Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d315347b-833d-3bfb-9aef-542471abb779.roa
File: d315347b-833d-3bfb-9aef-542471abb779.roa (raw, json)
Hash identifier: 9EWFBUlSdO1HjUWoe07kycaT+YxpSs5dl/3/nhAj0n0=
Subject key identifier: A0:C3:C6:CA:D3:4E:6F:00:9D:62:BE:34:56:13:29:1A:4E:7D:CA:60
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584482731969277345A5B3090E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d315347b-833d-3bfb-9aef-542471abb779.roa
Signing time: Wed 10 Jan 2024 18:26:08 +0000
ROA not before: Wed 10 Jan 2024 18:26:08 +0000
ROA not after: Tue 09 Apr 2024 17:26:08 +0000
asID: 59895
IP address blocks: 166.0.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:82:73:19:69:27:73:45:a5:b3:09:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 10 18:26:08 2024 GMT
Not After : Apr 9 17:26:08 2024 GMT
Subject: CN=a039145f-47a3-4bba-bc9a-6cf6e2e8ce13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:9f:a7:90:10:96:f0:85:fc:ed:59:14:4e:
b5:8a:60:42:81:2a:77:c0:59:b7:53:45:28:7b:71:
29:a5:3d:ff:bd:c1:ba:b4:85:77:1c:1b:f3:d8:4a:
cb:e5:77:68:5a:8e:5a:62:25:f2:b0:19:03:3e:10:
e8:e5:0b:5b:70:92:48:2c:4a:b7:28:89:e2:e4:4e:
ff:ba:1e:d0:88:b4:16:40:d7:e8:50:1b:db:c0:0f:
d2:e3:00:b2:f2:42:d5:6a:82:3a:31:09:b3:a3:9d:
f4:dc:7f:7c:5c:78:6f:c4:4f:85:a5:cc:ab:0f:71:
ce:a0:d4:fb:4b:24:ba:95:7d:2e:2c:cb:77:b3:0f:
c1:3e:20:2f:09:ce:b9:5b:f7:6e:92:ac:b3:30:1a:
b1:ce:59:29:64:a0:74:88:b2:1e:bf:51:b9:e4:19:
ba:4b:71:15:3e:44:7b:f1:d7:cb:8a:9d:7c:da:c2:
3f:90:e8:83:43:82:18:1c:43:71:db:40:31:50:b1:
a4:bb:63:14:ff:9c:ed:b8:0e:ba:90:cc:d0:dd:67:
51:ee:65:8f:23:2e:e1:15:af:1f:c2:84:36:4c:b6:
ed:b8:88:76:40:8b:78:95:07:7e:5d:ea:e8:bd:54:
4c:cd:22:d0:23:70:ba:d3:a2:ff:e3:eb:c1:f9:67:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:C6:CA:D3:4E:6F:00:9D:62:BE:34:56:13:29:1A:4E:7D:CA:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d315347b-833d-3bfb-9aef-542471abb779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:26:af:94:38:d3:ec:5b:34:22:44:a6:9a:fd:30:eb:56:bf:
91:65:93:6f:17:67:5f:10:2a:11:cc:a4:e1:dc:7f:a8:6d:2e:
78:46:9f:54:de:e9:96:16:32:fb:7f:c7:43:ce:ae:4d:d1:cb:
62:82:69:43:b0:c0:78:0e:37:60:11:12:ba:b7:48:01:88:ac:
ee:dd:fc:83:a6:cb:01:92:12:14:34:bf:f4:45:4a:ef:28:74:
fb:fd:a9:ee:d7:5f:f0:99:c9:e5:9b:78:f6:71:b5:69:7d:a2:
e0:cc:fb:b4:5d:46:92:5d:66:8e:ae:bb:d4:28:70:de:b7:68:
69:f5:37:cc:bf:9c:33:9c:5b:8e:6f:3c:52:df:be:45:42:8c:
a0:9d:a5:16:03:92:d0:16:b4:93:aa:03:7a:6d:4a:b4:22:ec:
78:03:5d:43:69:80:ac:9d:21:c1:e7:3c:f2:91:9c:8e:81:40:
11:77:ec:d7:dd:ce:e2:ee:3e:da:d8:22:0c:8d:57:42:f2:16:
93:80:a3:a5:6b:62:7e:64:5f:5a:f9:74:31:c0:8e:f5:e7:fa:
10:eb:d8:6c:9e:a9:ba:a1:17:43:a0:b7:53:04:22:e3:23:55:
73:b0:4a:be:c3:47:7b:f0:ae:f1:3d:73:61:ae:f8:c8:9c:46:
59:3e:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:41 2025 by rpki-client