Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72c2561-863d-3f13-bf4e-7db584d4a4ca.roa
File: a72c2561-863d-3f13-bf4e-7db584d4a4ca.roa (raw, json)
Hash identifier: T3IKZobLK68WBwe9PvjCg4C63obrffcrhh0fJlP64LE=
Subject key identifier: 92:3D:D4:7D:C9:BA:8D:E4:2E:9C:98:EB:8D:AE:F5:01:BA:EA:97:32
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6C3A936FB599A04B3D200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72c2561-863d-3f13-bf4e-7db584d4a4ca.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 397655
IP address blocks: 66.160.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:c3:a9:36:fb:59:9a:04:b3:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=893ee94b-3b72-451e-ba33-e9692121833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:23:a3:95:68:0d:29:d2:fe:a5:a7:b9:fd:
1b:47:2b:c4:61:c0:46:85:20:5a:5b:e8:d5:c7:0a:
23:1f:48:da:ef:95:7a:a9:35:cb:08:9d:eb:ed:42:
a8:46:12:33:13:2a:96:12:fd:79:74:ef:f6:d8:33:
04:d7:e2:05:50:0a:dc:4b:4c:51:5a:9e:5a:30:6f:
51:48:05:e5:0d:e9:cd:99:40:05:00:b0:00:e4:0b:
80:6f:aa:c3:c3:27:b3:75:ea:52:92:1a:5b:ca:b9:
f8:96:48:b7:77:58:37:92:18:1a:b1:34:05:7f:1f:
9a:8e:c1:3c:5d:33:a8:de:e3:df:21:8b:6e:96:eb:
31:df:f5:65:e6:54:08:22:5c:d9:21:3e:d1:c1:44:
6c:33:c5:fc:36:b1:89:c4:57:f1:16:d6:41:e2:56:
a9:6e:49:32:af:51:52:2a:ce:81:40:7b:b3:c8:b3:
1c:9f:c4:da:36:f1:91:d2:9b:ea:2b:4e:13:45:45:
8a:10:9a:ac:99:d4:dc:e2:6c:c6:3c:9f:f0:fd:51:
ca:ac:09:48:96:95:c1:89:57:0f:e5:1d:24:38:89:
61:2b:9f:5b:34:42:a4:fd:61:9d:4f:a1:14:ea:80:
39:a5:73:33:ef:5b:a9:3c:41:e8:91:b5:f3:cd:8b:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:D4:7D:C9:BA:8D:E4:2E:9C:98:EB:8D:AE:F5:01:BA:EA:97:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a72c2561-863d-3f13-bf4e-7db584d4a4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:76:e6:bc:6b:f6:42:5a:35:2c:f4:c1:b2:bb:73:9b:a6:65:
80:c4:66:b4:68:a3:f2:04:ab:c5:8f:bd:d4:02:04:1e:1f:4d:
3f:e6:48:4f:c3:11:e5:fc:80:1e:41:7b:67:17:7c:6c:27:dd:
74:17:5e:77:22:e4:ba:8e:dc:d0:41:15:b4:69:b5:46:28:8e:
3c:8d:d9:3d:0e:9c:1a:d1:ef:18:af:69:da:97:13:62:f7:c0:
4e:96:85:d1:82:a2:10:c2:83:be:df:6b:f4:c1:37:97:86:cd:
f8:ea:bd:a8:1d:3c:d1:de:e5:97:d9:e5:a3:92:db:3b:68:46:
6a:16:2b:e5:ef:e5:bc:3d:12:cc:21:29:5e:61:48:78:f5:e9:
23:39:ed:40:2a:ae:80:22:10:09:13:4f:b8:83:b9:b0:8b:3c:
29:96:dc:a1:6f:57:31:ec:a9:b8:af:36:64:b2:34:0a:a7:7c:
9d:da:0e:ec:cc:a6:da:a7:57:3e:4f:b1:fc:b4:e7:29:84:cc:
f4:23:80:8a:5e:78:57:a8:85:28:58:5e:dc:6a:dd:84:ec:63:
62:90:b0:e3:87:cf:1b:b9:7f:b8:85:57:5c:c7:43:c3:5e:a4:
e3:00:1d:bb:4e:f0:23:40:a0:07:37:a7:d0:1d:af:72:cc:65:
05:62:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:54:26 2025 by rpki-client