Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c93f6efa-c329-3a47-9e77-67dd9719dde2.roa
File: c93f6efa-c329-3a47-9e77-67dd9719dde2.roa (raw, json)
Hash identifier: +z+7xT62QHsMwK/Oe19EvafdLt2FkRr3NzTnO9dMUGU=
Subject key identifier: 3F:90:E5:06:1B:08:DB:32:FD:BE:5C:74:51:46:2C:42:77:4D:D6:23
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285846F06024CA7BAD2900ACB16C98
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c93f6efa-c329-3a47-9e77-67dd9719dde2.roa
Signing time: Tue 20 Aug 2024 13:00:39 +0000
ROA not before: Tue 20 Aug 2024 13:00:39 +0000
ROA not after: Mon 18 Nov 2024 14:00:39 +0000
asID: 18779
IP address blocks: 166.88.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f0:60:24:ca:7b:ad:29:00:ac:b1:6c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Aug 20 13:00:39 2024 GMT
Not After : Nov 18 14:00:39 2024 GMT
Subject: CN=371f196f-1570-4329-8518-c428cf61e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:7e:69:a5:e1:52:30:7e:ff:e7:c8:54:96:
31:41:ba:f3:4d:3f:45:4a:6b:43:ef:21:fe:63:c5:
7d:5a:be:d4:65:f8:3e:4d:5f:ac:fe:c0:ef:4f:16:
ce:ca:62:e5:aa:7b:27:51:19:ff:c5:bc:d6:7f:dd:
6e:c2:0b:1e:b7:0f:f0:1d:0a:17:c1:60:8c:68:a2:
20:73:56:4b:9f:4a:85:da:41:66:95:01:bb:90:7e:
92:10:38:69:39:cf:7d:d8:86:12:6c:3e:23:92:b4:
a3:ee:07:2c:02:37:9a:be:8e:88:5f:e5:5e:33:37:
93:be:56:47:5e:8d:26:2c:88:43:69:d0:ab:f0:6f:
64:28:f7:f6:e1:eb:12:d4:5a:dc:aa:28:6b:07:5b:
e2:2f:1a:2b:00:70:14:a1:bf:0c:5f:2f:d7:38:e2:
59:fb:8c:44:50:4f:79:0e:df:1f:0e:d7:47:8c:b5:
71:16:eb:67:a5:c0:2a:6f:0b:5e:fc:ae:d3:71:09:
a5:07:60:38:e1:10:37:6b:1c:cd:d2:73:a1:f9:52:
1c:1d:81:8f:c0:9b:0d:7b:1f:29:57:00:88:55:63:
c8:63:a9:0b:28:f4:44:a7:5d:c9:3c:de:d2:02:64:
7a:9d:ab:fa:0a:aa:6d:d5:e1:16:3f:81:7c:7d:51:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:E5:06:1B:08:DB:32:FD:BE:5C:74:51:46:2C:42:77:4D:D6:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c93f6efa-c329-3a47-9e77-67dd9719dde2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
166.88.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:03:f5:35:9c:12:50:85:fc:73:cf:b1:db:63:d0:59:5e:25:
49:aa:2f:41:60:af:59:18:35:9a:1a:d8:79:53:cf:ba:98:26:
b3:e6:c1:ca:2f:2f:5d:1b:02:ce:08:a6:19:69:72:ef:d5:e1:
36:1c:be:53:00:b7:80:ab:f3:b4:88:02:1c:b1:0f:6a:a1:60:
f6:b6:79:fb:84:fd:63:d9:82:23:57:42:a4:7a:20:4a:08:c2:
62:35:c2:64:e3:16:fc:5c:23:5f:a5:d9:f9:9e:0d:fb:10:31:
b9:7c:8c:7d:50:88:39:fe:87:43:40:84:91:f0:be:9c:94:43:
f4:8b:44:af:5e:b7:10:a9:1a:e5:ca:25:8b:23:3f:87:e8:d3:
55:b3:cd:b2:b5:51:28:bb:d3:cf:f7:8a:a4:76:e0:dc:f5:a8:
78:fc:db:6e:0a:8b:a6:68:d3:d8:4f:80:65:81:74:69:b3:54:
20:a3:3c:d6:36:72:98:fd:94:22:87:58:f2:09:3f:98:91:82:
f3:f8:72:c4:72:b3:80:66:87:0e:3a:23:93:9e:ad:eb:3e:2c:
f8:f8:1d:01:51:90:1b:8c:00:81:da:48:c7:68:e1:ba:da:c3:
ce:09:6c:43:76:c1:6c:41:3c:32:a9:5d:9f:f4:ba:3c:4a:e4:
e6:ac:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:26 2025 by rpki-client