Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d43e964-d18a-315a-a892-e9c2ffa266b5.roa
File: 1d43e964-d18a-315a-a892-e9c2ffa266b5.roa (raw, json)
Hash identifier: iQuWbFmtjoKZttNZX7pv5GnyO2YKiGEzNRMqABlod8k=
Subject key identifier: 71:D8:AA:61:96:C5:8C:2F:EB:60:F4:A7:F1:5F:25:51:11:1E:AF:15
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A5095EF3F40EF1A43CF7200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d43e964-d18a-315a-a892-e9c2ffa266b5.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 12183
IP address blocks: 66.160.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:95:ef:3f:40:ef:1a:43:cf:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=3723f96a-eb47-45af-b2db-5993d79a52f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:e3:c6:38:bf:4d:93:09:44:ff:df:1f:c5:
71:44:6b:8b:15:1c:f5:38:d5:6e:cb:f3:ad:ca:e5:
dc:ed:2c:83:60:51:93:36:1d:33:57:3d:8c:2d:82:
63:87:91:9b:ff:08:57:44:bc:9c:47:2b:93:67:be:
62:04:7a:eb:f5:c8:ae:4f:a3:3e:19:a4:9d:b1:d7:
bc:d5:42:05:28:4b:92:09:13:58:59:8a:f1:44:77:
41:b0:b9:f0:ce:c3:23:50:ba:70:67:94:90:55:b2:
dd:6d:87:92:4c:8b:c8:6b:5c:e3:69:76:ee:f2:d8:
4d:22:93:06:e2:7d:a6:fa:95:24:f2:cf:83:d6:7a:
64:f7:0d:ac:cd:a2:32:8b:37:3d:5a:2f:7b:1b:c9:
0a:08:9d:c9:6e:e7:0a:40:c6:b0:dc:80:73:63:1e:
e0:1c:f0:39:9a:77:23:91:02:b9:96:80:02:13:44:
6d:69:4a:5e:d4:34:ed:20:da:bb:14:f1:fa:ac:f2:
2f:7e:85:df:fb:7f:d6:1e:6d:09:74:b9:99:f2:e8:
ca:14:20:cc:15:7f:a6:5b:ea:ea:c4:12:81:fc:0f:
1a:ec:41:15:2d:ab:a1:83:2f:15:dd:40:2a:51:1d:
b4:1d:d0:f0:3a:27:b3:57:cc:7c:01:55:e0:9d:83:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:AA:61:96:C5:8C:2F:EB:60:F4:A7:F1:5F:25:51:11:1E:AF:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d43e964-d18a-315a-a892-e9c2ffa266b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:41:75:38:24:af:b9:42:cb:a0:0d:8a:7a:aa:42:d4:50:93:
e6:b2:8c:e6:64:e1:f2:7a:58:a4:78:37:01:76:c5:ad:2c:b2:
de:23:2b:3f:b0:9e:4c:03:00:89:03:a8:d2:57:e2:87:0b:b5:
73:b0:c8:69:2f:f5:1c:28:b4:6c:34:09:cc:79:bb:32:d3:43:
15:f1:31:d0:01:d5:db:6c:40:ca:4a:69:8b:a3:d6:39:5b:46:
c2:99:57:a1:0a:37:75:03:ee:e3:9c:46:c9:df:c2:0d:8d:cd:
eb:46:80:63:c9:78:80:03:d5:dd:c1:e1:09:b8:54:f2:d7:75:
0b:49:09:ca:84:cb:9e:2c:c5:29:2a:86:34:3a:da:16:18:79:
25:a7:3e:14:2b:03:07:0a:bf:1e:ef:c7:eb:bf:b0:b0:65:ce:
cf:34:f8:7a:c2:54:cc:65:36:6c:72:c7:dc:96:12:2e:b0:25:
a0:2d:57:f3:96:d0:e9:13:e7:d1:44:3e:6f:28:1b:9e:be:18:
ba:25:fb:28:9e:14:3a:88:7d:42:56:f0:d1:05:c8:80:9a:15:
05:cd:f3:04:d4:a3:2e:9e:27:30:d4:d6:56:d9:0d:35:c9:45:
a2:ef:3d:ea:5b:ac:d1:fa:aa:d7:ac:5e:ad:79:e2:32:b5:c9:
3c:cc:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:32 2025 by rpki-client