Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13b7a0e6-9ef4-3a74-a65b-795a04412432.roa
File: 13b7a0e6-9ef4-3a74-a65b-795a04412432.roa (raw, json)
Hash identifier: PMIYr0qqNxmYoWVMqw9uCXykY0gu/113WVfnENXhQAg=
Subject key identifier: 56:14:B0:17:EC:8F:23:EC:F2:3A:D8:FC:0C:D2:13:A5:81:6A:85:5E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858471AAA4F6E100DC3019C1399D0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13b7a0e6-9ef4-3a74-a65b-795a04412432.roa
Signing time: Wed 04 Sep 2024 16:34:07 +0000
ROA not before: Wed 04 Sep 2024 16:34:07 +0000
ROA not after: Tue 03 Dec 2024 17:34:07 +0000
asID: 11798
IP address blocks: 166.1.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1a:aa:4f:6e:10:0d:c3:01:9c:13:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 4 16:34:07 2024 GMT
Not After : Dec 3 17:34:07 2024 GMT
Subject: CN=8b806ba4-e4e2-496f-b000-495ece8e4ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:c0:9c:7a:3d:0e:bc:64:0b:fc:6e:f9:6a:
e6:f4:a9:ed:3e:41:35:c8:05:52:64:d7:4a:6b:f7:
ae:94:23:ff:15:bd:b9:1b:7e:f0:3d:39:30:8b:2b:
c1:2e:74:d5:a7:a7:fe:49:d1:06:a5:d8:5c:31:5c:
1f:42:4b:5f:79:40:eb:6b:87:cb:57:c5:e6:0b:ac:
bf:e9:2a:a4:72:b2:f7:ba:1b:07:0b:5d:19:e1:95:
e4:44:77:7b:b2:86:77:12:0f:b9:27:16:88:5f:ba:
3a:f9:4b:b8:4a:12:31:3e:e3:f0:97:1b:c3:3e:cf:
a3:a7:db:47:a4:ad:b4:aa:04:fa:89:91:bb:9b:41:
af:3b:ab:9b:b6:ae:a7:9d:57:59:c3:b2:6b:25:f1:
4c:ab:a1:ef:39:74:fd:cb:83:13:4a:e6:03:e8:63:
1c:37:a7:10:de:6f:ef:22:fe:be:b6:85:fc:63:fd:
c0:c7:4b:81:53:05:2d:ca:5a:7b:4d:81:d3:c1:98:
da:7b:db:81:92:46:a1:d2:39:60:11:1e:2b:9e:a0:
5d:44:ad:75:0a:bb:e2:d3:35:4f:e7:23:db:87:02:
01:e3:15:fa:3e:a2:f1:32:1f:1d:0d:24:7d:4d:86:
37:b5:a3:46:e4:cb:1d:de:0d:9c:4f:08:55:ec:b7:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:B0:17:EC:8F:23:EC:F2:3A:D8:FC:0C:D2:13:A5:81:6A:85:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13b7a0e6-9ef4-3a74-a65b-795a04412432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:4e:bc:13:15:0d:4b:51:9a:04:31:d1:27:9a:aa:c9:8a:96:
2b:d6:6c:52:5b:a2:f7:04:6d:38:12:05:fd:7e:53:3b:a2:70:
38:19:81:e7:95:9a:b4:85:f9:5d:ac:55:1e:53:f8:96:a4:5f:
bf:8c:52:ff:7e:37:da:ae:98:dc:1e:b2:60:aa:e5:c5:76:9c:
bb:1a:cb:b3:68:5e:91:0b:2e:5b:dc:c1:47:24:71:ed:16:2c:
33:57:07:e8:2b:f4:6e:b9:45:22:41:3a:0c:03:c1:9f:eb:1e:
02:b4:b6:cb:44:48:8d:b3:78:d1:c7:90:c5:a1:8d:4c:60:2f:
f4:8d:28:60:9f:ff:f9:3a:cd:b0:3e:17:4c:43:a1:78:74:72:
a3:d2:0b:94:2d:34:a6:26:ee:02:a2:b9:0e:b1:10:4a:b5:42:
d1:6c:1f:22:34:50:01:47:e0:60:a0:c5:ea:96:35:94:7c:0f:
94:14:9e:1a:7e:74:08:b6:b0:ea:35:a4:5f:66:75:30:1e:af:
07:96:5c:b9:44:b9:1a:9e:66:b4:76:75:35:2c:4e:cc:0e:c7:
fb:89:08:a8:c4:9a:c0:84:62:bd:d8:11:d9:ed:e4:40:db:c5:
41:a6:ce:fa:a8:79:66:c9:19:fb:cc:2e:f5:d6:cd:6e:9a:6b:
fa:8a:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:54 2025 by rpki-client