Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f130783-ef26-3c8e-99b0-85c70470ee44.roa
File: 7f130783-ef26-3c8e-99b0-85c70470ee44.roa (raw, json)
Hash identifier: sMdbx1JTH6GBxUD8SSbycV4qQI5h82jsfJXQ+fkr+qY=
Subject key identifier: 8E:D1:A8:7D:BC:47:90:88:F9:2A:9A:84:29:9E:73:A8:EF:97:19:D6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A1933CBAFD021489FD25A900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f130783-ef26-3c8e-99b0-85c70470ee44.roa
Signing time: Wed 22 Jan 2025 17:08:42 +0000
ROA not before: Wed 22 Jan 2025 17:08:42 +0000
ROA not after: Tue 22 Apr 2025 16:08:42 +0000
asID: 834
IP address blocks: 166.0.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:93:3c:ba:fd:02:14:89:fd:25:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 22 17:08:42 2025 GMT
Not After : Apr 22 16:08:42 2025 GMT
Subject: CN=a4554f1a-900b-4125-8610-fbce18135128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:45:de:59:31:58:6f:91:da:2d:0e:cd:94:
af:4b:28:0b:91:d6:89:11:54:e0:a1:1f:62:30:10:
80:ec:d4:16:0d:65:13:52:d6:9e:0e:ac:cc:cd:85:
03:b5:5e:4c:3d:df:98:03:6f:72:e3:e4:e6:13:c7:
d6:58:82:6c:bf:2b:5d:37:16:f4:db:ef:82:ed:9e:
6d:13:0b:73:c8:9e:5a:1c:78:29:db:7b:3e:b5:ab:
22:06:97:cb:1f:ee:65:ac:50:61:4d:c0:ec:de:1d:
0d:90:74:29:5c:de:28:e0:c0:56:9f:95:9f:ea:ba:
ba:0b:21:f8:0b:78:3b:60:31:fd:1b:af:4a:ca:0b:
ee:89:ea:66:97:3b:0c:f4:5a:7d:21:7d:5f:16:cd:
d9:85:d6:0b:93:60:3f:28:b0:1c:be:9a:e6:19:63:
50:5a:d4:53:39:da:8a:41:76:a2:f1:f3:a9:20:0d:
24:9f:9a:b5:37:16:fd:0c:c5:28:6a:64:47:25:7e:
9f:00:e1:83:96:82:78:68:82:c3:2b:bc:bc:e8:e6:
b0:dc:f6:30:ca:c4:3d:66:b6:73:bf:b9:3e:b2:1e:
40:43:b2:f1:bd:12:ad:68:3a:47:55:49:48:01:5f:
b4:11:62:af:f3:4e:b3:30:7a:21:d3:95:82:26:67:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:A8:7D:BC:47:90:88:F9:2A:9A:84:29:9E:73:A8:EF:97:19:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f130783-ef26-3c8e-99b0-85c70470ee44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:67:08:f2:4c:34:00:ef:84:c2:ad:80:02:65:c0:fd:37:d0:
25:39:3c:51:28:08:80:28:27:d2:e9:2d:fb:20:27:ef:0f:d0:
a2:95:3a:a8:f7:c5:47:84:c2:1f:44:74:b8:29:80:44:a8:cd:
f7:ba:2b:ea:6e:cc:88:ac:3f:33:44:d8:ca:8f:78:dd:91:a1:
71:54:91:92:0f:82:c6:14:55:6a:6c:ec:d8:a6:bf:a9:ff:ee:
8f:c3:ad:d0:07:3e:c3:aa:da:d5:a3:03:a0:aa:07:cb:1d:fc:
e6:4e:a1:29:0b:e0:0e:59:65:5d:e8:e4:39:b5:df:e7:90:7e:
70:24:d4:a9:bb:b9:ca:63:96:51:92:70:c7:62:47:f2:0a:f1:
50:1b:5e:f2:02:bb:02:b2:ea:dd:d0:39:d2:49:06:4a:9b:16:
16:cd:e7:1b:fc:bd:06:e4:83:52:ab:d7:2c:b9:f5:1a:89:0b:
23:28:49:9e:0d:5c:b1:5e:ff:12:c3:12:e1:2a:3e:a5:02:57:
67:9c:f2:7e:f4:21:be:ef:f6:a7:77:8d:d6:07:a8:80:11:b0:
79:f6:7d:f3:9e:15:9e:90:ab:f9:d1:84:18:cc:a8:2e:ba:5e:
40:2d:9a:f9:19:25:92:83:ed:2e:95:dd:7c:5e:1f:26:79:d2:
b5:fc:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:57:26 2025 by rpki-client