Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f2f30fe-3a22-3dd9-bc9c-aad78e577b09.roa
File: 1f2f30fe-3a22-3dd9-bc9c-aad78e577b09.roa (raw, json)
Hash identifier: /EI23FK6bMmUYJ771HjvHOIB6Bx2WCqyqP5IblYph1k=
Subject key identifier: 96:D4:2B:96:1C:67:77:4D:E6:17:EF:94:AA:E2:8B:EC:DF:50:36:7E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A7631A18F1CCBCA7D8657880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f2f30fe-3a22-3dd9-bc9c-aad78e577b09.roa
Signing time: Fri 24 Jan 2025 19:06:34 +0000
ROA not before: Fri 24 Jan 2025 19:06:34 +0000
ROA not after: Thu 24 Apr 2025 18:06:34 +0000
asID: 834
IP address blocks: 166.0.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a7:63:1a:18:f1:cc:bc:a7:d8:65:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 24 19:06:34 2025 GMT
Not After : Apr 24 18:06:34 2025 GMT
Subject: CN=b5a7d3a5-58f3-41f2-be63-9790a8875740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:11:d4:78:7d:81:fd:33:75:c2:6b:dc:ad:
39:fd:f8:67:a9:46:f4:f5:bb:d6:eb:53:13:1b:fc:
e9:dd:32:d1:10:52:f5:9e:bf:57:cd:2a:31:59:40:
3b:5f:02:e4:e6:a0:92:17:99:71:0e:2f:64:ec:43:
77:f7:53:ec:1c:98:31:9e:d9:03:0a:5a:3a:14:92:
86:08:33:0f:f1:24:87:79:a5:a4:80:ba:98:16:b8:
71:32:bc:12:4a:a7:22:cd:f0:d2:d9:15:ce:f3:f7:
15:9b:c7:a9:7b:4f:fd:97:28:83:5a:17:27:f3:de:
8b:2b:ca:92:4d:00:f3:ca:07:13:b8:f5:c2:61:27:
fd:f0:d3:10:9b:68:33:01:0f:7e:1f:42:f0:55:8b:
3b:6f:ea:c8:c7:68:a5:24:30:35:0f:10:c3:60:9b:
7c:85:15:2c:d6:13:55:75:7e:17:05:ea:e2:70:59:
2c:ee:3f:3e:89:fd:6f:b7:5f:53:26:32:93:56:83:
f2:2f:60:e6:df:2b:72:9c:80:c4:80:97:bc:47:dd:
63:c4:45:d6:32:2d:ac:04:ac:cd:d7:80:93:cb:dc:
c0:e0:b6:b0:3c:a0:8b:cd:20:ce:4d:fb:70:8e:df:
0b:aa:46:54:07:79:9f:f9:fe:a1:43:50:de:3b:ad:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:2B:96:1C:67:77:4D:E6:17:EF:94:AA:E2:8B:EC:DF:50:36:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f2f30fe-3a22-3dd9-bc9c-aad78e577b09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:82:bc:40:d6:60:0d:ac:c0:d1:96:68:ed:f1:f0:6c:eb:e5:
bc:98:61:b9:7b:5b:77:4d:04:b3:65:bd:1b:b5:4a:08:55:28:
59:e4:b3:af:74:ea:5e:4c:48:96:92:3f:f7:a5:64:38:15:50:
de:7d:e8:49:44:9f:0b:f0:b7:fd:45:e1:aa:b7:ac:6c:bc:77:
a5:db:40:f1:4b:2b:82:7e:06:2a:3d:e3:13:48:67:d8:aa:6d:
15:24:84:a1:a1:f0:75:7f:38:07:95:49:30:0e:ea:05:61:4c:
1d:80:8b:be:ae:7e:97:66:f0:18:7f:33:d0:60:6d:89:79:0c:
dc:88:f1:fa:50:99:7f:aa:8b:47:6f:74:9a:f8:18:a4:2b:bf:
7a:84:3c:36:5c:bc:b0:ed:8f:04:10:b3:7f:af:45:c3:79:4e:
5f:16:21:af:4d:0c:36:84:87:3c:d6:c9:d1:9a:36:29:81:06:
cd:98:a3:86:25:3e:16:cc:2d:61:a5:8a:2c:f1:b2:01:dc:28:
8e:b5:40:0d:8b:8b:c7:8a:91:6c:b1:9c:59:65:e8:e4:29:87:
9d:57:00:5e:0f:aa:43:51:73:59:4c:d8:6a:c3:55:7d:17:7e:
c9:50:69:6d:f0:5a:5b:40:19:02:43:9b:9f:f6:5b:f4:40:8e:
5a:1a:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:24:03 2025 by rpki-client