Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/290ab259-479e-3f0a-9599-f56f6118abc2.roa
File: 290ab259-479e-3f0a-9599-f56f6118abc2.roa (raw, json)
Hash identifier: qlVjCtowmCdh/mW+Kzv+iNO+9Gj/TBVZpXaTh8TP+V0=
Subject key identifier: EB:60:BF:78:0E:B6:87:D2:4F:B3:E9:C6:D1:18:7C:80:83:3F:EB:66
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584827C53CCF761C2BD8BC641280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/290ab259-479e-3f0a-9599-f56f6118abc2.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 3356
IP address blocks: 108.165.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3c:cf:76:1c:2b:d8:bc:64:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=bd3a0623-4f34-4c4f-a007-1804ed78e728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:a8:29:fc:b5:c8:5a:a0:d4:42:1e:b5:f3:
74:f5:61:35:38:1a:ca:00:4f:2d:0f:d4:35:08:d5:
95:79:98:f3:61:40:52:7f:b4:e5:9a:3f:e2:e9:87:
84:16:44:a7:6b:35:6d:3f:78:d0:c2:94:65:6b:79:
b4:06:87:da:a2:f1:2d:c4:e8:c9:13:09:0c:a8:f1:
37:f1:b1:4c:74:d2:f6:3b:af:63:0e:78:02:f3:0c:
5d:07:6d:8f:2a:c6:33:8e:b7:67:f2:bf:38:87:a0:
06:86:e8:a8:b8:ef:0c:dd:70:12:42:0c:3f:32:2a:
c6:bb:1e:1b:a4:66:42:e7:f7:2f:01:1d:a7:f6:b6:
91:10:21:af:fb:cd:b7:e0:61:5f:b8:33:c9:c2:83:
97:57:83:31:9f:04:ac:fd:2d:48:81:2e:24:6c:16:
50:8f:8a:fd:0c:2c:79:20:b8:71:3b:15:14:45:c4:
1a:ca:f8:d7:98:d6:54:7c:7d:cc:94:45:25:d7:9c:
0b:b3:73:de:16:a0:56:5f:ff:37:fc:8b:c2:1b:71:
b3:14:a7:c2:45:db:58:66:56:0e:85:54:e8:8c:ca:
0d:19:64:e1:0c:4c:d3:16:51:bc:09:ca:3e:aa:1e:
74:93:4a:ed:6e:0e:a9:82:96:51:20:37:fe:a4:a6:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:60:BF:78:0E:B6:87:D2:4F:B3:E9:C6:D1:18:7C:80:83:3F:EB:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/290ab259-479e-3f0a-9599-f56f6118abc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:09:c0:ff:b7:08:58:e1:4c:62:92:3b:2a:f4:b9:13:50:66:
c4:a9:2d:10:03:fd:95:65:f8:e0:a5:16:94:6b:19:2f:ee:18:
99:1a:7d:86:0e:30:ff:1f:3b:3a:61:1b:08:40:c5:2f:5b:03:
c0:8b:ec:1d:40:56:fa:db:e9:08:76:0a:8d:43:64:f6:8e:7d:
78:94:25:c9:ba:b2:b4:ae:95:9a:b3:a5:12:a4:57:90:06:41:
ac:1e:ea:cc:8c:a1:d4:4a:61:3d:96:72:6d:89:93:fb:34:ae:
a0:55:c7:5c:28:d6:b8:41:94:bd:2c:b3:84:f6:10:2f:78:84:
7f:eb:6b:e2:d4:b7:52:a1:fd:d3:08:b6:68:ba:7a:a7:d6:bf:
bc:2b:3a:fc:d4:8d:22:96:33:86:24:23:e3:e0:3f:1d:4f:65:
46:e6:10:45:91:ab:23:35:16:f8:90:3c:5b:11:57:da:3e:ec:
40:1d:85:4e:fc:76:75:e0:ca:0b:e3:89:5f:76:a5:2b:75:dc:
4e:9f:4f:71:49:3c:e5:3b:17:6d:42:eb:a3:a5:d7:44:c5:b4:
7d:77:27:2d:67:2e:82:0d:d1:b6:e0:9c:30:e6:ef:1b:06:82:
b0:34:72:2b:50:5b:b0:7b:63:41:d1:e4:df:a6:37:d6:85:2a:
6e:1e:3b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:16:42 2025 by rpki-client