Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ed05c55-99b2-37dd-8d36-6b385b1d0f34.roa
File: 7ed05c55-99b2-37dd-8d36-6b385b1d0f34.roa (raw, json)
Hash identifier: dIMketNKkLhO0eDx5sBWCU2IPVpCv6FE+1vHpidU5Tc=
Subject key identifier: FE:C5:D2:A1:4F:92:E6:FF:BF:EE:23:0D:A4:D1:97:42:BA:D0:9B:7F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A7B510AF77F0897490B600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ed05c55-99b2-37dd-8d36-6b385b1d0f34.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:b5:10:af:77:f0:89:74:90:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=032a13e7-3a9b-4b16-b6e7-4aef49730826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:46:76:48:df:c1:4c:c5:da:28:26:25:f2:
30:30:68:7c:fc:33:fd:21:be:3b:4d:3d:7a:0e:32:
62:2b:59:a1:3b:3d:ab:a5:3d:f9:a8:fa:86:97:d3:
cb:35:f1:38:72:23:ea:33:97:66:50:03:e4:be:17:
20:a3:a2:d3:12:6e:de:7e:3b:bc:14:d3:b8:3b:2a:
78:49:cb:4b:b6:ca:5f:4b:1a:c3:0d:52:d1:db:f7:
c4:7b:ea:5b:48:8a:5b:92:62:38:b3:ee:a1:78:4c:
fc:c6:f4:a5:a1:03:ba:d5:9c:04:7c:7a:81:67:e8:
29:c1:fe:db:64:07:95:72:40:7e:f1:ff:d4:a1:8c:
bc:ce:34:f9:43:f3:fb:6d:a3:45:b5:7b:67:8a:38:
d1:a1:b1:49:6c:fc:5c:58:16:f8:9f:76:8c:d7:d2:
59:4f:3b:e8:cd:ab:f0:13:92:35:72:0e:e7:62:c7:
f7:51:b9:14:fd:aa:6b:22:d4:ba:b1:65:20:a8:b3:
37:55:c9:ff:6b:3a:c7:72:e2:6f:2f:8a:2f:5f:e6:
de:cd:55:d5:a8:89:49:89:4c:68:18:58:e2:c9:86:
3d:c8:4a:b1:56:f8:9d:b3:10:ef:21:c8:b6:d0:82:
d5:ed:3b:da:70:d3:8c:32:92:7d:e1:47:63:e6:6c:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C5:D2:A1:4F:92:E6:FF:BF:EE:23:0D:A4:D1:97:42:BA:D0:9B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ed05c55-99b2-37dd-8d36-6b385b1d0f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:6c:b8:8b:03:90:65:4f:e4:b8:a5:b8:f2:46:a3:62:76:83:
f6:84:76:22:a7:27:22:cc:bb:0a:fb:b0:d9:07:b4:54:a6:45:
c4:2c:d6:72:7e:8d:1d:0b:90:7a:98:30:ea:e3:ea:d6:db:86:
f0:01:f3:4d:07:4a:65:89:f9:c6:1e:55:6a:3a:f2:2e:a7:3a:
36:17:0b:82:2a:4b:79:7a:85:c2:a4:e4:cf:ef:43:84:21:b5:
b7:09:26:85:8b:f9:85:05:ca:dc:c7:38:9a:3c:0f:e3:86:38:
28:a4:f0:f8:20:32:47:70:10:5f:f7:c4:5c:3a:59:05:3a:76:
b1:ee:ff:39:57:96:01:9f:50:99:52:4a:39:ac:d9:a6:7a:48:
3d:12:47:c5:8a:e0:bd:bf:58:b0:45:f8:d0:70:2a:02:b6:13:
34:7c:61:55:1c:1e:23:e5:ce:f8:0d:00:88:c2:30:50:c4:32:
ea:6f:07:79:7c:83:a7:e9:e2:99:7d:4c:0c:64:37:03:17:20:
0a:86:b1:2a:6a:27:f3:e0:63:68:84:3b:cd:a0:2c:cf:59:8b:
39:1e:68:eb:60:41:72:32:25:ac:a4:d8:94:ab:90:3e:e0:7f:
a2:d4:03:53:98:7b:11:55:6e:09:43:0c:b6:e7:1f:fd:e6:38:
c3:ad:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:10:33 2025 by rpki-client