Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cce6f31e-3a86-34cd-827d-8726aa05dd55.roa
File: cce6f31e-3a86-34cd-827d-8726aa05dd55.roa (raw, json)
Hash identifier: 2M0jpFxNUKoRfOuHtjSbp8UZjlI7lycB3za1OQoFOAI=
Subject key identifier: 3D:5C:10:19:08:2B:68:E9:AD:E9:49:F0:FC:32:8F:F4:61:BB:59:2B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858437C12FA53BEB13A36241A1C20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cce6f31e-3a86-34cd-827d-8726aa05dd55.roa
Signing time: Sun 08 Oct 2023 18:50:40 +0000
ROA not before: Sun 08 Oct 2023 18:50:40 +0000
ROA not after: Sat 06 Jan 2024 19:50:40 +0000
asID: 11798
IP address blocks: 166.1.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:7c:12:fa:53:be:b1:3a:36:24:1a:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 8 18:50:40 2023 GMT
Not After : Jan 6 19:50:40 2024 GMT
Subject: CN=9966d6c1-0324-4567-8cd0-0305d6eed59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:03:db:00:58:00:0a:51:0e:59:1c:76:e7:
2c:87:8d:ea:d3:26:91:20:a4:9b:fc:22:a7:99:1b:
72:5e:2b:d4:53:53:61:86:73:10:bb:8d:98:7d:98:
ef:2a:cf:f5:b2:a3:83:cc:70:35:eb:f8:12:6f:fa:
3e:94:4a:2b:79:95:47:0a:b5:ce:4e:1f:e8:3b:d9:
97:36:60:d8:b3:21:87:57:14:52:3d:ec:04:d3:7b:
1f:65:9d:bf:97:99:ca:14:e5:3a:ac:85:5a:55:09:
09:80:1d:26:43:e2:08:af:24:35:ac:74:b6:45:b0:
2f:32:5e:5b:57:85:9a:4f:c0:23:21:bb:48:20:a3:
ea:20:bb:7e:2b:37:ce:e9:4b:cc:1a:0b:3e:90:44:
39:97:96:16:0c:01:72:44:81:1e:54:45:de:dc:c6:
04:56:3a:0c:63:d3:50:0e:be:6d:17:99:d9:c4:e4:
ef:f3:9d:14:64:23:36:79:b9:95:9a:86:89:bb:88:
bd:51:81:a8:e1:a5:81:88:7c:d2:32:1d:ed:3e:2a:
57:94:93:f4:b6:40:38:a5:26:13:14:04:d6:76:85:
8c:96:6d:48:36:c3:3c:1c:85:cb:c2:48:97:27:58:
19:7a:1b:2f:59:cf:39:21:04:ff:c2:3d:95:4d:34:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:10:19:08:2B:68:E9:AD:E9:49:F0:FC:32:8F:F4:61:BB:59:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cce6f31e-3a86-34cd-827d-8726aa05dd55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c4:c7:0b:3a:7d:a9:ee:36:c8:44:a8:8c:98:91:c8:11:ea:
1a:3a:9f:3b:dc:57:e7:6a:90:30:7b:f4:2f:a6:9d:ec:d3:11:
9e:47:cb:d9:5e:b7:1b:0a:4a:68:57:9f:d9:4f:ea:88:3d:fc:
74:c6:60:ba:7b:3f:53:e9:1f:95:8c:a1:5e:f2:21:89:7f:91:
a4:6c:e0:4b:85:52:df:12:4e:ba:26:56:8d:f0:cd:24:cd:17:
9c:81:fa:01:bf:d6:4c:fa:85:37:81:77:dd:a7:8f:ad:33:c4:
a6:48:e9:30:fd:73:e5:20:a9:31:5d:4a:fe:70:f0:48:5d:d1:
f4:94:c1:b3:7f:66:f8:7a:e8:92:58:13:69:fe:a2:cf:5a:0c:
d8:a2:50:07:34:df:45:61:4f:bb:09:d6:c5:88:09:93:6c:ca:
68:d3:b5:d7:3d:0b:62:a4:d3:92:7e:bf:0a:9e:52:db:ab:8a:
3a:06:ff:35:41:53:27:b9:38:ce:7f:b8:1f:4b:54:a4:96:f4:
e4:fc:ef:df:42:7d:ba:84:11:c6:2a:ab:cb:e8:59:34:14:af:
7d:59:87:12:39:7d:5e:98:be:5c:b0:96:fb:5b:b6:b3:07:bd:
3c:72:1e:bb:ae:28:13:cb:12:f4:e0:72:96:3d:a2:29:98:e3:
96:63:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:32 2025 by rpki-client