Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2dbf816-9152-39ad-b358-0a4c8c1a3590.roa
File: e2dbf816-9152-39ad-b358-0a4c8c1a3590.roa (raw, json)
Hash identifier: +7xE1qdwcqqn+4WMKDm/e5t9bzrMCrmBNR12rSo58A8=
Subject key identifier: FA:36:40:DF:6B:8B:FC:AA:04:5D:D2:CB:72:80:5F:52:2C:84:BD:EE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841FDA14C8982E82627BB8C2600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2dbf816-9152-39ad-b358-0a4c8c1a3590.roa
Signing time: Wed 24 May 2023 19:02:50 +0000
ROA not before: Wed 24 May 2023 19:02:50 +0000
ROA not after: Tue 22 Aug 2023 19:02:50 +0000
asID: 11798
IP address blocks: 166.1.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:fd:a1:4c:89:82:e8:26:27:bb:8c:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 24 19:02:50 2023 GMT
Not After : Aug 22 19:02:50 2023 GMT
Subject: CN=8c6e723e-1775-483b-9293-24573dfa8d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:38:86:66:f3:4d:fd:17:c1:88:b1:64:55:
56:a7:60:47:21:b7:64:74:46:31:f9:82:72:c9:7b:
e2:7a:ea:50:a7:57:6c:38:62:61:c1:96:29:f6:5f:
78:fe:f8:74:82:19:1a:5e:72:1c:e8:f7:17:bc:0e:
05:ef:56:62:16:d6:2d:5d:a4:94:53:62:61:3c:65:
45:4c:66:27:61:39:6e:67:94:5e:61:0d:34:e0:2e:
b9:c4:26:8a:ee:b5:af:5c:75:46:30:71:2e:12:88:
0e:de:19:af:62:ea:23:df:54:4e:4c:45:d4:15:f0:
62:d1:a2:6a:e6:55:bc:34:c5:36:f9:17:9d:55:19:
fe:c9:07:fe:f5:46:f9:4c:92:bc:94:e3:3d:c6:48:
d8:51:80:88:59:f4:84:83:41:26:fb:35:a3:86:ba:
d3:27:2e:54:5a:1c:52:48:28:75:e5:ac:59:91:cf:
f2:01:86:ae:7a:3c:66:b0:32:37:07:89:c0:ac:59:
a4:7b:9c:ad:cf:f7:c6:e5:39:c2:c2:d4:e8:ce:aa:
c3:cf:0a:bd:d1:f7:e5:83:34:1f:55:eb:62:35:6d:
5e:6d:5e:3a:b8:07:31:af:d9:94:1f:58:fe:0c:14:
6e:88:db:66:53:06:4c:8e:1e:97:5d:39:97:e6:d0:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:40:DF:6B:8B:FC:AA:04:5D:D2:CB:72:80:5F:52:2C:84:BD:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2dbf816-9152-39ad-b358-0a4c8c1a3590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:b8:73:f4:89:1d:13:02:b6:a3:df:ab:f6:93:ac:3f:a4:05:
10:af:00:2c:f0:6e:ee:ca:c6:b3:7d:ee:f2:2e:4c:9a:b6:14:
ab:31:42:7c:fa:39:a5:d7:64:b6:67:8d:36:a3:f4:e1:32:ff:
be:44:eb:a2:ce:c4:49:87:aa:c2:b0:4f:00:54:f2:10:15:bf:
c3:bb:62:9f:54:74:dc:bc:54:11:f1:3f:a7:5f:a5:fc:86:da:
3a:01:5a:31:67:4f:af:1b:12:5b:03:a3:65:ce:3f:c9:8c:04:
09:f0:f9:7c:b1:14:ba:d9:ef:ca:45:3a:8c:46:35:9b:cc:bd:
73:49:35:58:44:ea:ac:60:03:2c:f2:cc:5b:73:10:83:a0:ae:
d3:81:02:e7:98:06:0d:ee:bf:7a:74:03:47:0a:7e:3a:fa:41:
f9:51:c5:e9:10:87:9b:16:d6:aa:c3:4c:a2:01:b7:e1:8a:48:
aa:35:f5:11:86:40:f6:4a:5f:b4:96:da:3b:e9:41:4c:45:6a:
56:07:b2:3a:f0:c4:98:1a:c3:b1:f6:55:de:44:b2:dc:bc:6a:
f1:d0:c8:3d:fe:ec:df:79:e1:9c:bb:ed:31:9f:b1:73:12:81:
8c:4d:98:c3:da:06:22:e9:cd:79:e7:17:2f:a8:70:f2:51:44:
8b:96:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:34:38 2025 by rpki-client