Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc4e7318-ae35-335f-8390-5d1cb54c800d.roa
File: cc4e7318-ae35-335f-8390-5d1cb54c800d.roa (raw, json)
Hash identifier: YLkm3qn3tBlxAcIj80dChbF1X6lBNnIE0shz8WGYDFE=
Subject key identifier: 66:D6:5C:41:0E:9F:23:D6:0D:24:D9:B7:6C:ED:74:97:EC:7B:24:BD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842AE33D526B0F382406EE30E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc4e7318-ae35-335f-8390-5d1cb54c800d.roa
Signing time: Thu 27 Jul 2023 01:00:17 +0000
ROA not before: Thu 27 Jul 2023 01:00:17 +0000
ROA not after: Wed 25 Oct 2023 01:00:17 +0000
asID: 399471
IP address blocks: 166.1.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ae:33:d5:26:b0:f3:82:40:6e:e3:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 27 01:00:17 2023 GMT
Not After : Oct 25 01:00:17 2023 GMT
Subject: CN=ff947033-c176-469b-923f-da793418b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:94:1a:57:b1:e0:3b:64:45:8d:59:3a:d2:
7c:5b:ca:b2:89:1e:8c:4b:53:0a:7e:c1:32:e1:6a:
67:2a:08:8f:4b:53:09:7c:80:85:7b:b8:d3:ed:48:
68:6d:c3:f4:e7:75:76:65:33:75:e2:1b:7a:98:ed:
6a:30:3b:bd:41:91:71:ea:a8:55:28:7d:8b:87:c2:
41:2a:be:3c:f8:7a:de:48:a2:88:14:f0:9d:62:3e:
22:1e:cc:d7:69:9e:d7:30:99:53:70:d9:a3:80:03:
b5:7c:ab:a2:2e:74:cd:57:30:8a:13:47:af:22:6c:
db:01:78:50:d5:1c:6e:10:f5:9b:c5:ce:4f:f7:29:
36:12:82:ce:35:db:8c:e1:78:28:1b:f7:ad:df:83:
ce:76:02:92:20:00:19:b5:69:24:d4:5c:80:9d:85:
a9:27:c0:eb:25:ef:e7:69:11:13:54:81:bf:42:1f:
fe:28:74:2b:d1:c6:8b:88:60:e9:90:3e:4b:5e:14:
1e:2b:51:1e:8c:5f:38:fa:8a:ae:ce:e8:16:ee:2e:
54:5f:34:d4:30:4c:6c:0e:ee:96:1f:28:64:79:47:
fd:5b:1a:33:82:ac:cb:a2:f1:be:62:35:e1:b7:49:
e4:dc:7d:3e:a2:42:b6:a3:54:04:58:44:f4:46:f8:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:5C:41:0E:9F:23:D6:0D:24:D9:B7:6C:ED:74:97:EC:7B:24:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc4e7318-ae35-335f-8390-5d1cb54c800d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:6d:32:2e:ec:0a:8f:3d:f2:d2:c5:2b:f3:2d:15:f9:00:1f:
8b:e3:72:0f:e8:c9:d8:8a:67:3a:60:a6:06:fb:17:31:2d:b6:
50:56:40:f9:2e:71:9c:17:b7:2a:19:44:f7:40:66:fe:37:ea:
34:8a:20:1d:15:3f:a4:76:17:95:a4:04:ef:85:52:fc:d6:96:
23:e1:e4:a5:78:b2:c2:a9:32:a0:7f:18:a1:2f:55:98:66:16:
ee:dc:fa:ea:5b:38:08:d8:76:a2:b3:ee:67:13:28:04:25:c3:
b1:6b:ca:b5:97:e0:dd:91:b3:02:59:80:98:40:19:7d:32:c7:
33:24:5d:26:0b:df:2a:c8:b9:0e:ca:aa:b2:03:60:48:51:45:
65:55:e3:cd:cf:cf:09:ea:91:25:3a:81:7d:7c:d3:dd:8a:dc:
40:7b:47:36:12:7e:96:1e:0a:ec:58:c6:a2:49:64:cf:07:7d:
0b:54:1a:dc:a7:d6:be:60:fc:e1:7c:4f:76:8c:03:bf:f8:b5:
c1:28:f6:33:8e:eb:93:2c:e2:5e:c1:d3:1b:77:95:99:24:f5:
7a:79:0b:6b:7d:e2:87:0c:c4:0c:5d:1b:4d:15:35:70:5d:a6:
f8:9f:8f:d4:5e:43:dc:0c:41:d3:85:9b:81:9c:b5:44:15:4b:
18:5a:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:25:17 2025 by rpki-client