Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/99cc7b3b-1c99-3807-a045-9cd3ab2b7f13.roa
File: 99cc7b3b-1c99-3807-a045-9cd3ab2b7f13.roa (raw, json)
Hash identifier: ZM7amK5UsVlqw2Ngymg+1BCBNZTtaazxLcyPMXzbo04=
Subject key identifier: EB:04:3D:84:9C:93:9B:33:3F:F0:78:99:E7:39:6D:F3:EB:C1:41:4E
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848265FFC9CF7DCBBE4BF6577C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/99cc7b3b-1c99-3807-a045-9cd3ab2b7f13.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 2734
IP address blocks: 66.35.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:fc:9c:f7:dc:bb:e4:bf:65:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=7a2a9c77-03ac-438b-9a15-8e195eb29378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4d:a5:04:0a:52:76:67:04:88:99:f9:83:e4:
ef:04:c8:d0:b1:85:47:32:1d:19:62:26:80:a0:e9:
6d:34:80:81:56:bd:44:c2:4c:5a:c6:46:4f:53:de:
ad:14:e2:9f:8c:51:36:0e:94:6f:b1:39:d4:f1:30:
42:f0:27:1f:08:c1:49:59:ae:66:48:d1:70:c7:c2:
fc:6a:19:57:2b:f5:08:e1:e0:1c:cb:6a:c9:a8:de:
37:63:da:bd:d5:77:52:62:b5:5b:f3:a3:88:00:a8:
f1:92:14:8f:43:e6:3e:9d:f3:12:7b:c4:52:2b:d5:
9a:ea:4a:65:80:6a:dc:4d:10:5f:be:35:a3:ad:73:
13:50:50:94:8d:fb:3f:30:4d:09:d5:ef:39:8c:62:
6e:44:31:02:35:57:89:10:1f:44:68:47:10:73:4a:
b5:2e:57:7a:a8:4f:49:f0:72:42:59:b7:58:e0:46:
61:d5:7c:7b:e2:a2:b2:75:b4:32:6a:24:81:84:fe:
a9:d6:f7:27:90:4c:43:3f:55:d4:38:f2:7d:98:f7:
d1:b2:d6:1a:3e:f3:06:7a:88:d6:0d:be:79:e4:63:
52:88:e6:e1:9c:77:eb:62:a8:01:67:d4:56:7c:f9:
7d:a2:0f:fe:57:b5:f5:4a:42:98:93:29:48:55:b6:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:3D:84:9C:93:9B:33:3F:F0:78:99:E7:39:6D:F3:EB:C1:41:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/99cc7b3b-1c99-3807-a045-9cd3ab2b7f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:78:7c:99:35:2c:b7:86:0c:cd:c3:a2:d0:a3:de:df:8f:25:
e3:16:12:2e:e4:c6:c8:35:b4:0b:25:53:24:c9:b2:57:b8:11:
44:18:09:67:7f:f1:f9:0d:18:e4:c3:51:d0:e6:b9:55:da:ec:
7a:12:8a:d2:6c:50:1f:2b:05:9b:f2:4d:fc:42:b5:2b:05:0d:
f0:ad:bf:fa:50:34:a0:1c:83:ca:04:7b:f5:8d:23:a6:c8:a2:
df:a3:72:aa:9c:29:0a:32:5f:e6:57:70:f9:f7:a6:44:2c:2e:
f2:11:a0:cf:d0:49:64:cf:8e:7c:6f:1b:bf:66:af:1e:6a:fa:
b0:95:40:cb:0c:e8:2c:4c:5b:7f:68:02:92:25:8b:d3:03:01:
f2:34:cc:07:f6:42:34:93:11:f4:aa:f2:78:cd:71:e5:a3:15:
c4:0c:aa:ef:d7:5e:37:9a:e9:38:6d:b9:c0:e4:77:bb:50:d8:
36:7d:df:f4:e9:7f:eb:d3:36:c3:68:14:c6:cd:8a:c1:51:ac:
b0:66:4d:de:39:a6:f2:4b:54:0d:2b:99:36:f9:76:f8:8c:26:
92:0f:27:70:40:d1:24:5c:60:32:2a:3d:b1:37:a0:fd:d7:07:
a0:91:20:b4:c2:e5:9d:cf:57:77:73:de:3e:e9:f2:d6:ba:be:
d6:e1:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:33 2025 by rpki-client