Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa
File: d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa (raw, json)
Hash identifier: QoykOrPp3wSba3Tjgp/6hZbUYXoFzHqjgFOkanWCMRw=
Subject key identifier: 54:26:11:8E:C0:3B:BC:BC:5F:83:31:16:0E:CF:6E:97:7B:2F:52:BB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845E193C5385F2CC883ED89D200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa
Signing time: Wed 15 May 2024 13:00:34 +0000
ROA not before: Wed 15 May 2024 13:00:34 +0000
ROA not after: Tue 13 Aug 2024 13:00:34 +0000
asID: 8100
IP address blocks: 166.0.254.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:e1:93:c5:38:5f:2c:c8:83:ed:89:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 13:00:34 2024 GMT
Not After : Aug 13 13:00:34 2024 GMT
Subject: CN=bb170fb6-cba5-42a3-814c-cd7d5549c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:2c:42:28:8b:81:5d:9b:b0:e5:dc:00:61:
2e:21:e0:36:5b:e2:ff:bd:01:fb:21:21:8e:06:a8:
42:1a:be:33:60:9b:88:8d:e6:2d:bb:47:6d:d7:5e:
fa:d3:04:ef:44:65:c0:10:be:b1:45:19:f9:92:4b:
75:dd:9b:bd:44:92:4f:72:55:67:46:cf:ca:70:8a:
bb:fd:53:00:05:4e:d4:b4:cc:c4:22:99:2b:16:67:
3d:5d:cc:1f:4e:6a:14:25:8f:6d:12:7e:af:bc:0d:
32:e4:18:3e:ac:11:91:18:16:cf:4d:c1:67:a2:3d:
27:f2:30:e0:9a:a9:5d:8f:d3:46:47:92:8c:fc:9c:
cc:eb:b1:35:ef:54:85:d0:35:d8:cd:97:29:8e:0c:
23:12:5d:d3:b1:10:25:d3:fc:e4:ec:21:37:0c:42:
e4:55:9b:f5:e9:5a:37:a5:44:52:78:2f:4c:ad:55:
7c:87:a5:4d:e2:f7:99:91:50:79:ec:28:86:cf:54:
cd:95:eb:6e:67:d2:b0:58:49:7c:f7:11:6a:06:1d:
17:0a:02:8c:2c:b3:0d:7e:e8:9b:cc:38:fe:32:7e:
6b:81:f1:0d:f2:31:d7:07:38:00:79:88:3b:37:bf:
9c:f4:2c:3a:38:44:16:ea:01:a5:94:dd:db:61:7c:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:11:8E:C0:3B:BC:BC:5F:83:31:16:0E:CF:6E:97:7B:2F:52:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1446bf0-aafc-3d97-873c-d7c1ca0d849e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b5:a8:0e:c5:98:eb:53:3b:d3:65:a8:3c:5a:14:59:cc:4f:
97:00:de:c6:94:17:a1:d7:54:0d:fc:7b:e1:bb:f2:67:ec:82:
bd:6f:8e:fa:59:c0:19:c5:31:f9:6a:ce:ab:56:bb:ad:61:d5:
5c:b0:32:a8:4f:c5:96:d6:75:69:33:d9:73:0b:b2:f0:da:fd:
0a:c7:a0:4d:cc:8d:bc:e2:93:0c:3f:fc:ee:a3:31:b2:62:33:
8f:a6:43:94:5a:30:4c:bd:dc:f9:99:1c:52:5d:52:01:18:aa:
34:69:0f:c4:ad:32:af:17:49:7d:e9:cc:7f:0c:1c:ea:0e:bd:
ca:13:a0:98:d5:92:d5:85:fe:12:76:ae:6b:91:6b:f3:05:7a:
47:89:bb:80:0a:77:b8:d9:f2:45:4e:52:66:8c:5e:18:cc:a2:
77:07:aa:c7:c9:68:fd:60:24:4d:16:33:52:0c:00:cd:fd:d3:
58:27:55:5b:3b:26:63:88:9b:99:41:3c:18:66:aa:2a:28:9d:
0c:93:83:29:e0:24:74:ac:f7:b9:89:ac:72:8d:e1:29:fb:66:
eb:c1:56:7a:67:fc:07:c8:3d:66:55:44:d4:b0:70:a3:f0:8d:
ab:84:9f:e1:1f:7d:5e:e4:3f:fa:49:bf:3a:1d:8f:1e:00:44:
b2:f1:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:17 2025 by rpki-client