Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff131f60-3388-3e6d-aef7-57baa8778bc5.roa
File: ff131f60-3388-3e6d-aef7-57baa8778bc5.roa (raw, json)
Hash identifier: eNCX7eq2GSfy1AoayXonZ83EYndT7sNsFF73x1X7xa0=
Subject key identifier: 5B:39:9B:3E:F8:8A:58:50:57:FF:D4:27:4E:59:C5:EA:02:9C:A7:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846F38ABD8E926E3E76B4DFA780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff131f60-3388-3e6d-aef7-57baa8778bc5.roa
Signing time: Wed 21 Aug 2024 16:13:59 +0000
ROA not before: Wed 21 Aug 2024 16:13:59 +0000
ROA not after: Tue 19 Nov 2024 17:13:59 +0000
asID: 834
IP address blocks: 166.0.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f3:8a:bd:8e:92:6e:3e:76:b4:df:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 21 16:13:59 2024 GMT
Not After : Nov 19 17:13:59 2024 GMT
Subject: CN=0e309bd4-6082-427c-957b-66850cf49a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:68:6c:d1:9e:72:55:85:ea:44:86:ae:72:
52:8b:ac:d6:29:31:77:a7:d9:7c:9a:83:b2:73:7a:
01:73:55:91:fd:35:02:a8:87:04:38:82:01:49:04:
23:24:05:67:4e:d9:a9:c4:16:e7:1b:01:bc:fc:b6:
82:02:cd:ab:e6:d5:95:9a:f5:55:e5:23:a2:5b:b0:
06:9d:bd:22:b6:f5:25:f4:27:6c:3f:df:e0:20:51:
da:4c:e3:f0:db:b6:ec:34:27:ef:ef:8b:e4:a4:92:
d5:27:2d:4b:79:7a:81:4e:69:56:d9:47:3f:05:e4:
21:83:d2:88:ad:e8:ad:d5:51:c5:9d:8b:3e:ac:3b:
48:fa:1d:4a:ad:d0:ef:45:2c:57:1f:03:3a:18:62:
f1:06:7b:26:ef:93:9f:9d:41:a0:3d:e6:e2:02:b4:
9b:fe:80:be:0c:b7:ea:e7:ae:81:b8:73:d0:be:47:
bf:e9:38:7e:0d:d9:ef:67:96:25:8d:8e:76:bc:b1:
bc:06:00:98:07:81:3b:9d:07:c5:67:b7:e0:b1:5a:
7d:f3:67:16:f1:27:46:3c:82:88:66:27:9c:a2:3a:
e9:a2:3b:3c:db:63:c2:c2:ea:eb:69:ea:ae:68:81:
bb:71:36:6d:72:e0:3f:ed:17:80:7e:e1:a2:05:a8:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:39:9B:3E:F8:8A:58:50:57:FF:D4:27:4E:59:C5:EA:02:9C:A7:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff131f60-3388-3e6d-aef7-57baa8778bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:c6:ff:06:e1:1b:58:ad:04:67:c1:d7:e2:7a:42:1b:1b:76:
ba:4b:7a:a0:ba:22:e7:8e:9a:8e:3c:65:e1:8c:30:95:b7:3e:
5e:3a:95:26:d2:fe:4e:db:32:38:2d:d2:d1:ae:ee:fe:1c:53:
5b:3b:28:71:50:32:d7:e5:40:1b:90:34:ae:38:d0:42:5a:4b:
dd:2b:bf:92:71:48:f7:75:0e:1f:fd:7e:d2:0e:de:fe:41:7f:
9d:1a:1c:f8:58:6e:2a:4c:48:4c:4d:e2:65:b7:23:0c:e7:ab:
0a:5c:67:8c:34:ef:9d:02:02:11:b9:8b:9b:3c:db:35:51:b9:
91:5c:ef:07:84:00:13:e5:16:ee:d2:c1:69:6e:8c:33:26:53:
8f:4e:bf:8c:1a:94:04:f4:82:61:66:26:da:f3:24:c2:cb:5e:
89:0e:3a:92:ca:f8:93:8a:e1:d0:0e:84:9d:69:b0:99:e3:ec:
ae:20:7c:dd:4f:26:5a:23:2b:1d:9a:61:4c:c5:d2:16:51:63:
76:36:82:5b:2b:b4:be:b9:8d:5c:de:21:df:94:a4:24:4a:2f:
ec:f9:2f:f0:85:84:fc:df:d1:b0:08:a3:ec:42:bf:58:f6:42:
ec:d4:ba:76:98:c4:01:df:91:3a:ac:73:39:03:dc:58:f3:fe:
1b:36:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:35 2025 by rpki-client