Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d57154b6-66c8-3208-a413-f9011eddf064.roa
File: d57154b6-66c8-3208-a413-f9011eddf064.roa (raw, json)
Hash identifier: 2RrqgvyDS+m/OdqjJek0QpfLidE4A1eUK3wAcA0p3X8=
Subject key identifier: 69:87:51:5C:4A:13:E3:90:02:C1:75:A3:29:D5:BF:EF:0A:9A:D2:F9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847AC1D7999DDE5CD6067F58300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d57154b6-66c8-3208-a413-f9011eddf064.roa
Signing time: Sat 26 Oct 2024 18:58:22 +0000
ROA not before: Sat 26 Oct 2024 18:58:22 +0000
ROA not after: Fri 24 Jan 2025 19:58:22 +0000
asID: 834
IP address blocks: 166.0.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ac:1d:79:99:dd:e5:cd:60:67:f5:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 26 18:58:22 2024 GMT
Not After : Jan 24 19:58:22 2025 GMT
Subject: CN=5ed27810-3380-495d-b07b-64aeb8f05150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:64:1c:c3:57:3b:ac:48:18:13:3a:9e:72:4c:
a3:f8:d8:12:cb:90:1c:68:43:49:99:f7:22:1a:f3:
8b:91:04:63:d1:df:1c:d1:55:e1:c5:e8:85:e7:5a:
b9:4a:b9:9d:36:76:aa:af:1d:36:d3:36:db:54:cf:
2f:ff:93:d9:ee:a9:45:1a:e4:c5:46:29:3f:c7:2b:
be:b7:3b:25:23:0b:95:c6:d2:77:07:68:76:f1:44:
e9:75:03:c2:45:fb:9a:8e:52:0f:50:f2:db:5a:06:
20:54:b4:81:d5:6e:f4:13:c0:94:26:1a:2e:42:3f:
75:88:83:dc:89:41:ca:28:47:30:5c:78:a7:b8:b1:
67:f5:54:60:fa:c9:17:a8:f5:89:dd:c1:bf:5a:f0:
a7:e8:72:50:90:69:2d:eb:bb:e0:e0:1e:57:a4:7d:
bf:28:81:b0:ca:e9:03:9c:01:b5:62:1e:8e:31:44:
bb:fa:9c:ea:45:e4:cb:5d:99:9f:f3:15:bd:9e:6d:
b8:00:91:60:d4:ea:20:4d:3c:25:fc:5a:e5:e3:5f:
23:53:af:27:63:eb:9f:d3:e2:dd:08:30:e7:2c:57:
e1:15:f1:1b:91:37:1c:6c:e7:1e:81:c2:94:64:a3:
8f:90:b9:25:55:b3:5f:5c:6b:cd:33:69:2c:e6:5a:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:51:5C:4A:13:E3:90:02:C1:75:A3:29:D5:BF:EF:0A:9A:D2:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d57154b6-66c8-3208-a413-f9011eddf064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:28:33:43:05:26:27:2f:d8:c8:a3:44:34:a6:3a:1b:bb:d8:
a1:e6:21:d2:e1:7c:c0:9a:39:0d:02:ea:31:d0:24:88:d4:34:
86:19:86:0a:10:25:93:6c:96:35:e0:ed:92:23:2d:4c:1a:aa:
f6:f0:e8:77:99:78:ce:47:99:0d:eb:99:37:73:1f:4a:04:ab:
a0:53:0f:e7:3b:ed:e3:0d:22:cd:b7:67:9f:28:9e:45:47:88:
5b:54:3f:9f:4e:87:42:e4:d5:38:04:b5:5f:ab:21:14:52:8c:
67:6f:d9:92:b9:1e:bd:ee:a6:70:63:80:10:31:5a:6d:d3:e6:
15:3b:dd:da:23:7c:23:01:5d:e4:d1:fd:29:af:60:69:df:49:
5f:b5:6c:11:81:bd:e3:60:cf:da:d5:c3:fe:96:6a:17:5f:8c:
27:0b:8d:b3:ea:67:c6:74:9e:a9:52:19:bd:bf:d9:b5:c6:4f:
f8:f1:92:d3:d2:75:78:af:e1:c7:27:fa:d4:17:d4:a6:74:23:
ad:e5:ce:d6:de:e8:65:48:c8:61:e9:75:af:a0:ae:e4:e7:e9:
e3:8d:6a:6a:74:d1:23:38:d9:c8:2b:8b:44:c6:68:fb:a1:7c:
57:4b:92:cc:c6:87:00:eb:a3:bf:d9:ab:31:fd:e7:fa:5a:c4:
62:5d:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:04 2025 by rpki-client