Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f90118-da06-3e63-84f4-b2fcb000a3ea.roa
File: 33f90118-da06-3e63-84f4-b2fcb000a3ea.roa (raw, json)
Hash identifier: 903u1DKZP/jj+cduzUHDKq4b8WehJfGUh2dvNU82kAM=
Subject key identifier: BE:69:FD:77:6C:E7:E7:3C:BF:D2:19:4B:0D:4C:89:92:B7:59:CF:EF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1B92550938E123A6327980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f90118-da06-3e63-84f4-b2fcb000a3ea.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:92:55:09:38:e1:23:a6:32:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=13963c7b-6458-4c47-bac4-9431a755186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:fa:51:a6:56:46:d5:ff:a3:89:71:6b:59:
5a:0b:f2:24:15:9d:23:11:6c:fc:d7:04:85:35:42:
9a:b9:46:02:b3:85:63:ff:b0:99:5b:38:78:a8:d2:
e2:94:01:3d:74:1e:7b:6e:10:e5:88:64:a4:99:2c:
5e:02:d0:dc:77:51:b8:6d:2b:3a:03:1f:14:ba:82:
8b:0d:fc:aa:38:e4:41:68:82:0c:7c:c5:a1:5e:02:
b8:ef:01:2c:29:ef:31:aa:d6:be:2f:08:e8:e4:5e:
f8:14:02:05:a3:c5:82:ec:f5:b5:9d:cf:ed:76:65:
5a:08:17:34:aa:68:a5:79:db:ef:23:d1:a0:41:f9:
05:97:b8:34:96:34:3a:fc:5f:fb:cf:61:06:8e:ee:
45:0b:b7:c0:b9:e3:eb:ab:c0:dd:fa:e7:68:f2:af:
91:bc:f1:0e:ab:b6:8d:2a:91:b7:6b:d4:3b:5b:f4:
00:2e:0c:3e:01:e6:f8:65:b7:a1:c9:7c:c2:d5:a8:
31:52:fb:b4:b4:df:ad:f2:ae:dc:1f:29:4c:0f:ae:
31:8e:2f:78:c9:5c:96:a4:e5:6a:c8:7c:6b:e1:67:
05:99:48:e2:b7:fa:19:fd:1a:c7:8b:b2:44:90:21:
c0:fa:b1:e7:8f:ba:bb:b6:23:8a:42:f2:07:ff:97:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:FD:77:6C:E7:E7:3C:BF:D2:19:4B:0D:4C:89:92:B7:59:CF:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/33f90118-da06-3e63-84f4-b2fcb000a3ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:db:1e:fb:34:bf:e0:54:98:ea:f8:c5:ad:b9:24:5b:2d:ec:
6b:b8:3b:35:57:39:73:2c:9d:fd:cf:ca:af:16:b4:b3:81:26:
ec:36:73:10:bf:63:b5:bf:36:45:54:b8:75:6e:15:75:88:b0:
78:d9:1f:9f:85:15:01:33:db:bf:de:cb:e1:55:a2:91:30:dd:
e3:f3:9d:ff:6a:0f:09:72:4b:b9:90:d0:4f:cf:fa:b6:f8:41:
9a:1e:10:4c:19:9c:32:16:a0:cb:78:de:06:c9:06:b6:a0:f9:
42:ca:73:11:94:0c:03:b0:23:e9:39:6f:66:f2:07:08:90:b9:
06:03:23:0e:a7:a7:ec:90:1e:08:c4:83:24:5c:83:12:1e:95:
ab:2b:ff:b2:0d:fb:31:90:c6:45:e5:e7:f4:94:a3:40:7a:21:
23:03:41:03:be:1c:1e:f4:4d:c9:f5:2c:f7:60:c5:c2:e1:e4:
93:3f:06:ab:a4:5f:6b:58:85:f3:0d:dc:32:3a:89:ce:7d:03:
a9:7b:f5:00:37:ed:f8:eb:a9:21:fd:15:dc:79:4f:7f:ba:18:
cc:05:04:81:c4:e2:49:d1:d4:9d:4a:96:5e:f7:40:8e:6e:67:
16:9b:31:40:d0:10:43:9e:c0:64:40:ad:be:d5:5a:2f:d9:e7:
4f:a4:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:17:59 2025 by rpki-client