Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27e67d65-33bf-3c3d-9e66-ade82909b259.roa
File: 27e67d65-33bf-3c3d-9e66-ade82909b259.roa (raw, json)
Hash identifier: 4+ijDRclPytrjJ1DH68xHdjtIewjzZZPSEZ5QnXhlUQ=
Subject key identifier: E8:61:D0:EF:83:9F:9D:6D:D5:E6:D5:5E:91:FA:6F:A8:9A:8E:60:C2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF8166B05DC64A7F0565E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27e67d65-33bf-3c3d-9e66-ade82909b259.roa
Signing time: Wed 05 Feb 2025 20:03:22 +0000
ROA not before: Wed 05 Feb 2025 20:03:22 +0000
ROA not after: Tue 06 May 2025 19:03:22 +0000
asID: 11798
IP address blocks: 166.0.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:81:66:b0:5d:c6:4a:7f:05:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:22 2025 GMT
Not After : May 6 19:03:22 2025 GMT
Subject: CN=34a7a1b0-a216-48f3-931c-3b3da55a7a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:2c:06:bb:01:e0:bc:dc:87:e8:6d:a5:a3:
92:a9:1c:bf:d5:dc:ec:33:d7:a2:6a:74:71:70:7a:
0c:45:a0:78:0e:88:27:be:78:3b:4c:7f:e2:27:9b:
a8:6c:49:3b:69:e8:00:03:a2:92:1b:b9:44:fc:3a:
be:1b:b1:23:21:f6:18:c5:c7:d0:73:7f:8d:61:90:
2f:00:55:13:73:ec:ea:ec:b6:b0:59:42:98:fd:4f:
a9:a0:d8:a1:a9:e4:5a:f7:85:7e:5c:65:cf:9c:07:
24:17:7d:83:1b:4f:ca:bc:35:9c:7b:7b:af:92:11:
35:58:b4:54:84:72:92:ee:f6:3c:f9:b1:6a:05:fa:
53:33:a8:37:bc:9b:c6:c2:7a:a6:f4:0e:0f:f6:f7:
52:32:08:f3:e1:eb:88:4f:3e:b7:fc:0f:27:68:5d:
c9:e6:2b:77:97:77:a3:29:d5:29:c7:54:7a:69:f7:
e3:3c:8b:b8:a5:41:18:0e:64:c5:06:d5:00:f1:e5:
4e:ba:eb:ce:06:9b:e6:46:a9:84:4c:3f:e2:c4:85:
75:f1:42:dd:b1:fa:28:17:f3:f5:26:c9:56:6a:40:
17:87:dd:f8:86:f8:9c:39:de:5a:f3:06:21:e0:16:
f1:c4:31:85:62:00:b2:0e:a9:c8:98:43:8e:26:bb:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:D0:EF:83:9F:9D:6D:D5:E6:D5:5E:91:FA:6F:A8:9A:8E:60:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27e67d65-33bf-3c3d-9e66-ade82909b259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ef:26:fe:05:43:10:fe:ff:91:34:2c:89:7f:bb:d9:9b:70:
17:8f:8f:33:d4:48:81:02:ef:65:58:9a:9c:49:21:a8:2e:d2:
b5:01:ed:a4:4d:2a:ec:bb:08:46:1e:ae:9d:16:39:33:60:57:
a4:5c:09:a5:e3:b6:00:02:88:c8:dc:01:10:08:0b:3d:e9:4d:
fd:23:c5:5a:f4:96:14:cd:87:09:f1:6a:6c:a2:76:bd:1f:03:
8b:7b:27:17:f8:84:58:eb:fc:20:05:1e:fe:b8:14:a0:28:5d:
25:32:06:61:be:50:c9:14:ae:36:a0:01:e3:75:14:ae:01:ce:
a9:76:1a:d0:e1:0d:af:21:df:72:9b:ba:71:20:23:c9:0d:47:
0a:da:f4:9b:05:1e:54:39:1a:f5:72:6c:1a:4a:63:6f:b0:76:
ff:83:13:f2:f5:c4:47:9d:78:41:73:64:f2:2b:b4:0b:f0:57:
be:ac:79:f5:3b:13:4a:94:31:e3:ba:5f:42:dd:20:9f:2c:3b:
40:4c:b6:6d:52:4e:ee:bd:2b:49:a6:86:00:f2:dd:1d:2b:bc:
95:50:ca:ba:e8:19:57:4b:6a:25:4b:f6:66:cf:0c:d2:a2:11:
7d:f9:c8:69:18:21:46:9e:5e:fe:51:c0:9b:be:d6:42:da:83:
46:97:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:52:53 2025 by rpki-client