Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec2849bc-ac9c-342c-a128-8aff7e1e7a02.roa
File: ec2849bc-ac9c-342c-a128-8aff7e1e7a02.roa (raw, json)
Hash identifier: TK5T4th0y/011PGKsCZCfsOzzeVSVacb4yXCnkXdQwQ=
Subject key identifier: 4A:6E:A4:2D:36:4A:D9:32:07:1B:B1:DE:17:15:AD:82:C6:1E:60:A3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BB14B43A45FAD580D4F8D780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec2849bc-ac9c-342c-a128-8aff7e1e7a02.roa
Signing time: Mon 31 Jul 2023 15:43:08 +0000
ROA not before: Mon 31 Jul 2023 15:43:08 +0000
ROA not after: Sun 29 Oct 2023 15:43:08 +0000
asID: 834
IP address blocks: 166.0.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bb:14:b4:3a:45:fa:d5:80:d4:f8:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 15:43:08 2023 GMT
Not After : Oct 29 15:43:08 2023 GMT
Subject: CN=9a93b570-5f78-409e-b1dd-ca82215d5030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:6a:11:12:f9:a6:72:6e:03:68:f1:63:13:
0c:64:a1:1c:47:4b:30:2c:79:bf:01:a2:8c:17:76:
f6:64:78:21:01:7f:1e:13:ea:a2:72:a3:29:07:45:
d1:0c:20:75:f8:5b:02:0d:6f:b1:b0:c4:e4:03:f0:
05:34:c3:70:cf:49:a6:47:24:a8:d6:68:5c:4b:0b:
dc:47:00:6b:7e:18:82:83:c5:f2:60:ae:63:f2:72:
8c:74:99:d2:a9:eb:ca:19:b9:57:6c:58:72:1b:69:
7e:47:5e:14:22:b1:9a:08:40:fe:3a:80:04:3d:13:
c0:b6:c6:75:6b:19:93:59:b6:05:8e:08:d4:23:be:
58:09:81:9d:54:20:5b:18:37:06:b4:36:be:18:59:
8e:b9:92:c2:a5:76:fc:26:f1:6a:94:72:06:fc:88:
ec:2d:ce:43:2c:2a:81:91:ad:2d:b9:ef:a9:8e:39:
44:b4:fd:56:8d:48:1d:d6:9a:39:29:1b:80:3a:38:
c4:b7:ad:b3:f1:21:92:00:55:64:a7:13:2a:25:c0:
38:a7:5a:fc:df:a2:37:df:4d:ad:b2:fd:5d:ad:49:
4f:a0:7a:b5:88:70:0f:2e:e6:14:c3:c2:ab:f5:6e:
da:22:f1:9f:84:b7:6b:ab:ed:28:5f:13:47:a5:64:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:A4:2D:36:4A:D9:32:07:1B:B1:DE:17:15:AD:82:C6:1E:60:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ec2849bc-ac9c-342c-a128-8aff7e1e7a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:f7:e9:74:ad:05:1e:f9:9d:95:6e:31:5a:71:e8:33:de:22:
c2:4d:1e:12:44:28:5e:06:47:1a:8c:a4:81:14:51:9c:de:68:
80:05:92:29:68:ce:6c:02:3b:3f:02:19:f2:66:0e:7e:60:08:
54:4d:c3:3e:cb:e2:2e:7f:b3:aa:0d:18:b4:78:0d:3c:11:3c:
52:12:0b:3e:83:39:64:05:10:da:cd:bb:b7:12:95:e6:6c:ea:
31:57:59:b8:b5:88:93:44:4e:e6:38:e9:d9:18:c8:70:c0:67:
ff:00:a0:b3:b0:23:a9:54:7d:63:87:0e:64:46:7e:81:22:e1:
c5:45:44:89:0f:ae:b1:40:bd:2e:be:21:14:09:4f:b4:47:7a:
4f:a6:9b:6c:55:ba:c2:e7:a5:44:57:99:c3:9b:eb:dc:47:5d:
06:ca:f7:d5:3d:c5:22:61:e5:8b:36:4b:22:ed:fc:23:cc:72:
f1:36:a0:d9:9c:67:3f:81:b0:e2:6e:9d:f3:fc:38:3d:b6:d2:
30:30:88:03:20:59:8a:91:2b:ef:67:3c:60:de:3e:10:1b:34:
ff:87:07:d9:fb:89:07:d4:05:46:03:de:b8:a0:4d:39:28:33:
d7:b0:f0:a1:29:53:d4:81:1a:61:d1:d8:31:cd:57:7b:24:4f:
f9:4b:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:50 2025 by rpki-client