Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45573b59-5cf7-3bde-a73f-ca5a60e00f96.roa
File: 45573b59-5cf7-3bde-a73f-ca5a60e00f96.roa (raw, json)
Hash identifier: quUFyYvyMYGFG1wfxbQ40MFX4jmmuogDdhQrvah0WOU=
Subject key identifier: EA:5F:FC:CE:79:B9:79:CD:21:E1:3A:04:1D:48:DD:AA:16:BB:C7:AE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846D2049F17902748332F42F100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45573b59-5cf7-3bde-a73f-ca5a60e00f96.roa
Signing time: Fri 09 Aug 2024 16:02:05 +0000
ROA not before: Fri 09 Aug 2024 16:02:05 +0000
ROA not after: Thu 07 Nov 2024 17:02:05 +0000
asID: 834
IP address blocks: 166.0.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d2:04:9f:17:90:27:48:33:2f:42:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 9 16:02:05 2024 GMT
Not After : Nov 7 17:02:05 2024 GMT
Subject: CN=0b816747-1850-43b2-bc55-7d1785a91e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:e8:c1:4c:c2:7c:ba:bd:ab:72:db:a7:e7:
53:7a:ad:96:1c:c8:58:ba:72:31:39:17:c0:07:55:
6c:6c:e9:b1:d6:eb:3a:76:13:e2:8d:3a:8a:70:dc:
91:5c:16:da:8e:44:d8:52:8a:d5:41:a8:2f:fa:3c:
fe:a2:40:49:6f:95:f8:e2:e7:33:13:c5:64:7c:19:
30:57:1a:00:3d:23:68:38:ee:75:37:5a:c7:eb:d8:
0d:74:b0:6f:2f:36:73:4a:4f:43:f3:b7:62:14:f0:
d4:8f:fe:48:f6:91:fd:8b:33:14:3c:10:5b:70:bf:
b4:47:eb:da:cb:cc:b7:c5:45:ac:80:79:8a:98:49:
2c:8f:31:2e:58:14:d0:09:5b:b9:2b:22:ef:f5:df:
d7:6f:ab:89:b0:32:17:28:db:cf:95:5f:62:08:f1:
90:62:5e:9e:7f:72:f6:53:7b:74:4b:7d:9f:c5:74:
a6:ea:c2:ba:fd:45:3b:61:76:b3:2f:6d:76:0b:4c:
ee:62:32:92:6b:fa:7d:2c:64:1f:3c:34:0e:5f:a5:
51:d5:fd:cf:73:83:31:5b:46:81:d5:ea:ae:04:2c:
55:b0:32:16:90:7d:ec:2a:bf:f0:75:8a:f7:a3:39:
35:2f:ed:c2:82:1c:89:f1:0e:ca:e5:23:d1:cb:bd:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:FC:CE:79:B9:79:CD:21:E1:3A:04:1D:48:DD:AA:16:BB:C7:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45573b59-5cf7-3bde-a73f-ca5a60e00f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b2:09:80:1b:6b:48:db:5d:07:f0:d3:5f:27:66:50:68:89:
06:65:db:ad:2a:f7:0a:e5:78:d0:26:a9:1a:77:66:bb:57:24:
67:2e:a3:d9:ac:fc:e2:0b:ee:90:02:06:e4:21:e8:0e:c8:96:
c7:6f:ac:6a:5c:b8:e7:ff:ad:05:70:5a:53:d3:fd:e7:8b:55:
db:bf:f8:47:e3:43:f3:a0:6f:d4:48:7b:67:ae:5e:77:fe:ba:
62:76:3c:29:8c:55:02:ca:70:a0:7e:4d:e0:ee:65:05:1c:ba:
2b:e9:e7:4f:6d:2f:54:ad:a2:56:69:81:f4:8e:41:bd:24:5f:
55:ba:3b:77:82:21:fe:bc:d4:1a:38:57:a9:8c:8d:b5:b0:1b:
b4:f4:4c:cf:a3:0e:d1:94:b8:d4:9f:1f:b9:2a:57:a0:a5:2d:
36:f2:b1:ce:90:eb:aa:97:31:81:54:b3:3a:01:19:5e:a9:ae:
26:3d:81:21:ce:8b:fb:5b:7d:a4:fa:2c:34:22:72:8d:30:b4:
f0:c5:d3:8b:d8:ca:0c:3f:0e:64:29:e3:54:0c:f3:95:fd:2e:
72:b0:0c:e3:3e:38:ff:66:c2:79:cb:f8:e2:51:a4:67:cf:51:
2e:59:b9:74:5a:d3:53:c8:42:60:0f:d7:d5:0f:b0:12:95:f4:
6d:7f:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:31 2025 by rpki-client