Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1e9d810-c757-3880-b0c7-86b200e8c210.roa
File: f1e9d810-c757-3880-b0c7-86b200e8c210.roa (raw, json)
Hash identifier: vwZwourQYVG1R45l+gjTvcfwlvdz6NLHAGkbMhAkD+0=
Subject key identifier: 0F:29:D1:62:EE:A1:FF:8B:67:CF:81:84:A8:D3:23:82:28:54:B0:7D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BAC3ED8E9E9F9E5CB8F64240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1e9d810-c757-3880-b0c7-86b200e8c210.roa
Signing time: Mon 31 Jul 2023 13:00:18 +0000
ROA not before: Mon 31 Jul 2023 13:00:18 +0000
ROA not after: Sun 29 Oct 2023 13:00:18 +0000
asID: 399471
IP address blocks: 166.1.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ba:c3:ed:8e:9e:9f:9e:5c:b8:f6:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 13:00:18 2023 GMT
Not After : Oct 29 13:00:18 2023 GMT
Subject: CN=185fa220-7f42-45ab-aa29-6c697056e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:01:71:57:6f:88:da:c1:4d:34:d5:b9:64:
ae:97:9a:76:34:32:25:53:c3:73:5a:aa:76:0e:ad:
8a:d5:de:10:ae:28:70:62:32:55:2b:04:9e:9a:bc:
36:a4:40:93:98:bf:7d:23:f6:bc:64:96:7c:5e:7a:
71:a7:30:d4:ee:68:50:e2:bf:00:20:02:42:03:ac:
70:66:56:58:fb:41:4f:75:70:bd:1b:6e:37:68:40:
c5:40:7f:09:1a:89:3b:59:0e:a4:9f:35:8b:53:da:
d9:44:72:e6:9c:e3:87:91:de:92:6b:0f:8e:e8:4d:
ca:21:21:eb:cf:55:c3:f3:cd:c7:24:23:6f:da:3b:
a7:63:31:f3:9c:4a:33:79:a4:ca:25:49:e3:54:16:
18:c5:06:82:15:c6:d8:fa:ae:56:2e:99:c3:34:bf:
10:c8:23:e4:78:a4:da:27:e9:2c:bd:8d:dd:50:40:
9d:70:33:c5:03:7b:2d:cc:ac:2c:23:df:ef:f9:09:
6a:c0:e6:00:a0:c5:c2:d5:81:72:8a:0e:8d:92:79:
49:e6:8c:09:c9:88:7d:5c:1b:4c:97:dc:c8:2f:2b:
ef:00:68:2a:39:9e:57:ee:1f:2c:f7:bf:7e:45:43:
4b:3a:30:9d:e2:2d:35:53:c5:63:c7:fb:99:f4:60:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:29:D1:62:EE:A1:FF:8B:67:CF:81:84:A8:D3:23:82:28:54:B0:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1e9d810-c757-3880-b0c7-86b200e8c210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:1e:e2:e5:e2:62:9f:34:61:8f:bc:ba:0e:d1:1a:ed:df:01:
86:fe:3a:57:f8:a3:03:84:1f:34:5c:be:07:ee:7e:bf:6f:61:
48:dd:2f:a8:45:4a:0d:ee:71:75:b5:b5:da:5b:6d:e3:3e:8b:
60:d3:fd:c2:ea:d1:cb:de:4a:b7:4c:66:c3:49:17:2b:15:13:
81:1c:ec:54:65:b9:4f:4f:5d:ec:4e:b7:fc:2c:4a:94:dd:62:
b6:87:61:b3:37:98:33:d9:67:4d:63:72:3f:08:7a:c1:e7:3b:
e4:b7:15:cf:7f:5a:37:fa:ab:45:80:b5:5b:a5:e4:b2:d1:8c:
02:83:c6:42:75:41:f7:08:99:f8:1d:b4:90:db:e0:de:12:b9:
c0:e1:9e:e6:de:2b:32:39:6a:cb:e1:db:45:2b:8a:12:c1:d7:
10:f8:64:31:4f:14:4e:be:b7:be:8b:7d:85:0c:8e:67:8e:c1:
2f:8b:ec:78:fb:d9:8f:b5:7c:ea:6b:e0:8a:8a:48:d9:f8:b0:
22:c0:09:82:41:13:b2:20:d6:ee:89:c2:f9:1b:99:27:ee:62:
74:af:8c:b9:05:a1:33:32:14:26:2d:90:a2:c1:bd:db:94:de:
75:0b:8f:3f:ea:84:f1:d1:56:49:27:38:59:3a:84:be:47:6f:
50:a7:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:07 2025 by rpki-client