Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfb28652-16fa-3e79-beee-ebc4a0566a4d.roa
File: dfb28652-16fa-3e79-beee-ebc4a0566a4d.roa (raw, json)
Hash identifier: WCuQhYm7wAvNN2K0fXsJ5wk2zcfBCfKMpFu2VArNEzs=
Subject key identifier: 98:5A:07:59:B0:CC:74:16:E7:92:92:42:0E:88:9D:61:9D:7B:B8:2B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D187C191317901CFB84C13C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfb28652-16fa-3e79-beee-ebc4a0566a4d.roa
Signing time: Tue 08 Aug 2023 16:42:44 +0000
ROA not before: Tue 08 Aug 2023 16:42:44 +0000
ROA not after: Mon 06 Nov 2023 17:42:44 +0000
asID: 201106
IP address blocks: 166.1.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:87:c1:91:31:79:01:cf:b8:4c:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:42:44 2023 GMT
Not After : Nov 6 17:42:44 2023 GMT
Subject: CN=79e4562a-f602-4792-a335-038dd11821aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:b0:f3:97:3d:1f:ca:f1:d4:92:a3:f1:36:
09:2c:d8:ba:ea:e9:08:3d:05:0a:47:55:00:17:9c:
a7:5f:78:7c:b7:c5:6a:d0:d0:c1:60:ba:a8:2c:94:
3c:ab:39:b4:df:a2:e1:2f:71:fc:f1:7d:66:13:40:
64:e3:09:eb:ab:6b:e9:75:6c:6d:e2:e6:54:a7:1c:
ac:a5:35:90:10:c8:ea:14:66:f4:69:c1:9e:8e:2b:
79:31:60:b5:5f:84:f0:db:da:b1:ea:c5:67:61:17:
3c:71:8f:18:b9:1f:2d:d8:5a:7e:98:42:24:40:99:
f4:14:99:cd:92:ce:9e:79:95:f9:46:4c:fd:d6:6f:
0e:fc:45:b1:57:2b:36:77:07:92:f6:51:b5:b9:94:
3d:95:5d:f5:eb:97:e5:08:1a:d9:85:45:a6:5c:45:
3a:8e:cd:bd:04:16:9f:92:94:92:34:aa:68:46:84:
47:e1:cb:a7:11:e9:83:03:e1:84:b2:30:66:92:dc:
82:26:68:55:47:a8:e9:67:70:7c:f4:40:90:6d:03:
df:49:0d:c5:0e:ec:7c:db:a0:04:77:3c:8a:bb:7d:
f3:8f:a1:38:91:ff:13:05:da:89:82:0d:73:fa:28:
40:7c:71:d7:14:90:85:86:27:96:75:ca:06:3c:2c:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:07:59:B0:CC:74:16:E7:92:92:42:0E:88:9D:61:9D:7B:B8:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfb28652-16fa-3e79-beee-ebc4a0566a4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b7:5f:4d:c4:15:65:3d:df:d2:55:bc:8b:8b:74:3e:a0:d4:
c5:42:c5:1d:85:7c:a3:40:36:6c:10:b5:a6:a2:a4:98:ce:0b:
9a:a2:e5:02:36:67:58:26:c2:69:99:43:a2:76:42:df:d0:83:
4e:f3:ad:a8:1c:82:2d:05:59:5b:21:e5:34:0a:a1:fc:10:31:
f1:a5:66:2e:d9:a1:13:50:eb:c4:ea:8e:9a:75:62:97:77:50:
24:23:42:8c:f6:79:85:01:ad:94:b9:6a:6c:1f:47:c0:fb:c9:
95:14:fc:a2:ab:fd:d1:5e:cb:1e:7a:49:c4:08:2c:88:c6:08:
d5:56:3f:55:97:4b:12:b2:c5:1b:dc:4d:06:c1:23:9a:40:37:
d1:4a:0a:62:58:c8:ef:13:dd:7e:84:6b:62:74:3a:cb:24:ec:
f9:13:42:dc:9e:90:70:31:1e:9c:13:77:46:ee:b2:4c:9c:61:
f3:a8:c4:9c:f5:1d:1a:db:3f:23:aa:0e:42:1b:c8:18:c7:be:
17:00:b3:a0:bf:6b:d2:be:04:d4:c9:82:90:c8:1c:e8:ff:d8:
c6:c0:80:38:58:c0:29:f1:32:7e:13:57:4d:05:bc:7e:e0:1a:
7b:e4:bf:94:2a:81:e4:70:03:f9:75:1b:a5:43:1d:16:2d:8b:
2d:e7:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:20 2025 by rpki-client