Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20a13fc2-6bf7-3b5a-b3a7-91d7d8f82711.roa
File: 20a13fc2-6bf7-3b5a-b3a7-91d7d8f82711.roa (raw, json)
Hash identifier: LjB4mZFrr/aK2SqStePyLvttzeVpn/zISwN704HqIc4=
Subject key identifier: 40:82:DB:38:B5:4C:5A:48:0D:C6:C5:DD:39:1E:CB:70:2B:C8:AF:23
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847181CB6C7218501A0D809DD80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20a13fc2-6bf7-3b5a-b3a7-91d7d8f82711.roa
Signing time: Tue 03 Sep 2024 18:37:12 +0000
ROA not before: Tue 03 Sep 2024 18:37:12 +0000
ROA not after: Mon 02 Dec 2024 19:37:12 +0000
asID: 14315
IP address blocks: 166.0.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:18:1c:b6:c7:21:85:01:a0:d8:09:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 3 18:37:12 2024 GMT
Not After : Dec 2 19:37:12 2024 GMT
Subject: CN=24a43019-fad7-4c73-b24f-304d7bea1e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:e6:1f:22:a1:3b:7d:3e:48:21:a4:ab:b8:
59:f6:96:c6:f3:f8:57:c0:9f:44:c7:4b:d2:2d:42:
66:a7:ed:bf:bc:af:5b:e1:04:81:cd:f1:a0:f8:e2:
8e:f3:b3:e2:02:1a:60:d5:9b:d3:0a:5a:22:e7:61:
73:b6:44:8d:a8:2b:6e:a3:1f:5c:44:21:ea:ec:ee:
aa:23:42:90:0c:cf:41:61:78:b5:e7:1e:a1:03:d4:
61:74:cb:d2:58:09:d8:3c:3c:f6:48:c6:7e:38:78:
2f:09:75:d8:f3:a2:b6:f6:03:e6:65:5d:c4:2b:eb:
5a:0a:e4:96:bd:72:e9:65:31:df:9b:ab:2a:f4:34:
c1:a8:35:35:2e:f7:5f:64:c1:74:b8:09:d8:62:1f:
4c:dc:3b:54:bf:94:e1:b9:62:3e:cf:61:9f:28:16:
c3:a7:7e:a7:75:5d:c7:4f:2f:06:48:32:f9:84:c2:
83:c9:8f:25:d1:d6:e4:07:80:ee:49:d4:be:f1:ac:
97:49:3f:d0:54:f8:26:ee:c4:a7:b3:b2:ef:2c:87:
7c:2a:e6:1f:c7:e8:c7:17:91:06:88:41:b9:52:c5:
96:2b:24:90:19:18:1e:b8:53:37:24:9f:9f:b4:e3:
e0:0c:09:7a:2f:97:51:b0:e1:1b:cb:b5:08:7e:f9:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:DB:38:B5:4C:5A:48:0D:C6:C5:DD:39:1E:CB:70:2B:C8:AF:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20a13fc2-6bf7-3b5a-b3a7-91d7d8f82711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7c:2b:8d:48:12:7d:ff:26:ab:9f:b9:7d:11:33:a2:a7:ad:
f7:85:72:62:16:0e:b9:42:d2:91:a9:87:74:09:8e:a2:ce:31:
8d:e0:ac:52:44:e6:25:a7:ee:a1:bc:ca:b2:bd:b1:9a:cf:77:
0b:ba:d5:12:8b:b0:82:49:75:2c:03:1b:a6:11:54:7f:52:e5:
4e:d4:99:32:ea:c8:8d:9b:6d:c1:51:fe:24:24:5e:58:08:61:
0c:aa:72:18:40:bb:23:71:2a:1f:da:24:74:de:c9:c2:83:f2:
67:71:9e:36:49:cd:9a:41:44:13:37:39:af:d5:35:83:80:60:
bf:75:42:ac:90:ef:3f:09:f5:4c:c1:86:89:3e:fb:6a:98:61:
91:94:77:b7:8e:5d:b7:c6:f2:20:63:0e:45:04:b4:02:38:a0:
27:16:05:f3:25:5f:11:09:a3:9a:e5:b6:59:12:ad:2d:ca:ce:
a5:b1:62:9f:f4:dd:fb:5f:80:03:32:0e:51:50:3a:23:59:da:
b6:01:9e:54:21:ff:93:39:6f:31:bd:01:3a:e3:98:72:54:b0:
f8:0d:44:99:35:63:ac:5a:48:f1:86:d6:3f:cc:f0:0a:c5:a6:
f5:f1:61:d6:f1:7f:c7:23:06:27:95:be:90:d3:4b:bd:aa:6e:
03:17:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:51 2025 by rpki-client