Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3eaa8d47-85af-304c-8f20-91c442204ed9.roa
File: 3eaa8d47-85af-304c-8f20-91c442204ed9.roa (raw, json)
Hash identifier: 304iAEQ64ULAKQCLzOU6PF8c9yANhcrkWz7dVMlrjjE=
Subject key identifier: 7B:F2:5D:44:EA:06:33:9F:C8:3A:DB:99:41:16:A9:03:9E:0A:D4:46
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584824FA90F1B5C93B9007D8EA40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3eaa8d47-85af-304c-8f20-91c442204ed9.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 212238
IP address blocks: 166.0.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:90:f1:b5:c9:3b:90:07:d8:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=b7e39480-6034-4032-aa5b-b1708295ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:a5:4a:17:c9:6a:3e:31:7f:14:49:d0:19:
86:04:b2:54:b7:94:02:04:94:f8:71:62:9d:9e:10:
2a:0f:8d:42:4c:ca:35:a6:ba:bd:97:02:c6:77:ee:
77:31:2c:8f:18:4f:5a:48:d9:90:c1:80:65:a7:22:
59:ed:c0:8c:42:75:f4:f1:ae:36:19:13:5b:28:98:
32:6c:0d:88:1c:92:01:f2:ad:0a:5c:6a:cf:13:38:
89:dc:7b:a3:8b:22:67:c4:60:85:1d:84:64:0f:cd:
b3:ce:bc:2c:99:6a:c9:31:7a:47:28:ea:b0:16:5f:
03:ec:7a:32:5d:32:ce:92:c0:17:df:d5:f3:b5:08:
0b:f3:d6:3d:4b:b5:38:3b:98:4b:23:df:dc:3c:3c:
11:a9:99:ac:d0:bf:f0:d3:e6:1e:94:c4:67:ac:b1:
35:da:e0:3d:9c:30:c6:25:03:48:e3:29:73:51:09:
f9:eb:76:16:95:4c:e3:20:22:76:dc:e7:72:0d:29:
8f:a0:31:9c:a1:5a:e8:86:fc:87:10:6a:ed:9b:30:
50:f4:9f:74:70:8a:a1:f5:f7:fd:4e:d5:c4:c9:fa:
7f:a3:71:d4:41:45:66:57:83:a3:ba:65:21:53:ea:
b6:8e:e2:90:cd:65:9f:3d:06:ab:22:a4:f2:29:1b:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:5D:44:EA:06:33:9F:C8:3A:DB:99:41:16:A9:03:9E:0A:D4:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3eaa8d47-85af-304c-8f20-91c442204ed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:1a:e8:97:ee:47:70:fa:88:25:8e:92:c2:23:3f:0f:da:2e:
3f:f7:4e:7a:32:f2:fd:46:d9:4a:46:cb:15:f6:74:41:9d:14:
66:ae:ef:a1:1a:39:ea:91:b6:18:25:7b:7b:15:c2:09:9d:28:
e3:91:35:b8:d0:80:1d:fc:8b:9c:db:47:ad:a0:0d:b4:84:dd:
61:43:8b:b0:72:ac:43:7e:d5:4d:08:47:28:ee:e5:f5:d4:b6:
7a:d3:c2:f9:80:a6:7f:eb:52:a7:ff:46:83:b0:bb:8b:af:d0:
7d:79:8b:93:d8:4f:53:c1:61:22:48:aa:a9:69:5c:d5:07:4e:
ac:28:81:3e:23:67:22:2e:6f:be:88:37:f8:e3:d9:9c:c0:a7:
bc:f2:4d:be:fe:b6:cc:29:1b:80:03:28:7f:c2:df:da:6b:85:
75:fc:ef:3b:a1:e0:66:f0:39:5b:c6:32:76:f2:1e:8d:65:0e:
f0:78:d9:e5:4e:78:2a:0a:08:c9:f1:76:72:cf:36:f8:11:46:
21:7f:92:a7:aa:d9:1b:f5:38:18:fa:ef:e5:df:77:9d:d1:ef:
d9:6d:ca:23:ac:44:a2:21:38:bb:e7:91:39:ff:ea:1f:51:96:
7f:0c:6b:0d:e2:2b:d2:41:78:4e:1a:00:64:51:dd:6e:f4:a7:
e1:13:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:35 2025 by rpki-client