Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d261771c-4626-325d-beb8-1a4cabed670d.roa
File: d261771c-4626-325d-beb8-1a4cabed670d.roa (raw, json)
Hash identifier: gIP1v0oHAL1afC6IIs2thcfP3Mwr3/an7A0b0JbDt/0=
Subject key identifier: 39:EF:4E:7A:CF:EF:6E:8D:16:44:4A:E0:CB:9C:63:E2:E5:EA:EA:83
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848DF1C35F24674656966F2A3A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d261771c-4626-325d-beb8-1a4cabed670d.roa
Signing time: Thu 13 Feb 2025 18:08:59 +0000
ROA not before: Thu 13 Feb 2025 18:08:59 +0000
ROA not after: Wed 14 May 2025 17:08:59 +0000
asID: 834
IP address blocks: 166.0.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:1c:35:f2:46:74:65:69:66:f2:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 13 18:08:59 2025 GMT
Not After : May 14 17:08:59 2025 GMT
Subject: CN=36d6ddc7-4f77-4e77-abe9-c7311c61f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:be:ed:d3:81:83:7d:ef:73:93:5c:61:1d:
31:4a:49:1d:47:33:a5:ff:2e:61:f1:84:0c:6f:8e:
0f:56:f2:23:d7:33:52:ee:21:bd:f0:af:31:4b:58:
51:df:09:3c:72:eb:3f:a9:d7:06:55:fc:44:07:f0:
a2:40:33:ac:2c:fe:34:38:33:5a:35:17:15:be:c4:
e5:b4:9c:eb:4f:49:52:96:ce:75:c6:8b:fc:68:3e:
64:ec:dc:25:2c:69:23:85:00:72:f0:09:85:7e:e4:
64:12:27:93:5b:ac:84:03:33:56:67:58:c6:12:bb:
98:9c:f6:cd:4a:ff:da:9a:4f:91:33:7b:da:a2:68:
7f:66:eb:98:cd:42:4d:34:0a:91:bf:47:fe:ea:e4:
34:a9:be:17:17:73:a4:03:43:06:95:a7:15:bb:85:
e8:6c:a5:d0:72:50:45:1d:64:e8:6c:61:f0:9d:83:
06:ff:37:f2:d4:61:6a:03:94:fc:8f:49:a8:21:35:
29:ae:9f:a0:f0:44:7f:44:aa:c6:93:a1:28:30:34:
23:01:08:48:eb:76:eb:c1:71:aa:da:bc:bd:bf:4e:
ff:17:73:83:5e:6e:31:2a:e1:e9:7f:2a:8b:70:2c:
db:d1:cb:47:1e:05:d2:cf:5b:85:4c:1f:3c:12:fd:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:4E:7A:CF:EF:6E:8D:16:44:4A:E0:CB:9C:63:E2:E5:EA:EA:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d261771c-4626-325d-beb8-1a4cabed670d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:8d:ff:e3:dc:d6:d4:d6:7b:54:81:e2:d6:02:65:e9:70:55:
f9:b2:be:cf:da:29:60:ea:c1:d6:fe:11:89:ff:7f:53:67:19:
0f:fe:ab:7f:9c:40:be:50:d2:99:54:fc:eb:5a:a4:60:67:64:
3c:11:a3:5c:3e:59:5f:b2:88:09:5c:56:cb:51:38:38:e0:0d:
77:61:55:b3:7f:6d:bf:a9:1b:ba:10:8c:6d:55:ec:e3:5e:ca:
b2:63:c8:63:8a:76:cb:ed:76:c5:ff:2f:a1:89:7e:bb:d6:f8:
0c:5e:cc:e9:21:80:50:11:f1:c4:c0:1d:fd:59:44:d9:4c:a9:
0f:07:20:92:32:17:b3:01:e0:72:52:ac:b0:d3:e5:5a:0e:68:
33:73:7f:f6:16:93:70:2b:da:23:69:84:3f:99:5c:97:b9:de:
d9:69:57:28:38:a1:97:47:66:46:3b:59:32:c6:8c:22:43:62:
63:10:91:19:3c:76:70:2f:46:c0:e0:e9:e1:60:6a:94:0a:9a:
89:96:7f:22:b1:f6:c5:90:23:f4:65:c8:c5:66:1a:5b:c4:45:
a2:15:08:02:56:46:af:ac:2c:58:31:21:82:3f:c5:c3:92:96:
15:1a:90:87:a2:85:4b:7d:58:49:b5:05:d0:aa:bd:67:38:28:
bc:7a:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:01:06 2025 by rpki-client