Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31cf8ca3-9c94-3a39-90ee-071dc5c42c4a.roa
File: 31cf8ca3-9c94-3a39-90ee-071dc5c42c4a.roa (raw, json)
Hash identifier: XXtBd0GjK975/3i/mxlbeT0BW0QOAfMicqDYSR9ISZE=
Subject key identifier: 11:42:44:9A:14:49:AF:8D:1E:01:D8:61:73:96:13:1F:D0:C8:2A:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5D81D2A7F2EE829F19FB
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31cf8ca3-9c94-3a39-90ee-071dc5c42c4a.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 9009
IP address blocks: 166.0.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5d:81:d2:a7:f2:ee:82:9f:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=c68a3c51-ffd0-4ef3-b5d1-ad578b45f223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:fc:12:0d:48:4c:9c:13:dc:26:d5:e8:23:
6e:57:d0:b0:9c:4f:12:df:af:58:f0:ce:28:6c:3d:
73:82:e7:21:65:d8:33:d1:fd:48:87:71:66:ca:ed:
6e:aa:aa:45:51:0c:aa:18:5f:48:7c:3b:fa:89:ba:
65:7b:22:a5:f3:83:16:ea:c1:f2:0d:db:20:44:42:
86:fd:4f:8d:c3:74:44:b2:6a:b2:3f:ec:b4:15:c4:
aa:d0:69:6a:3e:a3:ee:7a:9a:15:07:c8:30:15:48:
44:3a:06:97:04:21:b3:fd:3b:cb:66:f9:8d:a5:5c:
e1:b8:53:b4:46:18:e9:a4:9c:46:ef:0d:e8:8d:c7:
6c:1a:94:3d:1d:1e:f3:54:64:d5:dc:a5:96:1c:89:
1b:81:3a:16:64:1c:1c:1b:74:f2:18:be:bd:e1:7a:
99:35:a8:ad:8e:c7:b4:d9:8f:47:30:f8:8f:38:a1:
b4:5a:7c:6d:65:5f:41:3e:c1:58:f4:01:77:19:59:
29:3a:d5:db:b4:b5:c5:a2:16:6e:4e:68:a2:22:d1:
a2:57:de:8f:f7:34:2b:77:04:9e:70:df:cf:09:fe:
50:7a:29:e7:c7:86:72:61:07:3b:8e:4e:f3:db:93:
be:8e:70:9a:c7:f9:2e:35:73:5c:39:0a:0e:b5:30:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:44:9A:14:49:AF:8D:1E:01:D8:61:73:96:13:1F:D0:C8:2A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/31cf8ca3-9c94-3a39-90ee-071dc5c42c4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:10:b9:8a:8c:12:81:16:06:fd:3b:37:70:62:6d:43:94:02:
72:36:60:70:e6:c9:00:ab:8f:15:e9:97:db:45:50:fb:74:0e:
d7:0c:78:cf:27:4b:e4:a1:1f:dd:68:0d:53:e2:c7:e9:d8:82:
ca:d2:3c:0b:40:bb:6f:75:0c:db:88:f3:e9:65:a2:be:2d:f7:
db:6a:21:cf:60:d1:a0:47:b2:50:49:35:9a:18:90:e6:da:21:
63:a4:3c:37:98:9c:fc:ff:b6:ae:3b:ba:b4:85:2e:11:e8:49:
65:8d:1f:58:ed:f5:a3:43:0b:bf:65:7a:b4:1d:83:fb:1b:01:
90:99:f3:4a:b1:ac:c3:e6:d5:42:14:71:86:3c:c9:e9:ed:10:
5d:33:15:0f:d6:61:8b:e5:af:87:80:ea:e0:93:05:f3:8d:93:
4f:04:4c:7d:2d:8d:82:a6:3a:32:d8:b3:52:90:ff:93:1a:73:
de:c7:b7:6d:8d:c9:cc:af:a8:25:ad:10:57:09:88:98:1f:3e:
be:bd:4e:f2:8f:78:02:ed:5d:58:18:9b:29:20:d8:dc:b1:4a:
62:0c:11:a8:17:78:98:40:3e:4a:88:c0:49:73:e3:df:1c:e3:
a3:85:bd:11:23:90:05:0b:09:21:46:d8:96:ea:3d:b1:4c:b0:
5b:f5:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:11 2025 by rpki-client