9A:33:03:A1:10:EF:A1:1D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858422A0222D72AEF0956C0B53F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca0b5255-7cc3-38fe-ad8b-a99a556bbcdd.roa
Signing time: Fri 09 Jun 2023 16:33:31 +0000
ROA not before: Fri 09 Jun 2023 16:33:31 +0000
ROA not after: Thu 07 Sep 2023 16:33:31 +0000
asID: 51082
IP address blocks: 166.0.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2a:02:22:d7:2a:ef:09:56:c0:b5:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 9 16:33:31 2023 GMT
Not After : Sep 7 16:33:31 2023 GMT
Subject: CN=9f9eceed-b856-40a8-8bec-08470a46ddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:39:9b:ae:67:b3:ec:ba:ac:81:bf:e9:ad:
d3:90:90:22:5b:84:82:13:31:ff:2e:5c:26:11:aa:
ce:03:bd:f3:b1:ec:44:ec:df:12:77:f0:db:54:4d:
dc:80:93:b7:b6:2f:f6:1a:78:0d:ae:57:09:32:7b:
3a:9b:da:1b:24:52:9a:5c:0d:09:ba:23:fb:ca:aa:
d1:07:4f:de:21:a0:59:35:75:5f:71:9c:8d:85:de:
0b:e9:5e:ca:b7:0d:ed:0d:36:c4:6b:00:7c:87:a1:
20:9e:51:e0:c9:33:dd:6a:5f:8a:06:ce:31:44:20:
30:ce:f0:64:c6:33:37:24:7d:97:0f:6a:38:61:42:
36:08:df:fc:6f:d1:d0:15:f5:54:ed:21:14:21:69:
32:05:4e:eb:5a:55:69:63:77:53:b1:1a:45:37:c4:
13:d7:1e:4f:a5:22:b7:48:7e:e4:3a:15:6d:2e:ac:
b5:80:83:7e:12:39:13:0b:4b:28:c2:0c:e3:44:1e:
7a:73:59:bb:5e:b0:e1:b0:a5:e5:2c:18:15:51:92:
ce:fd:8c:3c:ba:6a:56:4b:59:0a:32:cf:af:93:6e:
d2:e6:3d:bb:34:24:61:45:bd:41:94:1d:f6:ca:49:
04:47:eb:7c:9d:38:9d:c1:ed:01:a1:c5:cb:26:c7:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:38:ED:5F:3B:91:A0:4C:0E:54:2D:9A:33:03:A1:10:EF:A1:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca0b5255-7cc3-38fe-ad8b-a99a556bbcdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:00:a7:ce:97:92:d7:03:0d:65:9f:2d:17:ff:c5:88:48:13:
40:f9:7c:b3:72:09:00:9a:ba:97:f1:34:f9:99:a4:5d:0b:02:
f7:4d:b5:49:82:e7:45:16:8e:4a:dc:1e:35:bd:71:23:65:51:
d2:0e:d2:59:e1:6f:25:bd:0d:23:39:58:12:f3:7a:3e:94:a4:
5a:db:81:b6:96:b2:14:22:37:20:db:c9:7f:d7:37:7d:27:d3:
e2:00:96:de:ce:11:f6:cf:6d:20:95:51:d4:0f:40:8f:cd:6a:
73:09:fd:aa:1d:6d:88:65:53:83:09:29:b9:6a:4a:1b:8f:d5:
7a:e5:38:d0:50:cf:6f:ab:08:9c:4d:ed:fb:2d:03:8d:a2:9f:
59:7f:05:1b:40:d4:62:05:49:9b:37:28:7f:d9:61:84:3f:43:
34:c1:c0:01:e2:5e:29:00:c0:2d:e7:44:01:8c:a7:c9:73:48:
58:df:f2:e0:ff:07:21:97:ad:ea:37:bc:56:8a:2a:7b:8b:69:
e9:97:75:dd:56:97:53:01:7a:19:e1:08:b8:4a:1c:62:d4:60:
0a:93:77:dd:3c:f2:6b:ed:2b:72:fa:0e:82:8c:65:65:59:6f:
2d:8d:0b:d4:d2:6a:9f:66:1b:a8:50:c8:1f:d6:14:33:38:2a:
64:56:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:29 2025 by rpki-client