Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0bbd097-6ae8-3b97-9bae-2dd9689e500c.roa
File: d0bbd097-6ae8-3b97-9bae-2dd9689e500c.roa (raw, json)
Hash identifier: +QvxtvpWEwOARZZwGoJr4ZD6T5DBv7Dx3VZoddrFwIU=
Subject key identifier: 02:99:71:85:87:5F:66:5F:19:0B:68:62:AC:88:31:E4:C5:9A:E2:31
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583B408145C6791B493C56FEF700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0bbd097-6ae8-3b97-9bae-2dd9689e500c.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Sun 17 Dec 2023 05:00:00 +0000
asID: 19437
IP address blocks: 166.1.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:40:81:45:c6:79:1b:49:3c:56:fe:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Dec 17 05:00:00 2023 GMT
Subject: CN=c817e106-1348-4777-8544-41784faad18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:66:dd:0e:de:dd:e4:b8:d3:49:87:ab:03:
e0:03:82:eb:c4:0f:0f:4b:03:e5:97:08:6e:17:96:
be:09:30:5d:33:84:d4:e5:7d:80:39:34:7d:8a:e9:
0f:98:6b:3a:39:52:b3:b1:b2:e8:b3:0a:df:0b:02:
10:b1:a1:1d:a2:0e:24:84:2a:9f:ac:d6:c5:37:61:
62:89:a1:a8:f4:51:bb:c3:fb:e2:a7:43:ae:59:b3:
0c:6e:81:3b:e9:69:23:33:ed:26:00:d4:14:b6:4a:
a5:32:49:b2:d3:77:31:4f:cc:7f:0b:47:e8:ce:6e:
3f:ed:76:90:b8:53:a1:47:71:e0:64:b1:af:97:9d:
f7:b3:14:17:6f:78:d7:7b:1a:dd:6d:c9:b8:ee:48:
00:fe:44:06:30:03:b0:dd:12:02:82:cc:4b:73:2f:
51:d2:b7:36:03:0f:4f:89:a7:a9:f9:dc:f8:37:84:
ca:a1:1b:be:09:43:0a:1d:db:30:a7:26:1e:de:0c:
90:d6:61:38:45:e0:df:b9:53:53:1e:5f:a5:1f:81:
f8:44:f5:89:4f:35:91:4d:4d:d2:13:57:39:9d:15:
2f:71:a3:bb:2b:42:ec:4d:e7:bf:f3:ab:d4:67:69:
98:47:4b:01:8d:73:cf:95:da:c9:e4:36:0b:d7:dc:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:71:85:87:5F:66:5F:19:0B:68:62:AC:88:31:E4:C5:9A:E2:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0bbd097-6ae8-3b97-9bae-2dd9689e500c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:35:2c:f1:1c:bd:e3:c6:9a:6a:22:41:ba:b3:dd:bd:a1:78:
b6:74:21:04:11:4b:24:14:9c:33:fd:a0:62:2d:2d:b1:d1:09:
a2:49:fb:6b:ca:da:3e:fc:2e:88:ba:9e:b3:bf:5b:0f:b2:7b:
4f:1e:52:ea:a8:16:b2:c2:2d:6a:9d:d4:b6:fb:e5:bf:43:28:
bd:21:6d:3a:64:6b:f6:d6:c7:12:53:a2:ed:ff:66:e1:e4:86:
e5:cf:15:11:d7:03:a8:77:f8:1a:16:77:8a:3a:2a:16:1d:01:
b4:f7:38:72:a5:af:30:5f:ba:86:f4:f0:15:4c:69:e4:ee:ae:
50:1c:7b:6e:87:dd:13:ab:0a:7c:99:14:ee:92:02:af:2c:f6:
6d:4a:0b:e0:12:7c:1d:b5:b7:b0:9e:48:d7:e3:51:5a:31:50:
e2:e2:82:c2:38:0d:b5:9d:4c:09:06:8e:c5:14:20:8d:27:e9:
2a:f4:ed:c4:37:72:86:df:44:c4:57:6e:5f:70:11:77:d5:e6:
dc:a5:71:f1:71:95:67:7f:7e:a7:f1:90:ee:dc:ff:e6:de:54:
a9:4f:24:fb:63:ee:d1:3f:d8:8f:9b:26:f2:dd:d5:a7:27:64:
e8:26:ac:f0:c2:05:9f:34:7d:22:66:39:64:62:f7:af:17:aa:
3d:d1:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:28 2025 by rpki-client