Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a5aeb0d-92ba-3d0c-96ae-4703256ef2b6.roa
File: 1a5aeb0d-92ba-3d0c-96ae-4703256ef2b6.roa (raw, json)
Hash identifier: hxhxKAgQhoBB8NJ+kGk7J9oMYkiUSluacmyYimREk6Y=
Subject key identifier: CF:33:C7:0A:96:27:6C:7C:DE:53:35:1D:B8:DB:4A:D4:D8:77:B8:D1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858476613906E91BB5018BDCE9A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a5aeb0d-92ba-3d0c-96ae-4703256ef2b6.roa
Signing time: Tue 01 Oct 2024 16:51:49 +0000
ROA not before: Tue 01 Oct 2024 16:51:49 +0000
ROA not after: Mon 30 Dec 2024 17:51:49 +0000
asID: 834
IP address blocks: 166.0.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:66:13:90:6e:91:bb:50:18:bd:ce:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 1 16:51:49 2024 GMT
Not After : Dec 30 17:51:49 2024 GMT
Subject: CN=7228c12d-0b8a-4c9f-95ce-1fdae72b726f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:45:67:29:5f:88:48:bf:e2:55:bb:ba:ff:
fd:af:0c:0b:8d:9e:8f:44:f0:73:6e:fc:5a:33:7b:
67:40:99:b8:b2:ed:0b:86:2f:ae:11:ee:51:2e:38:
d2:98:2a:cf:f5:2c:b3:35:8f:cc:68:a5:07:e1:d3:
71:0c:8f:1f:11:5c:e3:58:6f:e2:da:05:f6:37:b2:
7a:17:8d:77:bb:ac:b8:c6:e4:0f:63:48:5e:42:2c:
27:71:57:48:63:9c:0c:dc:f7:40:a1:8c:56:73:c4:
85:b6:52:a6:84:d8:5c:2d:d8:9e:9a:dc:e3:10:0d:
fb:c0:18:49:e3:2f:0e:a5:c6:05:8f:a2:84:8b:29:
82:69:d7:74:63:ff:64:f1:e1:91:f9:63:9e:d4:e8:
47:87:ab:72:60:59:a7:93:2e:df:cb:bd:0d:e3:2a:
f2:61:7d:cc:0e:30:d5:30:e7:e4:18:6a:8c:c5:61:
34:fc:69:d8:86:de:e4:ae:b9:c1:72:c1:54:8d:b7:
96:be:0d:70:74:62:08:3b:8d:9a:a6:1d:73:e2:70:
bf:b0:5b:d2:9f:d2:5a:68:29:85:35:84:2a:80:1e:
a3:c8:6a:5e:0a:e6:60:34:48:2f:44:f0:48:55:24:
59:56:c0:cb:ee:fc:54:3a:5a:27:64:1e:c4:70:6f:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:C7:0A:96:27:6C:7C:DE:53:35:1D:B8:DB:4A:D4:D8:77:B8:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a5aeb0d-92ba-3d0c-96ae-4703256ef2b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:54:87:92:e3:6a:63:42:c0:42:7d:3f:be:59:fe:60:47:4e:
6a:30:6f:a3:53:4d:ad:01:a4:71:59:c6:3f:30:14:63:40:f8:
0d:4d:ac:d4:b6:7d:4c:c1:a5:95:5c:ad:b0:fd:f2:f1:8e:34:
38:77:f5:21:5e:1c:22:f7:16:e4:5e:12:46:1e:e2:ed:fc:7b:
3e:e0:74:75:b7:59:d7:46:a6:14:b6:54:65:2c:1f:78:cc:34:
1b:77:04:7c:33:82:b2:6f:cd:17:5c:9b:eb:fe:4c:fc:3d:8f:
84:10:11:ee:86:1f:ac:53:ec:54:cd:38:45:f2:97:d2:19:d5:
36:9f:86:e4:20:f5:74:b2:a8:63:6f:96:00:b0:d7:a9:7a:85:
74:c0:0f:c0:c3:32:2f:ad:87:8e:17:79:e7:63:fb:bf:c7:67:
67:66:f4:6f:d7:a1:1b:32:71:02:fb:21:ca:ae:0f:d0:22:b9:
e7:96:30:94:b0:08:fe:f4:6d:72:a0:4e:7d:dd:80:6f:96:44:
33:d6:fb:af:c8:1d:94:6f:6b:1c:b9:cf:6a:63:c0:dc:3f:76:
04:10:01:da:7d:84:6c:32:c1:9d:68:fc:a5:b6:d4:78:64:bb:
2a:98:9a:1d:94:62:33:2a:02:68:6a:30:95:5e:75:9c:3c:2a:
5e:bb:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:24 2025 by rpki-client