Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca63fa54-9517-3bc4-965d-3be3bdd61b25.roa
File: ca63fa54-9517-3bc4-965d-3be3bdd61b25.roa (raw, json)
Hash identifier: tYYIc5+aL5BmpT6f7qIvRg9loC7h1u0kXiIgxGv79MA=
Subject key identifier: A9:0F:1C:3A:42:F9:9A:16:80:55:1A:D3:E8:AC:12:F6:69:5B:B1:5F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842543A6C792F71CB06DA259900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca63fa54-9517-3bc4-965d-3be3bdd61b25.roa
Signing time: Sat 24 Jun 2023 19:30:53 +0000
ROA not before: Sat 24 Jun 2023 19:30:53 +0000
ROA not after: Fri 22 Sep 2023 19:30:53 +0000
asID: 207633
IP address blocks: 166.1.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:54:3a:6c:79:2f:71:cb:06:da:25:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 24 19:30:53 2023 GMT
Not After : Sep 22 19:30:53 2023 GMT
Subject: CN=cd7ad31f-82df-4800-b19e-5868c3a769b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:9f:23:fb:6a:61:e9:e4:47:4e:70:9e:1d:
d9:ba:25:ef:10:43:01:5a:73:5f:87:50:c3:62:0c:
69:2b:95:c9:7c:bf:be:16:99:fe:b3:e2:0d:c8:61:
1f:41:88:fb:18:d4:95:53:2d:c9:61:f0:59:19:21:
26:6c:c2:f0:0c:b6:03:e9:03:95:6b:33:aa:dd:33:
19:5e:84:9d:f4:ee:a1:d3:ba:7f:2a:48:c5:b8:bf:
67:98:ee:4c:dc:d8:f5:ea:cd:4c:59:6d:99:95:48:
b5:af:26:4b:c5:3f:e4:a1:11:a7:cb:2e:1c:1c:c4:
0b:cf:7a:a4:78:03:a7:90:4f:a6:34:ca:65:86:bc:
9d:7c:02:96:db:27:b4:f3:74:50:3e:36:1c:82:fb:
3b:45:d7:e8:39:6b:fb:ae:da:4a:f5:ac:3b:bb:bd:
20:45:68:d8:de:de:b6:82:a4:72:34:36:e2:4b:cb:
36:cc:c4:07:fd:50:71:98:bf:f0:ce:c9:a3:c4:33:
88:00:1e:5a:76:1a:54:8d:81:33:d2:a6:96:d3:1b:
75:03:72:f3:f3:78:f4:b4:30:1d:c6:01:a8:cc:9d:
50:e3:40:2b:46:18:e3:ec:16:e9:dd:99:4f:c0:79:
54:91:e3:a3:f8:9c:99:fa:1d:1d:51:c5:53:60:72:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:1C:3A:42:F9:9A:16:80:55:1A:D3:E8:AC:12:F6:69:5B:B1:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca63fa54-9517-3bc4-965d-3be3bdd61b25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:ae:44:62:99:b2:7c:df:2f:08:b8:5d:f6:66:9e:ea:0f:1f:
1b:27:7e:6e:e3:6e:a6:73:f1:82:3d:3b:cd:b1:03:e0:13:b2:
35:a9:d8:eb:bc:51:de:32:84:16:c0:81:b2:17:40:00:61:cd:
73:60:25:d8:4c:bd:9a:71:69:55:fa:fe:7d:15:be:4b:41:01:
2b:3c:16:af:b3:0f:b9:96:63:1a:9c:2e:d1:bd:43:c6:d3:8a:
64:ce:52:1a:90:38:83:3e:d2:e3:46:68:21:0b:bc:d6:7f:9a:
b2:64:0d:e5:82:9a:f5:e8:0e:0b:5a:8d:a0:00:87:30:75:7c:
f3:18:a8:df:0c:9f:bd:fd:53:0b:a6:46:ce:b7:c2:9e:61:d6:
2a:b2:dd:58:5b:66:fb:43:98:d0:94:60:e5:2c:31:d8:9d:87:
f5:ba:02:bf:a7:42:8e:2c:c8:17:1f:fe:4e:91:f4:cc:1a:8e:
bf:5f:e4:e5:d0:78:dd:36:92:3a:0b:69:c2:ce:c6:18:08:d1:
31:27:3e:28:50:4d:c0:9c:16:54:d9:56:96:bb:33:3d:74:7d:
5b:05:c8:a8:9f:76:dc:70:9d:84:ba:49:e1:22:85:ec:bf:0c:
2a:4f:14:22:da:f9:c4:4b:e0:93:81:92:b8:7e:23:63:fe:c6:
0a:03:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:20:35 2025 by rpki-client