Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a70461-9c28-3e25-8780-0ac0bb1c0350.roa
File: f6a70461-9c28-3e25-8780-0ac0bb1c0350.roa (raw, json)
Hash identifier: 0ahGrKabZkCHjPGShPoD8WYAQSXDsa9M6kvwIDZMkBs=
Subject key identifier: CD:C2:B3:5A:A4:8B:99:F8:E0:27:78:83:10:4D:56:4B:55:33:71:33
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843331860F5A2DF4C0FB333DAFC
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a70461-9c28-3e25-8780-0ac0bb1c0350.roa
Signing time: Tue 12 Sep 2023 15:27:33 +0000
ROA not before: Tue 12 Sep 2023 15:27:33 +0000
ROA not after: Mon 11 Dec 2023 16:27:33 +0000
asID: 47585
IP address blocks: 166.0.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:33:18:60:f5:a2:df:4c:0f:b3:33:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 12 15:27:33 2023 GMT
Not After : Dec 11 16:27:33 2023 GMT
Subject: CN=381b77d5-ea29-400c-9a9f-63e96686f70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:62:e2:9e:0c:fe:bd:d0:af:27:24:b1:09:
64:6e:34:6e:ed:47:8a:28:56:f7:32:75:c3:67:41:
4c:01:2e:20:e7:2b:eb:a6:e7:1e:b1:58:f4:bd:12:
05:8d:66:71:28:1e:6d:77:6b:e0:2d:93:f7:0b:ed:
14:d7:9d:fb:e2:15:9e:7b:c3:a7:1f:a7:cf:12:d5:
4b:b6:7e:01:13:cc:fe:af:ec:fc:bf:d0:72:45:9d:
1b:15:5c:d6:ac:fd:a4:5d:24:bc:dd:ff:7a:b5:37:
4d:48:a4:d8:fa:84:bc:1a:f6:43:21:60:c8:ce:e3:
34:be:55:dc:4a:11:f4:6c:c1:e5:84:64:98:ee:5e:
82:8b:19:2a:f2:bd:06:18:9c:08:46:9b:e6:b4:bb:
7e:c9:fc:d1:6d:a7:77:65:d1:07:81:9c:6c:b7:25:
5a:f8:37:09:4c:5d:8a:e8:bd:08:59:58:92:a0:f7:
7c:4a:a9:56:a1:99:3b:be:e2:56:75:13:aa:f8:bf:
e9:1a:33:89:2f:90:27:67:06:4c:88:dc:c8:81:d3:
f5:e1:d2:22:7c:1f:57:97:76:75:d7:8f:67:b7:07:
d4:68:5a:85:38:0e:c2:14:4a:65:fa:4c:0d:4a:3e:
01:6d:97:ba:1f:96:ba:2e:3f:bc:b3:b8:a6:f7:3a:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:B3:5A:A4:8B:99:F8:E0:27:78:83:10:4D:56:4B:55:33:71:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a70461-9c28-3e25-8780-0ac0bb1c0350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f8:e5:0b:98:db:4a:bf:69:9c:c5:c7:3c:12:fb:84:91:be:
f2:da:9c:49:f1:d7:b5:a9:5b:15:0e:e9:06:de:b7:19:4a:72:
e4:16:da:63:70:04:f8:83:e7:6c:ef:8e:c7:66:7f:fa:54:58:
09:24:83:64:f6:27:b2:2e:06:8e:c6:4b:84:5d:ce:15:3b:0f:
3e:34:a3:a6:09:0e:f4:c8:f8:67:d8:43:47:1c:c9:13:b9:dc:
fb:0b:98:64:30:31:fa:01:db:63:41:eb:c3:03:4f:bb:2c:c9:
e1:02:42:d8:79:ed:84:f6:4b:38:a6:ec:1e:2f:5e:c7:54:57:
fe:41:8f:35:f0:ed:8b:c6:67:a8:16:8b:9d:58:65:b3:6d:31:
d7:e6:45:e7:78:8e:24:23:dc:7c:7e:01:ba:ce:d2:75:5d:52:
b1:39:03:d1:10:07:28:29:75:e0:72:18:1c:4b:2c:11:87:f5:
65:de:c4:35:bd:50:c1:43:57:e3:f2:22:57:ec:01:a0:dc:67:
bd:d1:84:ce:db:25:43:f6:87:ac:d6:e3:ac:18:5b:90:14:99:
a7:d3:d1:62:69:33:8e:28:35:9d:d9:10:ce:c1:34:ce:f0:e6:
c8:1f:7c:b6:f1:5a:2a:24:fa:cb:3a:e8:fe:98:3a:54:65:a4:
18:e2:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:34:37 2025 by rpki-client