Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc7ff73e-86de-36be-8a10-57f02911d62c.roa
File: cc7ff73e-86de-36be-8a10-57f02911d62c.roa (raw, json)
Hash identifier: uhKXvUVg7wlJDM3m/1EilKv7zp31S5HmPEKMJawlOy0=
Subject key identifier: 4D:F1:62:D1:3F:2C:48:84:78:D6:9F:0B:DF:6E:B4:64:3E:EA:3B:08
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847C2F4F58282AFE258CE5ABC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc7ff73e-86de-36be-8a10-57f02911d62c.roa
Signing time: Sun 03 Nov 2024 23:20:20 +0000
ROA not before: Sun 03 Nov 2024 23:20:20 +0000
ROA not after: Sat 01 Feb 2025 23:20:20 +0000
asID: 834
IP address blocks: 166.0.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c2:f4:f5:82:82:af:e2:58:ce:5a:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 3 23:20:20 2024 GMT
Not After : Feb 1 23:20:20 2025 GMT
Subject: CN=1ec94ef4-c6c4-4d07-8c72-8b6c20c02b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:4f:b6:ec:8e:e7:db:14:fb:e0:da:62:dc:
ce:8c:1a:38:56:28:be:33:3c:6b:5b:81:04:f7:5c:
91:3f:98:ba:1d:e5:b3:81:c5:ff:41:29:5a:0f:88:
1a:20:3a:5e:a0:6d:99:b5:ed:74:44:e7:ff:32:0d:
9b:c0:19:62:a5:7c:48:fd:8c:e4:21:24:37:b4:60:
f9:3b:b7:4f:e5:91:10:b1:37:9e:97:f4:48:3e:8d:
d6:7d:49:76:b8:ea:ed:91:73:a4:07:21:b2:d5:c9:
5e:22:82:5f:b2:06:f1:5d:f1:b8:ff:6d:29:7b:02:
c3:ad:f6:f0:fc:2c:8b:b7:42:b9:61:b2:c6:37:d1:
f9:5d:a6:ca:87:63:da:f5:0d:cb:55:24:66:c3:4b:
ef:8a:7d:82:06:40:6e:7e:80:d7:fe:90:cf:fa:f1:
0c:cd:b2:57:c8:3d:dc:5d:2a:6c:42:61:ff:bb:cb:
06:39:b4:3d:13:0d:90:51:05:a7:9c:4b:d5:97:42:
3d:99:6e:17:85:16:b7:12:63:51:6d:00:4b:f3:ff:
e9:2e:84:68:64:29:8a:48:3a:a6:29:34:c0:5a:80:
02:d9:a1:d6:43:be:5d:0d:6b:64:70:f6:49:ee:54:
d9:72:24:6f:d8:c2:56:61:0e:32:63:8b:a1:55:34:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:62:D1:3F:2C:48:84:78:D6:9F:0B:DF:6E:B4:64:3E:EA:3B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc7ff73e-86de-36be-8a10-57f02911d62c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:e0:aa:eb:36:ad:32:6b:ed:dd:63:a6:78:95:56:bc:e2:4f:
04:0a:d7:f5:d9:7c:9c:9f:0b:08:53:2b:78:80:01:f3:5f:eb:
b2:54:3d:5c:34:31:c8:55:a0:bd:7c:68:9e:c4:01:6f:a8:41:
9d:e2:8f:75:69:d5:e2:b9:bb:42:ff:c5:fc:6e:23:9a:e4:a1:
fe:c7:24:82:ed:dd:5c:e8:7a:ee:4c:eb:8d:de:f6:50:1a:21:
44:0c:27:e5:15:6c:10:a1:04:2c:da:80:7c:21:a8:c2:93:bd:
1c:fc:b7:b2:67:72:5e:f0:16:ec:3c:97:50:c1:98:ee:75:6c:
2d:93:f8:b3:4e:83:80:bf:e6:67:74:8d:68:8a:f4:82:3c:c5:
78:b5:9c:1d:d7:fb:2e:5b:9a:36:1d:16:7c:7a:2e:e4:8f:81:
67:0c:15:b9:ca:bf:3c:96:c2:48:53:35:4b:9c:68:c7:6a:b1:
b3:89:0b:0b:e7:33:df:2a:34:be:81:77:c5:90:c2:2f:a1:a8:
2e:c7:3b:c0:03:78:8c:89:53:40:43:35:66:55:37:40:e4:46:
98:a3:c2:41:9c:69:bc:74:c4:7f:f1:b8:0a:6a:ec:cb:56:4d:
a7:e9:0b:aa:26:a4:71:57:e2:8d:a5:98:dd:04:e7:d3:6d:a6:
02:fb:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:33 2025 by rpki-client