Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa
File: d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa (raw, json)
Hash identifier: FySDitORzoFCKoOjiV1JfSjNVHq+SrQPZ5ag5Vng+5o=
Subject key identifier: DA:C6:56:62:B2:DC:DF:7F:05:A8:C8:A7:EC:D9:C9:82:68:0E:96:30
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F80307EDEC5BBF4D749AA28
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:30:7e:de:c5:bb:f4:d7:49:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=a62cc2e6-7aaf-409b-874c-f838e4c41189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:41:45:8d:32:c1:d6:db:66:49:f5:9f:45:
d9:f2:d2:74:9a:36:7a:43:f8:8c:73:95:3f:c3:58:
7d:ec:17:69:02:58:65:24:a1:a5:e9:cb:d2:b8:9d:
3a:ee:bb:81:04:ad:f2:24:3c:e0:1b:a8:b2:41:3c:
dd:19:79:f5:23:ec:94:05:ec:8b:39:6f:60:b7:67:
34:e6:56:d6:0c:fc:e2:97:02:24:85:0c:b1:8d:e4:
7c:23:56:d6:87:94:5a:7f:4f:a8:21:d1:28:3a:33:
49:a5:95:26:4f:53:f0:c9:f4:36:33:56:a8:4b:3a:
d2:38:24:16:86:f3:35:d2:4d:d7:3d:33:f1:c4:bd:
23:4f:b5:b9:10:ba:36:a9:b3:1b:5a:31:3b:fc:d7:
8f:ed:83:e1:4e:ed:5e:a6:a3:74:c6:b3:69:52:15:
96:f5:c6:b2:4f:bf:90:6f:d2:29:f2:d6:fe:05:43:
85:4d:68:24:a9:87:39:59:c0:f0:50:3e:a1:aa:c5:
5e:60:31:b1:8b:bf:b2:9f:16:c4:27:85:c4:04:dd:
0b:39:96:19:ad:18:e2:84:72:fe:95:39:24:9c:58:
a3:68:51:fd:5d:23:fb:6e:73:93:08:6a:de:79:55:
26:f0:dc:cd:3b:dd:3d:4e:05:76:5a:07:42:3e:39:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:56:62:B2:DC:DF:7F:05:A8:C8:A7:EC:D9:C9:82:68:0E:96:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c5c645-c7ed-3fc9-a92f-5a2ae6ced66a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:7e:62:28:81:f0:97:40:70:cf:13:a3:82:a0:ee:b3:e7:1e:
e9:c1:93:47:3f:b2:7a:d0:fa:89:17:07:00:6e:8b:15:3e:17:
66:55:15:8e:b8:bf:9a:91:8e:f9:8f:fc:c2:87:66:e6:7d:5d:
e1:62:ca:9c:69:0b:40:7d:31:b9:d1:f0:a6:c4:8f:7d:bd:36:
78:bb:cf:ea:76:c2:b3:1f:12:3f:9b:f0:7d:69:bb:bc:56:70:
53:bb:80:26:a7:42:13:0d:ae:cc:ae:9d:e7:59:e1:55:a9:de:
39:bf:08:cc:01:8c:b8:67:78:07:be:e3:27:e3:a9:a3:7f:3a:
2e:43:64:40:b6:2f:a1:64:e9:a6:c4:1c:9d:36:3e:cb:a6:35:
79:35:75:02:ef:89:b2:3d:16:5e:a5:1a:a5:61:81:c3:fd:e5:
0b:e2:9d:06:fc:b7:45:dd:f9:a1:59:d9:e2:af:e2:bc:26:71:
0b:88:b5:31:66:3f:36:6b:9d:76:12:e6:f8:6b:d6:12:87:02:
96:5a:cf:c3:02:e3:d6:47:2a:09:e0:11:cc:f9:73:89:1c:65:
b3:ab:1e:f1:50:24:dd:35:07:8f:1d:fd:6c:b8:17:fb:6d:65:
99:15:2f:cf:67:e0:f9:ee:d0:ea:59:00:cf:e8:bf:81:65:d0:
65:e5:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:01 2025 by rpki-client