Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f49cfe81-037c-3940-bd2f-bbd0cf753f2b.roa
File: f49cfe81-037c-3940-bd2f-bbd0cf753f2b.roa (raw, json)
Hash identifier: O7bEjrU5OMPMNCU7n7iNBll8oOQEdEmiXQ1Xf8Kfwj4=
Subject key identifier: B2:F7:D7:B8:D8:FF:83:78:09:5D:A7:69:EF:75:21:EC:B3:71:B9:8C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848058CE0437421BF4435028B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f49cfe81-037c-3940-bd2f-bbd0cf753f2b.roa
Signing time: Wed 27 Nov 2024 19:49:47 +0000
ROA not before: Wed 27 Nov 2024 19:49:47 +0000
ROA not after: Tue 25 Feb 2025 19:49:47 +0000
asID: 11798
IP address blocks: 166.1.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:05:8c:e0:43:74:21:bf:44:35:02:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 27 19:49:47 2024 GMT
Not After : Feb 25 19:49:47 2025 GMT
Subject: CN=f02f9881-ccd4-4af5-a287-55500c43aceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:10:9c:5f:64:36:85:2a:1b:53:e1:6f:c4:
ed:b3:d9:95:2b:d0:64:16:2c:ab:e0:84:fa:23:c7:
22:66:ad:b0:47:00:60:66:aa:c3:be:bf:86:2a:cb:
fd:13:6c:e3:2d:bb:a4:04:87:ce:96:8e:30:96:66:
32:18:1e:16:08:38:4b:f2:73:47:3d:a5:0e:75:e9:
e3:1e:fc:1c:73:c5:96:31:92:83:ea:5d:06:9a:f5:
e8:65:5d:c5:a3:a6:e7:b8:6b:f4:60:d6:2c:00:59:
f8:91:ae:b9:31:72:01:37:b9:ba:e5:46:76:33:cb:
ad:2a:df:fe:0b:cf:cc:05:22:fb:23:a6:c0:07:e1:
3c:5a:f2:c3:e7:09:45:ab:87:2b:54:f7:fd:ad:67:
94:d2:86:17:d0:f5:19:9e:7d:c5:f9:65:c3:16:95:
e6:19:f4:8f:b0:6f:10:9b:d4:af:b1:39:15:53:3b:
4d:18:13:c8:a5:84:65:8a:56:53:a4:aa:5a:86:99:
46:4b:d4:01:62:b5:c1:66:7e:1f:21:37:82:b2:4f:
d6:9d:25:9d:9f:9e:fc:ea:69:84:24:d1:5e:5f:fd:
0d:02:e5:7e:7c:0a:aa:64:16:45:0e:63:0f:b2:c5:
4d:16:94:a1:5b:98:d8:2a:6a:a7:c1:29:c7:6b:13:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F7:D7:B8:D8:FF:83:78:09:5D:A7:69:EF:75:21:EC:B3:71:B9:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f49cfe81-037c-3940-bd2f-bbd0cf753f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:db:35:43:cb:ad:59:0b:3b:18:9d:30:b8:e5:34:ea:63:b3:
a7:f1:e3:74:f0:60:e3:12:ca:ac:da:07:80:27:9f:c9:41:10:
f0:70:4f:52:ed:3c:75:af:26:f9:57:64:1d:58:80:4a:8d:12:
b9:6b:3e:9a:45:bc:7a:1e:57:6f:42:7c:2a:c1:16:14:6e:05:
dc:15:eb:dc:ec:c4:63:52:1b:4a:d2:9c:4a:3b:1a:63:b9:e7:
3c:df:0b:c2:e2:82:8c:e2:26:6c:57:db:af:32:24:75:6f:c2:
51:1d:96:a3:ec:09:d0:ee:62:47:3f:f6:52:01:27:81:29:4f:
54:be:74:dd:fa:22:54:3d:4d:aa:e2:6f:a0:76:5f:a2:ea:78:
95:7d:80:a8:a8:0e:62:67:40:b4:3d:1d:18:7e:45:cb:d3:4d:
38:59:50:82:20:66:c8:d9:ac:30:13:5f:f4:ac:7b:34:cb:e6:
d9:4e:a8:16:95:0c:0b:31:d9:37:e1:f7:1d:18:5e:75:05:e5:
12:0a:c2:fa:4f:6d:a8:fb:4f:ba:2a:2b:92:2a:1b:31:91:ba:
76:1e:4d:10:3c:d3:dc:e9:6e:33:a6:b8:1b:9d:e3:8e:a2:ff:
29:e1:7d:e1:18:18:b5:56:12:f5:99:07:4c:04:d0:7e:fc:48:
01:e3:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:46 2025 by rpki-client