Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7a7b9cb-809e-3be1-917c-b2984c710303.roa
File: d7a7b9cb-809e-3be1-917c-b2984c710303.roa (raw, json)
Hash identifier: IM9DcKeY3N+9z9oCHUrkcKbVyp3FuFxSNGRggc5erhk=
Subject key identifier: 9F:85:4A:06:E4:34:D5:C0:A5:9E:A7:EB:08:A5:9A:52:CC:B9:3C:4D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584074506C16E399FEB65C526300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7a7b9cb-809e-3be1-917c-b2984c710303.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Mon 07 Apr 2025 04:00:00 +0000
asID: 397423
IP address blocks: 166.0.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:74:50:6c:16:e3:99:fe:b6:5c:52:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Apr 7 04:00:00 2025 GMT
Subject: CN=758e00e2-8cea-42c7-8603-2025436d75f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:7f:09:cd:fb:c9:5e:f1:7c:6f:0e:e5:f5:
c7:54:d1:ec:48:ca:2a:4a:18:50:12:1a:ec:d0:46:
0a:19:3a:ba:6d:8f:4d:74:ca:a2:10:c6:77:3c:a7:
bb:ae:4a:0b:7c:70:82:5f:ad:52:92:48:ba:67:95:
81:ee:c1:5b:b9:b4:4f:ae:df:95:a5:da:86:09:c7:
12:8f:19:81:41:67:f1:e8:47:3f:1b:a5:45:d0:b6:
b1:87:6f:fc:88:58:b1:b8:23:9b:60:47:ec:01:be:
ca:ca:aa:1a:3e:f1:13:4c:13:86:a7:74:7b:41:9f:
8f:7f:fa:6f:69:31:c0:19:04:09:db:c4:6a:87:36:
7b:60:91:4f:6a:f1:c9:0b:eb:f3:25:4b:02:96:38:
dc:9e:84:a7:7a:f7:bc:0e:e2:a8:70:80:d2:a2:5d:
7c:7b:1e:04:6d:b1:89:c3:f9:7a:d7:ba:6a:90:7e:
d6:3c:09:2f:42:f5:55:9f:02:3b:7f:49:73:c3:68:
ff:68:b0:e4:98:86:85:cc:9a:95:f5:ea:a3:4a:fc:
35:9b:cb:d7:3b:e5:36:65:c7:5f:2b:86:9d:d0:3b:
13:74:a1:15:fd:8f:8e:9d:66:27:0f:1e:9b:a8:0e:
11:46:33:e7:02:de:37:9f:20:17:ca:44:c2:a3:54:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:4A:06:E4:34:D5:C0:A5:9E:A7:EB:08:A5:9A:52:CC:B9:3C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7a7b9cb-809e-3be1-917c-b2984c710303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4b:c2:6c:12:99:9b:dd:b0:c1:af:85:85:14:e2:3d:f9:8b:
6e:96:78:4e:9d:e6:b9:6c:85:c0:b6:2c:a4:75:f7:b6:13:1b:
95:99:cb:ae:b8:86:db:b4:1d:63:17:f2:a4:99:e3:4f:95:92:
93:32:ed:f5:52:f8:a5:12:c9:5a:6f:ea:bf:4d:54:16:d6:e9:
a4:ec:00:8b:29:a9:04:29:f5:6a:cc:ff:24:5f:c9:9c:07:87:
e2:d2:23:1b:20:3f:05:6c:70:ed:14:9f:d9:f3:53:8d:62:69:
a2:13:50:ca:bd:69:39:f9:9e:3d:11:7e:1d:2c:bf:d8:bc:13:
ae:61:c4:22:34:6c:e2:07:97:35:e9:d0:dd:e7:a1:36:c1:c9:
66:a4:d0:db:df:1e:cb:ea:c3:3d:e4:29:0b:68:76:3b:5e:09:
8c:3d:d5:69:bd:54:1c:85:03:67:c6:a2:a1:55:71:1d:36:7d:
5b:a5:fe:77:cc:07:13:f4:c9:d1:25:45:40:66:0c:d3:23:7c:
68:06:fa:72:aa:9a:c9:cb:3a:c2:43:c9:d3:8a:8f:71:7e:64:
b7:c9:65:9f:7a:39:ca:64:d5:d3:79:34:23:7e:5b:99:07:de:
84:05:76:13:9f:d7:ce:6f:c8:57:ea:5e:f1:82:d9:6b:a0:7d:
34:d0:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:54 2025 by rpki-client