Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/69d0863f-3206-3cd2-8ca3-95ef7037ba15.roa
File: 69d0863f-3206-3cd2-8ca3-95ef7037ba15.roa (raw, json)
Hash identifier: 2nij0UBo0dz5u7LlL1ezmDMGVoS29TQR8uH4b7TCf0c=
Subject key identifier: 9D:55:E7:B0:94:99:5B:03:B8:88:39:F6:FB:7C:12:08:FC:E0:C1:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5E1C54323B5A88E81440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/69d0863f-3206-3cd2-8ca3-95ef7037ba15.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 9009
IP address blocks: 166.0.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5e:1c:54:32:3b:5a:88:e8:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=3e4ccafe-7774-466e-a6ca-32c3961768e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d5:78:3c:0f:dc:20:cb:13:15:46:ef:fd:cc:
24:af:b5:8c:b1:22:cd:6f:d9:fe:11:04:5c:2f:3f:
88:48:33:84:d8:14:26:11:97:bf:fb:fc:3f:37:e3:
37:0f:19:7c:14:ac:17:ff:be:13:b0:0a:e1:4b:fa:
77:22:f8:0d:ce:7f:ac:82:16:c2:61:51:09:12:2f:
be:ef:46:57:37:b5:af:48:05:d3:02:84:25:1f:8f:
9c:3d:27:9b:00:90:0d:cf:0c:fc:e5:b5:a7:9b:09:
d3:6b:f9:cf:03:14:75:cc:6b:67:75:01:5b:6e:17:
b1:3a:d0:44:5c:3e:31:b5:fe:bf:73:08:5e:83:2f:
d1:08:3f:dc:e6:83:29:ed:cb:c5:ee:ac:9d:81:3e:
7c:f5:d8:fb:b9:06:0c:4b:7e:5d:b6:3f:7c:e5:76:
29:a6:64:f6:41:24:5a:8b:8c:eb:b1:d5:cf:ae:bf:
da:5e:97:1b:3a:26:9f:33:c7:4c:65:59:09:48:f2:
54:2c:55:21:f0:ba:22:89:fb:66:ae:1d:e9:a5:05:
a6:27:fe:f5:c7:09:29:91:29:e2:f1:40:ee:f2:62:
6f:29:6f:7d:60:a5:df:c6:94:92:50:ec:3d:c3:87:
da:df:9f:28:a1:8d:6b:10:dc:02:ca:2b:54:e6:aa:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:E7:B0:94:99:5B:03:B8:88:39:F6:FB:7C:12:08:FC:E0:C1:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/69d0863f-3206-3cd2-8ca3-95ef7037ba15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:57:d9:f6:09:ec:36:91:9c:90:c2:04:ae:6d:b6:c0:5c:bf:
58:47:65:f3:eb:93:00:c2:be:71:9f:b6:73:5a:e2:cd:d5:ef:
67:c9:f6:75:e2:e1:89:78:7d:d9:91:00:65:63:af:1b:60:5a:
fd:7c:d4:5e:5e:86:ed:b9:24:24:0e:67:3e:c9:10:9e:64:c0:
ed:54:6f:e3:ac:20:cc:52:aa:74:b6:15:49:c8:37:f4:57:0a:
ec:c4:b5:d8:d7:5e:d4:dd:a8:cf:aa:0b:be:92:02:dd:3f:57:
37:94:af:db:b5:07:0d:07:e8:ff:9b:78:c6:cd:0e:67:53:4d:
aa:45:f7:12:9b:79:1f:ea:7d:4a:c6:e8:87:06:97:02:d4:ef:
d6:4b:b2:c6:e7:56:b8:42:ae:e2:86:1b:30:83:3d:ad:f2:f0:
b3:0a:4e:df:d0:6d:9c:9e:9d:eb:b3:12:32:bb:fa:14:de:04:
df:56:29:1f:f7:ba:c1:76:ac:26:5b:5d:31:6d:51:b5:90:d9:
57:5c:cd:5c:e6:97:a8:6a:6e:89:4a:ed:b1:77:b0:ee:bc:86:
57:13:54:90:2e:77:8e:11:2e:33:a6:96:33:f2:36:eb:5a:84:
9c:df:3d:e3:bf:c6:0a:c6:0c:dc:c8:07:57:b0:34:83:69:2d:
48:fa:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:33:16 2025 by rpki-client