Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa
File: aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa (raw, json)
Hash identifier: BrkNk0OAeZN7AAw5EgvErBhxaEJ/zG6DnPjDuPcCpcA=
Subject key identifier: 47:27:B1:61:FE:5E:2D:4A:71:25:E9:17:68:B6:62:7A:BC:66:75:4C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A5F256C0BD6DA97D6CF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 9009
IP address blocks: 166.0.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:5f:25:6c:0b:d6:da:97:d6:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=fb10e7d3-f15c-4ac7-8719-05a92ecff1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:28:4c:59:86:7e:f9:a2:98:04:eb:46:c5:
ad:12:30:ff:44:77:1c:f5:e0:a9:6f:e8:f5:72:14:
ce:f2:2c:bd:8a:31:d6:f1:c5:b7:6f:7c:8a:c5:bd:
77:9f:2d:72:19:0a:72:f7:f4:01:06:fa:b3:c7:cd:
8f:cd:76:37:e4:bc:86:74:23:bc:4e:39:5d:98:32:
e4:87:60:c5:68:11:ac:28:fe:c9:ab:c7:b6:d0:a8:
8b:04:23:97:46:6d:87:82:59:60:fa:a0:ce:05:11:
b3:81:a3:b8:f4:83:3e:2b:bd:23:b4:21:3b:5b:14:
25:d4:c0:d9:7e:c1:02:98:ac:39:45:39:fc:01:01:
da:77:85:e6:4e:e7:45:1e:7c:30:01:8b:ce:d8:23:
57:f1:64:b4:bd:f2:99:9a:e1:35:45:2c:a3:ec:0e:
b0:19:62:a3:99:b1:f0:f8:1d:c2:1a:2b:3e:98:50:
f5:cf:89:5c:e7:bd:b9:1d:a5:be:fd:2e:2d:8c:19:
9f:39:2a:48:cf:2d:ce:63:df:33:75:fa:19:8e:9c:
9a:8a:a0:14:42:40:27:cc:78:33:93:1b:63:15:4c:
b7:c9:12:78:30:6c:8f:e5:e8:63:87:78:05:71:32:
cb:06:d0:aa:87:98:61:b3:40:72:d0:e1:bb:b5:1f:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:27:B1:61:FE:5E:2D:4A:71:25:E9:17:68:B6:62:7A:BC:66:75:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa7e77df-ff95-3383-af71-8d55d3aa7eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:1e:96:9e:78:e9:15:89:70:df:91:79:34:ef:56:07:a4:d2:
e2:90:c6:64:3f:59:c0:81:53:75:f6:cc:30:90:6d:26:09:51:
50:32:ff:17:87:eb:58:da:9a:fa:3b:41:83:21:77:19:58:95:
5c:96:d1:4e:9a:e5:5d:d8:4c:9a:1d:8b:a0:3e:c6:20:3b:52:
b9:3d:12:3e:ab:9f:bb:d0:1d:79:6c:66:cc:43:e5:4f:cb:08:
d3:ce:b1:a9:a3:cf:40:ee:6c:b3:6f:e4:ab:c0:18:cf:01:da:
7f:35:31:c9:c9:8c:bb:2a:ea:37:18:27:3c:65:6f:3a:c5:d8:
f0:5e:d6:cf:54:7c:bc:8b:f7:11:88:7f:88:f1:ca:76:9d:15:
6c:23:ff:e1:23:46:b3:fb:11:0f:b8:29:ff:4c:33:f6:db:76:
10:98:25:97:ab:4c:7e:f0:b6:ed:ac:8d:9c:b6:33:b1:78:b3:
a6:f9:7a:9e:18:dc:bc:8e:65:24:32:c2:8d:0e:de:ac:30:cc:
c9:c4:94:9d:6d:08:f9:80:6e:4e:3d:5c:0c:81:01:e4:df:c9:
5b:2e:51:15:e1:b9:5a:a0:63:75:9b:a2:62:58:05:44:70:38:
17:dd:59:59:a5:70:d7:34:47:69:26:2f:5d:f0:58:9b:ba:d3:
64:f6:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:06 2025 by rpki-client