Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a37f3e71-f0f5-3827-9d11-a4f7e288e358.roa
File: a37f3e71-f0f5-3827-9d11-a4f7e288e358.roa (raw, json)
Hash identifier: +vFbT9YUCAOzd6LMv8K505BPVaQ4YMlX0Kmz05NnPeQ=
Subject key identifier: 05:1E:F2:F6:B4:2B:DE:BD:D1:19:89:48:2E:E2:D6:00:60:55:90:CA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847A08B52A30FFCD746B2A9F680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a37f3e71-f0f5-3827-9d11-a4f7e288e358.roa
Signing time: Tue 22 Oct 2024 15:30:00 +0000
ROA not before: Tue 22 Oct 2024 15:30:00 +0000
ROA not after: Mon 20 Jan 2025 16:30:00 +0000
asID: 11798
IP address blocks: 166.0.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a0:8b:52:a3:0f:fc:d7:46:b2:a9:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 22 15:30:00 2024 GMT
Not After : Jan 20 16:30:00 2025 GMT
Subject: CN=ae5df0ec-ed7e-46c7-a5eb-012c77c719c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:dc:cf:0f:8f:24:93:3d:53:c7:5f:0e:55:
cd:c0:4e:49:45:57:6b:14:f4:fe:12:2b:25:25:fc:
0d:fa:ff:e9:e0:e3:2a:ec:e6:99:40:1b:8c:68:4f:
9d:08:d8:5f:97:c3:8d:f9:e0:30:a4:ec:e4:40:89:
38:c3:17:88:3d:c8:4d:7e:0e:da:6a:af:e3:54:f1:
5b:80:cd:ea:24:47:df:b0:d5:97:bf:3d:10:dc:42:
64:7a:f1:6f:4d:fd:02:e1:18:ee:8e:1a:e5:c4:e3:
13:f2:8d:6e:7c:59:bb:ea:93:db:55:3c:b6:6b:3b:
13:a9:7b:0c:9b:49:bc:ad:e0:34:6c:26:cf:32:8f:
39:d9:5d:c5:9c:75:ea:64:93:39:db:20:81:fc:24:
6f:90:a3:55:8c:00:ac:a1:1c:bd:d3:c3:21:8e:5a:
65:51:25:84:b2:3a:8a:db:6c:03:2a:7d:2f:53:df:
f0:1e:49:90:e6:34:c5:d8:29:30:8c:4c:cf:52:50:
69:54:fa:29:b7:32:e4:af:2a:fc:ea:0a:17:68:c2:
4a:e6:ff:5a:db:82:26:98:f7:b7:78:95:f9:a9:ec:
13:2f:a9:9d:b8:53:f6:33:3f:6d:d5:00:bc:33:6c:
ef:e9:40:a6:3c:a0:9b:f6:56:63:41:09:92:49:fc:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:F2:F6:B4:2B:DE:BD:D1:19:89:48:2E:E2:D6:00:60:55:90:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a37f3e71-f0f5-3827-9d11-a4f7e288e358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:23:f7:7b:45:c6:73:dc:d7:1a:c3:29:f2:50:c5:dd:d9:8f:
22:f4:00:a3:9c:12:92:00:c6:b2:21:16:82:eb:64:d8:37:1b:
a4:35:56:ba:fe:b3:be:50:04:41:bd:8f:43:59:f6:6a:df:6d:
19:6b:92:c1:70:85:28:b3:85:91:a9:b6:4c:5f:4f:94:62:90:
68:8a:e2:4b:af:a9:0e:95:5c:57:8a:70:4a:86:69:6a:b9:79:
69:30:9a:66:34:26:43:ea:a9:c6:e2:44:d2:76:e5:ae:ff:21:
1b:9f:e7:d6:c8:5a:ce:e3:43:74:85:85:68:59:12:f6:34:db:
54:08:41:02:4a:0d:71:92:c1:89:8e:ac:46:dc:ef:a1:25:b7:
ea:a4:2b:13:cb:62:7e:50:92:83:b0:61:d6:85:c9:79:4f:19:
ad:8b:c6:00:57:72:f2:7c:d5:be:7f:bf:c3:de:7a:54:8b:8c:
5c:a6:c5:5b:04:0c:f7:93:35:96:4c:3d:22:ed:fb:a1:05:55:
e0:7a:04:49:df:31:db:3a:77:9a:52:79:cc:65:9c:5f:62:67:
23:93:a8:a9:69:8f:12:13:de:69:fd:e3:dd:3a:51:17:ae:ac:
55:1a:34:37:60:8f:42:05:f4:15:71:14:99:a2:f3:59:2c:99:
0c:cc:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:30 2025 by rpki-client