Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c01dfb63-9255-30bc-954c-1d47fe6a47a2.roa
File: c01dfb63-9255-30bc-954c-1d47fe6a47a2.roa (raw, json)
Hash identifier: OJKTfLSHu5n6jz/fPI3dgeEaWWaJ7OkmK7n+CilgSFo=
Subject key identifier: E4:E6:5C:02:55:A4:B3:A5:EF:8A:42:F3:53:BB:38:63:04:30:69:89
Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial: 010D0C9F43285848D21136FA5EE2BB2D75079460
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c01dfb63-9255-30bc-954c-1d47fe6a47a2.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 32710
IP address blocks: 164.153.166.0/24 maxlen: 32
164.153.167.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:36:fa:5e:e2:bb:2d:75:07:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=a5ade277-e69c-4b6f-bbcd-e1add6ae9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:3a:8b:38:3e:d5:23:1b:a5:64:dc:7c:a7:
1b:44:2c:92:04:0f:72:37:9d:7a:4b:7a:0f:00:bc:
f5:7a:f3:17:e4:cd:96:99:03:21:50:ec:a6:aa:bc:
8e:e2:10:58:6c:7c:37:a4:25:13:81:c5:a5:6f:7a:
53:9b:92:c1:33:2a:ae:16:64:74:0b:10:5c:ae:59:
af:8b:d2:a4:f7:89:3f:94:05:57:4e:72:84:33:10:
a0:a6:a0:31:16:07:46:94:e0:3d:2c:20:b6:c2:c3:
39:f6:e5:29:3e:ff:ef:f2:f5:f3:92:d2:1c:98:6d:
af:37:d7:ed:3a:a8:5b:94:90:ca:d4:69:34:da:0b:
f4:2d:5c:da:8d:cb:fc:a6:c5:0a:3b:e8:4c:bd:6d:
ca:fc:7d:a6:c3:ea:af:5a:14:6b:0f:24:70:e3:de:
62:a8:21:60:79:c7:01:21:a0:87:73:08:9f:22:f7:
53:32:fa:7e:e6:1a:38:48:f8:50:3d:e7:d2:e2:9b:
b0:7c:f8:6e:5c:08:a0:d7:1a:4f:37:68:ac:60:7c:
61:1a:d7:43:20:8f:87:76:bc:de:04:60:e2:b7:07:
a4:f2:40:5a:7c:9d:d7:dd:2e:82:5f:be:97:93:96:
ca:99:85:c8:52:47:cd:02:14:a3:42:73:25:92:07:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:5C:02:55:A4:B3:A5:EF:8A:42:F3:53:BB:38:63:04:30:69:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/c01dfb63-9255-30bc-954c-1d47fe6a47a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
X509v3 Authority Key Identifier:
keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
sbgp-ipAddrBlock: critical
IPv4:
164.153.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b3:14:d5:7d:f4:1a:cf:89:d6:5c:32:d8:fa:22:02:51:33:
65:78:ac:83:c6:ff:6c:29:f7:21:62:5d:3f:9a:28:c3:a0:46:
24:04:de:24:59:f6:28:ae:85:15:a4:2b:73:1e:cb:b6:27:23:
19:7a:56:f3:7c:12:46:7f:86:21:89:57:1b:36:1b:55:de:59:
03:41:ad:a8:1b:c2:b9:ba:63:15:e9:76:3f:ef:4a:2e:13:dc:
72:8c:bb:79:90:12:8f:9f:d9:77:cb:9a:68:be:bd:73:51:b2:
05:30:fe:51:5e:fd:da:a2:3b:40:f0:62:2e:f3:df:e7:6d:76:
43:97:8c:d4:0c:7c:80:aa:40:16:06:bb:6a:ae:f0:e9:4a:f5:
a9:e8:65:98:0d:e8:d4:a2:3c:b1:82:21:69:84:69:94:b2:0f:
1c:03:86:01:3d:30:02:27:06:6b:f7:2d:7c:f9:52:99:01:3b:
4b:11:ac:51:28:df:c6:10:49:ab:19:02:05:e1:1c:ab:68:e7:
0b:fc:17:3e:83:e7:69:fc:d4:47:34:b7:7d:48:be:53:59:c9:
e8:21:90:c1:d6:6c:63:bf:fe:1c:79:bd:a2:cd:32:81:8d:49:
f2:f4:d0:c0:c0:81:a9:95:a8:81:b1:2d:d2:3b:3b:2d:c5:14:
1d:71:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:46 2025 by rpki-client