Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddf8cfe7-b9f0-3538-8263-b7074326a0f0.roa
File: ddf8cfe7-b9f0-3538-8263-b7074326a0f0.roa (raw, json)
Hash identifier: URc7UD2nGqK02zVeAuE1/J24LPiLMO38MHjGWMIzcEE=
Subject key identifier: 0A:5C:93:66:D4:70:B4:45:02:CB:C0:A8:77:74:01:C8:6A:F0:C8:E7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BD8E9BB324511F4428139A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddf8cfe7-b9f0-3538-8263-b7074326a0f0.roa
Signing time: Tue 01 Aug 2023 13:00:19 +0000
ROA not before: Tue 01 Aug 2023 13:00:19 +0000
ROA not after: Mon 30 Oct 2023 13:00:19 +0000
asID: 60721
IP address blocks: 166.1.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bd:8e:9b:b3:24:51:1f:44:28:13:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 1 13:00:19 2023 GMT
Not After : Oct 30 13:00:19 2023 GMT
Subject: CN=2e85c4c2-c8d6-4c25-ac2a-6c8a905d5ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:c9:7e:1c:93:d0:63:8f:ba:a0:0d:d0:d5:
ec:64:91:c2:72:1b:cc:08:a1:6e:66:8e:3c:40:00:
69:99:0d:02:c1:80:23:e7:b6:aa:e4:de:c2:3d:e3:
88:e7:e9:af:35:0e:a1:51:bf:19:c2:04:da:84:d0:
d6:6e:10:40:2f:1c:b6:44:ac:c2:bc:e2:13:4b:fe:
0f:2b:93:66:3c:04:a8:a5:e2:b4:30:31:8e:4d:38:
cf:af:15:2b:9a:4f:3f:e2:34:d0:20:59:7a:a9:b7:
dc:08:5c:d1:38:e9:73:55:0c:48:5d:1d:b4:57:8c:
cd:08:c5:6e:d3:ac:0f:80:a5:ae:e2:b9:a9:b0:50:
c5:41:48:ec:f1:33:56:ed:46:12:78:22:19:15:36:
4f:cc:b1:63:d5:5b:7b:28:4c:c7:a2:e7:f5:42:9a:
3d:74:d9:9f:6f:55:ed:9f:10:4d:0c:79:f2:41:12:
1f:43:3f:3b:92:7f:1e:e0:90:e0:ca:16:17:ed:73:
0d:1b:aa:5c:0c:27:c2:a3:3d:95:b6:88:85:04:dc:
d5:06:c6:bf:07:4c:89:02:d8:05:2e:fe:91:d4:d9:
22:2a:6b:56:79:92:73:af:88:f4:0f:e0:4a:c7:d1:
84:c7:81:31:25:6d:e7:b7:05:66:7a:32:8e:5c:e5:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:93:66:D4:70:B4:45:02:CB:C0:A8:77:74:01:C8:6A:F0:C8:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddf8cfe7-b9f0-3538-8263-b7074326a0f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:75:0a:4e:d0:f2:47:51:1a:f2:6f:4b:d0:a8:3c:ac:98:c7:
74:c7:64:07:f4:5b:fe:37:59:d1:f7:2f:21:1b:40:26:29:01:
20:2c:eb:32:59:52:a7:e5:39:31:61:0e:6e:99:30:9f:24:10:
4b:b8:10:e1:c8:52:10:91:88:d2:8e:a1:76:fe:d3:b4:67:68:
e6:dc:10:3d:d1:30:c0:3d:95:a8:67:a5:2f:f7:b2:a7:88:93:
2c:7e:ce:19:ce:84:fe:67:1c:e3:29:fa:24:17:12:39:bf:e4:
d6:ae:b7:ac:6c:d9:40:f4:29:60:eb:1c:f4:ed:2b:4f:6f:ab:
c7:d4:d8:0a:f7:14:98:23:08:6b:dd:23:31:a3:cc:2e:c9:07:
84:ea:62:04:9a:37:60:0c:73:22:ef:a1:a2:1d:c7:dd:2d:6f:
b6:ee:4c:8b:fd:18:84:e1:ad:eb:a9:67:57:bf:6b:5b:ab:e7:
00:35:97:0a:8d:62:58:6b:3d:00:3a:f6:c3:90:3d:da:42:0d:
a9:cc:18:d4:eb:fc:e6:64:de:4f:6c:c5:e0:fe:c6:af:fd:0c:
3e:51:4c:cf:17:de:01:db:f5:f3:6b:5c:6e:ad:a8:16:4f:f6:
f3:27:dc:ff:07:1c:ca:99:46:7e:2f:d2:25:4f:d4:45:8f:b7:
95:bf:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:09:24 2025 by rpki-client