Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1fcfb48-1218-336e-84ad-69d61c6ba0ff.roa
File: d1fcfb48-1218-336e-84ad-69d61c6ba0ff.roa (raw, json)
Hash identifier: RRu3a5g7eKu8g8XRU1FnUahbczZX/U2pZjRhzU6loXE=
Subject key identifier: BC:5D:DA:16:D3:2C:B6:CA:3A:FB:C9:60:AE:85:8C:E7:AD:95:AF:28
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843AF0ABA0B822DBD431E08EC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1fcfb48-1218-336e-84ad-69d61c6ba0ff.roa
Signing time: Fri 27 Oct 2023 01:00:15 +0000
ROA not before: Fri 27 Oct 2023 01:00:15 +0000
ROA not after: Thu 25 Jan 2024 02:00:15 +0000
asID: 834
IP address blocks: 166.0.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:af:0a:ba:0b:82:2d:bd:43:1e:08:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 27 01:00:15 2023 GMT
Not After : Jan 25 02:00:15 2024 GMT
Subject: CN=5ecb6722-258a-40c9-92b7-61442916855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:30:25:e4:51:bd:23:31:ed:35:b4:99:a5:
bc:75:3f:ed:b1:c7:f4:98:f1:ce:61:23:64:71:87:
d9:99:1c:9e:97:c9:7f:3a:a9:74:c5:d3:fb:fd:9b:
63:cc:c4:c5:80:f3:7c:aa:b0:9e:0d:cd:7e:8f:9d:
41:7e:35:0b:cd:44:02:7a:2f:d0:05:f1:3a:ce:de:
2d:12:88:5b:06:26:a6:ba:a6:e4:5b:14:e5:6a:1b:
47:0b:1a:35:b6:ed:44:7c:ed:b0:3d:c6:45:fe:45:
70:92:98:ec:7f:0c:7c:94:74:cd:4b:ea:12:a0:4a:
71:ea:7b:7c:07:4d:6d:bc:47:e9:52:6d:57:19:c8:
0f:25:e4:9f:dc:26:8d:6b:cc:7e:a0:00:21:c8:6c:
5f:26:b4:72:0a:94:9c:34:fd:41:fc:fb:9f:65:b8:
1d:8e:8d:dc:8e:63:ac:5d:1f:f2:0b:cc:01:ab:ab:
1c:c1:22:5e:c1:3a:ec:b4:48:84:87:1a:db:a7:81:
7c:70:b2:a6:05:bd:8f:80:da:3f:e3:25:c4:c0:e4:
ec:0c:e1:e8:45:61:39:17:80:89:ab:90:f0:9a:25:
c7:c6:0d:29:67:a5:d6:e5:19:9f:1f:a2:57:68:cb:
6f:8f:cd:36:35:f2:3b:a1:5e:01:ad:90:17:ab:6e:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:DA:16:D3:2C:B6:CA:3A:FB:C9:60:AE:85:8C:E7:AD:95:AF:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1fcfb48-1218-336e-84ad-69d61c6ba0ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a2:da:0a:e2:33:ef:28:e8:3c:86:55:a0:22:0f:5c:67:92:
63:28:9e:a6:27:70:e8:fb:01:59:1e:e1:70:f1:a2:13:ed:4e:
54:43:ab:d6:14:a7:88:0f:2d:8b:b1:31:2c:da:48:39:99:3e:
e4:29:6c:47:cb:95:aa:73:16:28:de:d4:d6:b5:89:42:e2:a7:
19:7c:3c:93:0f:e9:fd:c9:08:f1:c7:3c:b2:21:95:47:a2:56:
a5:5f:36:14:6f:76:50:b6:93:24:4d:6e:08:ef:59:86:f0:3f:
29:a3:32:30:84:03:ea:31:5a:4e:61:9d:9e:f0:74:c3:0d:79:
60:01:92:71:7e:d0:b0:f0:e4:fc:f9:1d:19:4b:e3:e3:78:2e:
1f:28:51:36:2f:f8:36:e9:5c:74:f5:10:e2:c8:fc:82:df:55:
de:bb:85:24:15:5d:ad:50:75:00:4a:b4:9a:fd:12:39:7c:2f:
a0:f1:3f:78:85:c5:3e:29:e0:07:5d:ce:5e:42:7b:35:14:4d:
ae:f8:7e:30:b7:fe:c6:61:43:3f:29:01:ba:26:dc:00:2f:ad:
d1:a1:23:fc:b8:61:e6:d1:06:01:c0:10:36:82:02:34:a6:7a:
e3:eb:cb:db:a5:90:e3:16:57:d8:35:43:33:d4:4e:bf:b9:1a:
ae:44:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:33 2025 by rpki-client