Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aa8ae1c-c092-3abe-8773-014c06b0de1a.roa
File: 4aa8ae1c-c092-3abe-8773-014c06b0de1a.roa (raw, json)
Hash identifier: BXjRa43/cVL59vPOQjsrc4CP8ZyKfAG/l55spAPEM/o=
Subject key identifier: E0:62:44:8F:82:71:B4:E5:34:9E:E6:54:D3:BB:A5:89:FC:F7:1C:5E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858479C1121C355BF263A8D04C200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aa8ae1c-c092-3abe-8773-014c06b0de1a.roa
Signing time: Mon 21 Oct 2024 01:00:31 +0000
ROA not before: Mon 21 Oct 2024 01:00:31 +0000
ROA not after: Sun 19 Jan 2025 02:00:31 +0000
asID: 834
IP address blocks: 166.0.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:9c:11:21:c3:55:bf:26:3a:8d:04:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 21 01:00:31 2024 GMT
Not After : Jan 19 02:00:31 2025 GMT
Subject: CN=ed7e931f-a970-42fc-b6d8-7ca790d25c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:40:1c:e7:31:42:39:f6:fa:64:80:f3:66:
59:8c:fc:83:9d:7e:dd:d1:d2:2e:ad:98:31:01:d6:
e3:04:9e:5f:66:e7:39:ef:45:72:f0:24:f6:81:05:
a1:71:61:6e:17:db:f6:e6:3e:5f:e3:cf:5c:1b:b0:
a3:9b:ce:d4:71:20:40:a6:31:46:31:87:db:8d:61:
df:3b:e7:75:8a:ac:9b:50:62:90:4a:f2:54:93:e8:
e2:b4:76:9b:9b:dc:ee:5b:c2:9d:1c:25:68:88:13:
32:43:7c:19:cf:fd:9a:ad:d5:06:54:c8:17:4c:4c:
1f:6a:c6:ad:54:ba:04:21:68:ed:8f:d3:a8:38:73:
11:d7:40:5c:c1:cc:74:d6:d0:a5:1b:f2:80:cf:c3:
21:e7:36:19:fa:11:1f:38:31:c4:db:3b:3f:31:10:
0b:28:06:97:09:94:92:20:58:c8:bc:5b:25:4b:cf:
bd:bb:7f:35:3b:98:ac:3e:3a:cc:23:37:68:e2:dd:
00:e3:8b:cc:fe:f7:8a:05:83:2f:d6:f6:6b:8a:cd:
df:8d:0b:4b:f9:7a:9f:ed:55:2e:ed:0c:91:fb:3b:
75:4c:89:32:5d:da:cd:dc:49:d1:a0:c5:e0:bd:6e:
04:c7:4f:64:8c:83:fc:8e:70:0d:70:0d:83:65:f2:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:44:8F:82:71:B4:E5:34:9E:E6:54:D3:BB:A5:89:FC:F7:1C:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4aa8ae1c-c092-3abe-8773-014c06b0de1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:52:88:9c:4b:a8:f8:31:59:db:92:00:2e:c5:b9:4a:9d:95:
1d:82:3b:34:43:c1:32:d8:b0:4b:5f:4d:8a:69:b0:95:dd:51:
8f:d6:f7:e0:a6:b2:6e:fe:1c:14:b6:f2:7a:62:ca:c4:af:af:
a6:9f:f7:11:50:50:02:52:35:03:b8:89:86:38:cf:36:8c:ee:
5e:03:2f:30:31:9c:ae:49:69:b9:81:bf:0b:76:58:6a:d5:58:
0e:f7:b2:13:9e:e4:78:e0:26:c0:a6:01:25:3a:cd:5e:ff:38:
e8:89:29:c2:fc:34:00:d6:aa:5a:1b:03:e2:b4:a4:66:0e:9d:
b6:ce:e6:b8:a3:04:a9:e2:76:67:b8:0a:75:aa:a0:b5:3c:16:
d0:4a:3a:8f:a8:c5:9c:81:0a:0e:fd:f7:91:2f:4a:4f:88:34:
fc:41:64:cf:df:92:b5:58:98:98:a8:0d:4f:e8:c1:5e:e5:55:
a4:19:56:59:bb:1f:58:ac:aa:6f:b8:fd:4a:1c:f2:29:6a:89:
05:00:ae:3e:c3:2a:9d:d4:a7:12:93:53:c4:35:62:37:00:2c:
cf:dc:f0:c4:62:a8:fb:77:a1:64:b4:96:d0:49:22:1b:fc:2e:
2f:61:ac:86:5e:63:ab:71:0d:bd:7f:5a:98:a7:cc:4d:5c:86:
75:0b:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:13 2025 by rpki-client