Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc42c406-bf41-358c-9bf3-5e55f797e52c.roa
File: fc42c406-bf41-358c-9bf3-5e55f797e52c.roa (raw, json)
Hash identifier: LvoRyoTeIdlhcJ8mnSZNXQwqIdBaURfLQCODkdsHWxA=
Subject key identifier: 66:14:7B:34:7D:E5:DA:E4:61:AC:2F:72:22:31:0A:D7:05:A0:30:0D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858453B7800B0E542D39F86A4F580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc42c406-bf41-358c-9bf3-5e55f797e52c.roa
Signing time: Sun 17 Mar 2024 01:00:26 +0000
ROA not before: Sun 17 Mar 2024 01:00:26 +0000
ROA not after: Sat 15 Jun 2024 01:00:26 +0000
asID: 11798
IP address blocks: 166.1.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:3b:78:00:b0:e5:42:d3:9f:86:a4:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 17 01:00:26 2024 GMT
Not After : Jun 15 01:00:26 2024 GMT
Subject: CN=5d77bf73-1f6e-4d6e-9bd9-2f3b33bed1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:56:33:c1:ac:6e:a6:87:f9:50:af:9f:03:
e0:ec:8e:46:2e:8c:1f:6e:6d:b3:55:2d:d0:ab:d5:
f6:5f:31:3f:8a:84:bf:de:3e:44:72:36:9f:64:3b:
10:09:f5:fa:36:60:be:5c:46:d4:0f:1c:5b:f4:0b:
b5:09:02:9c:7b:eb:66:a4:91:e0:5f:32:44:29:7c:
4d:2e:cf:31:e6:da:02:1e:bc:7f:8f:f8:49:d8:4c:
9e:fe:ee:cc:a2:e4:8a:2a:c5:2a:61:59:a8:27:9b:
46:82:13:44:5f:0b:23:f5:c3:4c:b7:fe:f9:de:49:
53:b5:c7:63:20:da:a2:bd:ec:74:77:b0:be:2b:d6:
f5:5c:08:ee:e7:ba:ae:b4:86:0a:e4:07:b4:65:16:
df:03:66:a9:e6:eb:9d:fa:b6:9c:3b:e3:32:85:81:
25:fe:1c:41:8e:33:ac:b0:37:19:61:ba:bb:97:ac:
f8:d7:56:df:d2:d4:d3:15:60:ae:b1:3b:79:af:ec:
2f:9a:02:19:3b:31:f4:17:f0:21:c3:33:f5:fb:5c:
2a:9f:bf:65:d6:0e:90:5f:cd:4c:f7:56:ae:80:51:
2f:b5:1d:11:9f:81:83:cd:e9:d1:1f:07:6e:c2:31:
9d:c0:8a:54:db:d7:23:9b:9f:61:8a:18:99:7c:8e:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:7B:34:7D:E5:DA:E4:61:AC:2F:72:22:31:0A:D7:05:A0:30:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fc42c406-bf41-358c-9bf3-5e55f797e52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:73:bd:8c:f1:11:9f:b8:9b:1b:79:ca:ac:17:d2:19:89:84:
9f:d9:12:db:49:b2:75:d3:80:2a:9b:c9:ad:fe:04:35:7c:5b:
83:60:bb:90:ba:5e:cb:c1:27:cd:39:bf:6c:85:54:b2:a9:55:
e4:96:46:3e:62:28:ca:53:f2:1b:9a:7f:69:05:be:6f:d3:eb:
3d:01:4b:3c:f5:ff:40:ae:53:a5:05:6f:be:00:a4:53:b8:35:
71:f5:f3:9f:62:6c:fe:0d:03:2e:ae:68:24:dd:e0:a2:cd:89:
07:29:16:6c:61:49:27:70:55:f1:ad:b0:8c:fd:76:a7:05:1a:
1d:75:f1:58:15:88:91:b4:d6:ac:82:12:f2:26:3c:43:ec:29:
a7:bf:db:89:c9:4b:15:4e:b1:af:f9:f9:5f:9f:75:15:c1:1e:
45:95:78:61:cc:f5:72:87:b5:aa:b5:ec:7f:77:4b:a5:8b:b8:
50:e5:68:aa:02:c7:f5:6f:5a:a9:bb:69:ae:8d:be:0f:70:7b:
e5:10:95:ae:94:db:0e:a1:a3:85:93:85:db:1f:0f:c6:d5:25:
03:1f:e8:53:cd:21:96:a4:15:29:73:74:04:aa:cf:5f:de:d6:
e5:9e:8c:9f:36:59:15:6e:23:2c:e9:7c:26:5a:50:43:f0:d4:
2d:73:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:48 2025 by rpki-client