Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ad7672b-d85d-3410-9fe3-a2d4d149c56c.roa
File: 2ad7672b-d85d-3410-9fe3-a2d4d149c56c.roa (raw, json)
Hash identifier: AqNuT30P6y31IFJMdmZ3IYhXOkhMFWv+Sta163HsjTw=
Subject key identifier: 7B:3B:F6:26:10:4D:86:DD:90:0B:82:B5:A1:CE:0A:A1:20:98:5A:01
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858460EA8C575F0D63D01FA8F7A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ad7672b-d85d-3410-9fe3-a2d4d149c56c.roa
Signing time: Fri 31 May 2024 16:34:23 +0000
ROA not before: Fri 31 May 2024 16:34:23 +0000
ROA not after: Thu 29 Aug 2024 16:34:23 +0000
asID: 834
IP address blocks: 108.165.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:0e:a8:c5:75:f0:d6:3d:01:fa:8f:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 31 16:34:23 2024 GMT
Not After : Aug 29 16:34:23 2024 GMT
Subject: CN=845ac346-ba98-4d94-b075-2ad4b9a5053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:af:07:6d:2d:d9:fc:6a:0f:6d:b2:ed:e0:
20:aa:c5:80:05:74:09:96:b2:5b:22:f5:fd:ee:92:
00:a2:99:69:9d:66:53:cc:20:58:30:aa:e6:eb:3d:
1c:38:b8:c7:54:3f:8b:75:ad:64:26:1a:34:ce:3f:
46:32:d8:79:e4:3f:c7:d3:48:16:ed:f7:97:a7:0b:
39:7e:9b:86:50:87:c8:9a:0f:bc:c4:f4:2c:8f:4c:
54:c7:fe:f3:61:c0:7f:e2:05:e7:32:ae:94:97:6a:
5c:cf:fc:c5:ec:19:90:4b:58:07:68:37:82:76:a7:
b7:1b:9d:f0:db:3b:0f:5d:75:2c:e3:92:e0:d9:aa:
bb:52:49:28:bc:99:76:34:04:83:38:eb:4c:a0:58:
8e:67:00:c8:93:89:e3:28:38:b5:3b:05:f3:e2:8a:
bb:2f:30:ff:5a:31:1d:63:b8:f9:09:44:fa:82:2e:
bf:f3:bf:b9:fe:bd:96:68:7b:a1:41:f2:eb:86:85:
eb:0c:5c:ea:6e:45:0c:b2:03:39:44:d5:9c:b7:d1:
2e:f2:ed:be:00:71:d6:da:35:fe:d2:72:97:db:39:
d7:52:21:bf:a4:b9:d6:cc:b1:63:4c:81:6a:51:02:
b1:5d:00:de:4c:7f:5c:2b:41:48:f8:1d:d9:83:b5:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3B:F6:26:10:4D:86:DD:90:0B:82:B5:A1:CE:0A:A1:20:98:5A:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ad7672b-d85d-3410-9fe3-a2d4d149c56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:89:e1:4e:db:51:8c:1a:b9:2c:6f:c3:b3:83:f4:c7:86:ff:
1a:6c:ec:92:af:00:ad:e2:1b:08:f2:ac:47:42:94:2b:4b:11:
7a:d8:32:0c:4b:79:13:ef:20:a0:37:67:f9:cf:c8:1b:33:95:
c4:83:15:ab:b7:de:74:bf:c8:2a:a3:ea:97:92:92:be:62:99:
4e:23:32:9a:2c:55:09:40:59:99:39:a4:17:3c:12:12:43:3a:
e6:b3:e6:71:5d:60:d0:60:50:aa:a6:fa:b5:39:cd:fc:5d:66:
17:4b:87:c3:be:e1:80:21:3f:3a:ef:ba:c0:7e:de:82:7f:5d:
27:78:9b:f0:5b:b8:1c:2a:57:c1:5c:bb:70:89:1a:c8:da:f7:
91:8c:5e:0c:5c:91:73:b9:70:88:db:5e:2f:13:45:e4:60:87:
64:e4:58:fe:69:6b:f0:b4:03:6c:d8:47:13:63:fa:f4:0e:a0:
57:ad:cc:1a:75:1f:b9:6b:8e:e1:dc:b7:e6:e6:4b:f2:a7:84:
40:54:22:7f:d2:76:81:03:b5:a7:25:f8:2b:5d:56:5d:77:39:
19:ef:0b:74:fb:08:6f:b3:2a:70:1a:2f:61:31:fc:d2:4a:67:
32:9a:01:63:74:4e:ff:bf:ff:c9:b7:aa:f6:51:cf:00:a8:12:
7f:e0:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 16:14:22 2025 by rpki-client