Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aaeb1dd4-8b0b-38b8-8ebb-591add1e6402.roa
File: aaeb1dd4-8b0b-38b8-8ebb-591add1e6402.roa (raw, json)
Hash identifier: a+4PaxOH0O/N78uMq5+bsaVCZgY/G/4auQibLjJEivI=
Subject key identifier: 53:56:F6:6F:81:83:CB:ED:7C:77:2E:54:29:C1:8F:DE:4B:D9:EC:7E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584731FB9C164862FD1CC67105C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aaeb1dd4-8b0b-38b8-8ebb-591add1e6402.roa
Signing time: Fri 13 Sep 2024 01:00:32 +0000
ROA not before: Fri 13 Sep 2024 01:00:32 +0000
ROA not after: Thu 12 Dec 2024 02:00:32 +0000
asID: 58061
IP address blocks: 166.0.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:31:fb:9c:16:48:62:fd:1c:c6:71:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 13 01:00:32 2024 GMT
Not After : Dec 12 02:00:32 2024 GMT
Subject: CN=621abb41-4892-4520-9e35-cf5084ca1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:67:68:58:1c:b4:3e:dc:cd:d4:9b:0a:3c:
c6:ef:ea:18:bc:e5:02:95:4a:78:dd:33:3a:e8:ef:
fc:9c:cf:93:34:d9:9a:47:57:c8:1f:49:a5:99:73:
26:0c:48:47:c4:4a:ca:fb:5c:24:5b:cd:7a:32:db:
93:03:7c:62:af:a9:1f:85:9b:03:ed:e6:30:e2:16:
ac:44:3e:c4:2d:b7:4b:56:ab:d7:58:29:a8:41:3c:
c3:d5:3b:bb:2e:b7:99:cf:af:0f:f8:1e:10:ee:3a:
8e:b8:38:a4:59:ca:92:37:0d:53:4b:78:d8:11:24:
cd:6c:1c:a8:5c:80:60:c3:12:ee:30:90:3a:f6:7c:
aa:20:d9:09:d0:6a:48:9c:f3:f2:d5:61:1a:01:cd:
b6:dc:50:97:69:9a:2f:5d:f4:69:f9:16:1e:1e:dc:
79:76:c4:0a:b1:9c:25:80:b2:77:36:19:af:07:95:
e1:ef:23:fb:8a:04:b8:c2:db:76:d9:8c:6b:3d:62:
9b:8a:07:d8:ae:42:84:c1:74:9f:eb:12:5c:c5:9b:
41:88:4e:bd:e6:12:23:79:03:55:14:f0:70:65:d9:
15:54:82:fa:36:cd:11:18:77:f4:18:02:b2:0b:66:
ad:37:d5:bd:bb:07:4c:0e:5b:3a:44:24:d3:ad:4e:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:F6:6F:81:83:CB:ED:7C:77:2E:54:29:C1:8F:DE:4B:D9:EC:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aaeb1dd4-8b0b-38b8-8ebb-591add1e6402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:2c:a9:6c:5d:50:7f:ad:38:6a:d5:79:bf:05:1d:0d:77:50:
f3:6a:b2:32:3e:f4:98:2a:05:fe:d5:8d:e3:8c:5b:3b:6e:1d:
54:a7:dc:10:ab:dd:b8:14:88:f6:a7:fd:70:38:d2:bb:75:89:
51:37:95:d1:54:dd:9f:c6:74:fe:7e:5f:fd:b6:b0:1b:d7:4a:
03:85:76:20:8e:d7:70:a3:ca:3c:52:b2:9a:b8:8b:e4:c5:e9:
4c:af:60:ff:63:bd:57:6f:33:dd:da:8e:68:55:f5:5a:3a:a8:
8d:56:e8:46:c9:22:14:1a:80:1b:bf:a5:6a:f1:56:d7:4b:cb:
d9:6c:b0:9d:de:a7:45:e7:16:04:b2:07:0d:15:52:06:9c:01:
0a:96:74:14:88:f2:dd:c1:51:86:dc:67:c5:48:c1:28:97:49:
fe:67:08:c0:f5:38:55:cc:ba:f8:55:dc:60:30:01:9f:b0:a4:
61:2f:03:35:d6:3f:27:4b:be:6f:02:93:d8:cc:60:7b:7e:b0:
9b:39:f1:89:c3:af:f9:b2:23:aa:dd:4c:90:e2:b6:21:68:45:
6c:9f:02:eb:88:02:14:e5:a6:27:f8:b1:26:28:9c:45:aa:d5:
64:87:d4:f6:3e:01:af:a1:69:a0:f3:21:26:79:d0:c9:ca:17:
34:1c:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:19:48 2025 by rpki-client