Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa
File: 81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa (raw, json)
Hash identifier: f0JXb6M7T4JFmgrQYMwSpuIsEG/q1QubWo946t7DSAg=
Subject key identifier: EB:99:51:BC:2A:71:E4:F8:26:7E:E9:31:26:70:C4:68:EB:E8:51:34
Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial: 010D0C9F43285848222FD2636830A712CA5AAB00
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 396982
IP address blocks: 66.170.109.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d2:63:68:30:a7:12:ca:5a:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=50b65bf1-3a8d-48a3-a0e0-b2efd8a1fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:d4:b7:4e:11:34:e7:ab:4b:93:23:b5:ac:
cd:26:00:e1:b9:eb:85:2c:77:a2:82:41:5c:52:66:
bb:31:04:a1:22:e5:c0:b7:ed:c9:5c:ee:eb:c6:3d:
b7:3b:4b:33:ed:d8:30:22:03:94:61:f9:9d:a0:6e:
f3:80:98:8b:78:71:04:d9:9d:e5:6b:0a:cd:98:3d:
ba:12:14:25:66:33:a5:51:a8:cf:e5:19:c4:44:0a:
27:f3:34:ac:37:73:f1:88:ad:ca:58:19:30:e0:55:
e6:ed:b1:a9:f7:25:bc:b6:a5:6c:79:ed:af:33:f5:
da:ac:fb:de:b2:9e:06:e0:fe:f2:72:1b:2a:9a:ba:
95:19:ae:47:39:42:51:24:8b:80:b2:5a:60:79:71:
8c:18:e0:e2:6c:a0:95:93:77:8c:69:ea:d8:7a:a8:
01:77:d5:9c:4d:cb:d2:f0:4d:45:2b:d4:43:b2:1a:
d9:aa:77:e1:64:4a:3f:14:46:cf:2f:02:90:04:c7:
92:3a:bb:d6:5a:fa:04:d8:c3:59:c1:ad:d8:c7:d1:
1b:b0:c1:ed:3c:d5:46:23:cd:d0:a2:99:3e:ae:1c:
4d:a3:4c:6f:e8:a3:0e:c0:b7:8a:9d:85:6c:7f:cd:
35:f4:05:25:9c:22:1a:a0:f4:49:90:d0:14:b8:df:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:51:BC:2A:71:E4:F8:26:7E:E9:31:26:70:C4:68:EB:E8:51:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/81be268f-06f6-3b90-a180-ec3d89a3ecb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
X509v3 Authority Key Identifier:
keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
sbgp-ipAddrBlock: critical
IPv4:
66.170.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:93:58:8b:17:05:80:fc:53:2b:e4:11:fa:9d:69:df:f8:aa:
77:fc:4b:e5:e7:51:59:68:62:a4:8a:a4:5c:99:d6:96:b7:92:
3e:fe:be:3b:a8:a4:94:2d:1c:8d:14:88:43:61:2a:c5:6a:10:
00:ce:30:ea:46:27:c6:aa:97:05:8f:f1:3a:36:1f:46:4c:0e:
6a:02:77:af:e3:72:84:12:db:6f:18:df:28:6b:3f:6e:e8:e0:
1d:8c:2c:07:fc:4e:7f:d4:18:ba:01:ba:ed:1c:6c:dc:dc:96:
27:08:85:93:41:90:a7:21:ae:56:7e:43:0a:3f:fd:40:00:c1:
83:ed:95:43:ab:1a:3e:34:af:d3:2a:dd:c7:92:68:a4:9d:34:
57:49:f5:a2:fb:3c:c9:9a:5e:b3:e0:6e:a2:ab:61:1e:af:30:
d2:e5:8f:1c:50:d9:2b:b4:e8:ed:e0:91:c9:7d:4b:88:2e:cf:
b8:91:ac:45:50:98:07:2f:9f:b8:e4:05:59:7b:8b:ae:13:0d:
03:9a:17:8a:f0:fb:02:3c:96:a2:1b:ed:a8:7e:79:90:48:57:
1e:90:8d:2c:5a:96:d2:d8:f7:ec:42:1f:d8:9d:74:a6:f0:c8:
3d:95:d7:f6:f6:da:c9:49:23:c4:fc:c4:d0:82:85:31:0b:43:
b4:f7:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:51 2025 by rpki-client