Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3cece2a-b0fe-3f27-9678-6ce150def407.roa
File: f3cece2a-b0fe-3f27-9678-6ce150def407.roa (raw, json)
Hash identifier: R3AfkfQtnrhDt0uZZjSMBnzVWgq2JydbT9Jr7/nmLJc=
Subject key identifier: DC:B0:17:FF:2F:63:9F:15:4B:29:80:39:97:D4:52:69:32:00:C2:02
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D8141D994872AD822FC80080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3cece2a-b0fe-3f27-9678-6ce150def407.roa
Signing time: Fri 11 Aug 2023 01:00:22 +0000
ROA not before: Fri 11 Aug 2023 01:00:22 +0000
ROA not after: Thu 09 Nov 2023 02:00:22 +0000
asID: 174
IP address blocks: 166.1.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d8:14:1d:99:48:72:ad:82:2f:c8:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 11 01:00:22 2023 GMT
Not After : Nov 9 02:00:22 2023 GMT
Subject: CN=8191fd08-b3a5-4bad-824f-567ced93607f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:fe:86:ad:92:4a:a2:df:e3:ea:43:b0:50:
c4:1d:f3:cf:b5:81:f2:42:43:c9:d8:59:e0:a5:d8:
3c:00:35:f5:1f:ee:c7:97:0f:0b:7e:84:7f:b2:93:
a9:19:62:24:05:ae:b8:3e:5c:74:b6:f4:4d:f8:04:
5d:58:1e:bf:a6:87:d6:df:b0:0f:b6:2f:0b:68:ef:
e3:a7:82:ab:4f:b1:27:f3:7e:1f:98:2e:cf:b6:2b:
43:e4:a4:f2:d2:38:73:bc:3a:ec:c1:0b:ec:a3:5b:
f7:0b:dc:eb:39:b9:9e:14:0e:1f:1a:c3:4e:e9:1a:
ac:d3:45:36:2d:8a:c6:ef:7f:e1:84:42:ad:8f:e4:
85:2c:77:2b:3a:80:45:79:70:4c:5d:02:f0:2b:4d:
b1:e5:eb:8a:16:06:88:ef:11:a2:e1:f3:0a:31:20:
23:32:e6:ef:cd:29:0a:8d:20:23:d6:d7:5e:d3:e2:
47:47:f1:90:d1:21:c0:58:d1:31:8f:a4:f8:b9:7e:
ea:54:d2:5a:a0:2b:35:10:4f:d0:23:bc:a8:7d:2c:
64:dc:c8:24:f6:b2:8c:c2:10:de:91:62:d7:07:11:
0c:f4:72:01:d8:85:3f:6c:e4:14:ed:ef:91:d8:50:
c8:c1:5b:ee:82:3f:34:7d:1b:91:26:33:61:a5:bd:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:17:FF:2F:63:9F:15:4B:29:80:39:97:D4:52:69:32:00:C2:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3cece2a-b0fe-3f27-9678-6ce150def407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:cc:2c:f5:d9:55:f0:91:94:70:54:a4:bb:0c:8b:20:42:ec:
05:4b:f3:55:3f:4e:42:d8:3d:61:fa:97:49:3f:2e:1d:07:4b:
4a:a8:f8:e5:8f:f1:5e:06:ad:f5:fd:79:4f:10:fa:31:2b:55:
1f:8f:22:f9:ea:3e:96:4f:4b:d4:16:27:6c:95:c1:bc:9a:50:
af:b4:bb:1e:17:d1:a1:bc:22:fe:90:0d:71:5b:91:77:01:38:
42:6b:07:7c:68:66:03:69:8e:90:a4:34:13:2e:f1:01:8a:cf:
5a:fc:4e:1f:10:67:c9:5f:9e:47:0c:b6:19:d1:31:73:4f:78:
f4:d3:f7:f2:98:8d:45:5d:db:62:63:bc:83:8a:5d:a9:95:a6:
1a:2d:08:47:9c:4b:1a:08:4e:df:e5:88:25:e0:54:d8:cf:86:
71:75:d9:14:47:37:11:3d:88:af:f5:05:c0:81:1b:4d:ad:88:
7d:5d:eb:6a:24:75:2b:9c:b9:4a:0d:c1:88:ea:54:f9:0a:9d:
06:21:40:8f:20:a1:83:c2:18:03:b4:2c:5f:ab:07:aa:bb:c0:
13:e2:80:63:9c:12:82:44:26:9c:fb:9f:f3:d7:82:d1:6f:5b:
db:87:87:8f:09:8e:88:11:31:cd:49:63:72:3f:a2:83:40:8d:
49:7d:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:32:24 2025 by rpki-client