Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f67ccf72-8ec6-35ae-a863-30b1f0b7fd46.roa
File: f67ccf72-8ec6-35ae-a863-30b1f0b7fd46.roa (raw, json)
Hash identifier: J0C5Tn4VaXMWY9Xvpd2GVHeSMorLJYqPp6v9ZhpwFiU=
Subject key identifier: 47:9B:C2:DD:70:5E:00:2D:C2:AF:3A:10:95:FA:F2:E8:B8:00:C2:6C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D182493281CFBFCB6A7303C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f67ccf72-8ec6-35ae-a863-30b1f0b7fd46.roa
Signing time: Tue 08 Aug 2023 16:31:43 +0000
ROA not before: Tue 08 Aug 2023 16:31:43 +0000
ROA not after: Mon 06 Nov 2023 17:31:43 +0000
asID: 201106
IP address blocks: 166.1.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:82:49:32:81:cf:bf:cb:6a:73:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:31:43 2023 GMT
Not After : Nov 6 17:31:43 2023 GMT
Subject: CN=8025e7ed-5c0f-4787-bcfa-470ffe6dc8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:ed:fe:7d:dd:3c:42:ce:63:31:3e:34:85:
93:17:3a:a0:5d:7e:57:51:a7:32:fe:e6:c2:d5:f1:
65:8a:db:0d:fd:a3:af:c5:c8:86:2b:92:ba:d6:02:
be:5d:50:5f:60:fa:8b:cb:72:7c:c9:0d:f8:f1:6c:
b3:ed:35:b4:6d:30:0e:e6:23:32:24:3d:87:f5:9f:
13:bf:b1:73:6a:3f:52:c2:f0:e1:47:d3:6b:44:21:
7d:68:4d:3f:6b:e1:8a:0c:54:03:66:3d:c3:99:bf:
4a:21:8a:a9:ce:00:e2:11:53:5e:4c:59:02:3c:b3:
17:c4:d8:83:ed:35:14:5a:4c:63:8d:e6:57:7f:65:
b6:ea:39:3d:fa:07:68:3f:aa:52:32:0e:b6:ed:c1:
21:14:63:a7:65:ba:9c:aa:14:ee:cc:44:bd:f1:3c:
de:a0:c3:eb:26:16:cd:db:d6:d5:39:76:bb:51:53:
f3:d1:da:ff:d1:f1:5c:69:54:02:0d:4c:28:d7:06:
0f:0a:d0:63:3d:cd:dd:ee:27:4f:69:b7:c7:73:01:
14:c8:da:fd:3e:ef:32:41:ed:7a:14:37:13:e4:c8:
4e:51:2a:ae:97:85:3c:86:fa:d2:be:d1:42:94:e7:
c0:0a:ff:57:7a:f4:7f:54:27:bb:4f:8c:97:05:c7:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:C2:DD:70:5E:00:2D:C2:AF:3A:10:95:FA:F2:E8:B8:00:C2:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f67ccf72-8ec6-35ae-a863-30b1f0b7fd46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2c:58:c1:ca:1a:98:15:5f:bb:a5:be:05:8b:b0:3e:c7:82:
4f:53:e8:47:4e:85:37:7d:2a:0a:11:e1:02:b7:f1:b9:79:89:
38:fa:88:ee:d4:48:65:0a:e7:f5:ba:be:34:10:79:66:5b:9a:
bf:78:82:9a:6a:7f:f7:2a:fc:a1:d7:e0:50:2a:e8:de:7c:ac:
b2:ff:c8:38:64:12:0d:d1:61:13:81:a6:81:41:a9:40:8e:47:
b1:e5:49:90:34:54:18:94:7c:db:d5:b5:59:6b:d9:68:6d:bc:
0d:dc:ee:48:97:8d:c3:32:34:0f:46:a4:c4:48:7b:bd:0c:ed:
07:a6:f2:6c:9b:1d:5a:44:a8:6e:ca:a0:7c:37:50:e5:5c:6e:
27:ee:30:59:de:06:57:d9:e7:87:43:48:ee:25:53:4f:2b:b9:
f8:c8:c7:4e:f2:03:c2:36:15:9b:e2:d1:83:ec:38:f8:86:7d:
6c:27:d0:9f:5e:f4:21:d0:54:12:42:b5:6a:35:83:d2:f3:3d:
e3:33:5d:33:26:e2:17:5c:99:31:3c:30:72:7b:cf:b9:02:7f:
73:ad:a9:93:76:61:c5:40:fd:b9:dd:a4:d3:ce:21:14:63:1f:
99:bd:76:87:3f:cb:0c:df:a1:af:7d:f0:5f:54:f0:87:7d:44:
77:ee:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:10 2025 by rpki-client