Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d28ea958-aff9-3ca6-9566-143351564882.roa
File: d28ea958-aff9-3ca6-9566-143351564882.roa (raw, json)
Hash identifier: 3KPHTcprfO/dGg3/lnDU7kfIMzxqB/vG35GPT+UYGdI=
Subject key identifier: 3B:E5:26:AF:00:F8:75:DE:0A:10:A9:08:3E:95:B8:E9:0C:AB:CB:E3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858428BD56491638E46D53C548580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d28ea958-aff9-3ca6-9566-143351564882.roa
Signing time: Fri 14 Jul 2023 17:32:35 +0000
ROA not before: Fri 14 Jul 2023 17:32:35 +0000
ROA not after: Thu 12 Oct 2023 17:32:35 +0000
asID: 11798
IP address blocks: 166.1.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:8b:d5:64:91:63:8e:46:d5:3c:54:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 14 17:32:35 2023 GMT
Not After : Oct 12 17:32:35 2023 GMT
Subject: CN=0d125b26-cc9d-4caa-b892-5a5baa1c94ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:f7:a3:42:68:42:56:79:6e:5c:85:cc:c8:
13:3e:d3:22:b3:94:de:2a:e9:c1:e3:e1:d0:14:e2:
12:05:42:8b:a5:26:b5:c8:dd:37:d3:ed:05:14:c2:
7c:11:e9:ac:5d:39:27:90:a9:57:47:e1:8c:06:f5:
ff:88:c3:e6:ef:a7:b1:44:ef:7c:47:f6:f4:04:5f:
fb:ce:25:4f:5f:1d:d0:b6:5d:78:ed:f7:a3:7e:ed:
c0:a9:25:a1:7a:aa:82:46:bb:50:64:82:f5:4a:a5:
30:dc:6f:50:be:3e:6d:5b:09:0d:00:c6:48:a8:4e:
18:aa:54:a7:15:85:b3:68:c2:52:75:ce:6d:04:28:
36:80:ff:30:a0:ef:d0:41:53:6d:2a:cd:d5:ed:72:
66:64:9f:12:8c:6d:37:67:9c:01:5c:36:85:f7:a3:
66:71:5b:d8:65:2f:37:8d:a3:c0:fa:d5:29:63:68:
1d:19:87:c7:37:b0:53:3a:c9:58:c8:99:62:33:64:
4d:21:e4:ed:17:69:d8:f0:e2:48:60:47:d9:c0:59:
9e:5d:44:73:cd:1c:0f:88:d3:e0:e4:8f:5d:f9:af:
52:73:ff:a8:54:7d:85:71:9f:ba:96:11:2e:a0:f8:
4c:64:fc:13:3c:2b:47:3d:88:cd:62:48:1a:86:bd:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:26:AF:00:F8:75:DE:0A:10:A9:08:3E:95:B8:E9:0C:AB:CB:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d28ea958-aff9-3ca6-9566-143351564882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:66:25:39:c1:69:b4:1e:d2:e7:45:e7:26:82:a0:b0:e2:0d:
d6:22:85:fc:eb:85:ec:1f:d3:48:dd:bd:9f:e3:92:44:84:da:
1a:f9:5b:e8:ec:9c:a3:94:08:9c:20:35:70:49:c3:21:66:37:
62:4b:b5:69:4f:b6:26:53:d0:04:5c:a6:93:9e:6f:00:da:d2:
ae:e1:5f:9d:7e:4b:8a:b4:f5:89:f8:19:1c:69:d1:72:ab:5b:
3d:2a:d7:cf:b0:8d:41:a5:aa:a9:c8:7c:21:93:b5:18:0f:b5:
77:12:e4:91:23:7a:4f:22:61:98:30:cf:48:9b:b4:30:da:d7:
71:d9:cb:f9:60:f5:13:08:4d:c5:15:cd:b5:88:20:be:ca:e2:
34:99:13:cb:2a:27:65:d1:a4:df:4f:4e:e7:2d:d9:70:c7:c1:
e1:e5:43:19:d2:ca:0f:e8:ec:c8:4c:7b:54:1d:8d:48:20:61:
ba:83:f6:27:62:3d:cb:5f:40:bb:73:ab:d6:64:6e:c7:99:d8:
ca:6f:a6:07:18:09:0f:db:af:af:bc:5d:3a:6e:48:fe:78:b2:
fe:7f:35:8a:7f:28:da:4a:22:48:4a:c3:2c:3e:0f:15:28:c7:
8b:3b:89:9c:7b:00:9b:05:b7:6b:83:dc:fe:9d:64:cf:cf:e3:
14:2f:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:42:53 2025 by rpki-client