Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cc4dc3c-1e83-3c52-93d8-5ea51de221c4.roa
File: 2cc4dc3c-1e83-3c52-93d8-5ea51de221c4.roa (raw, json)
Hash identifier: mYRQp+1HjD0j/bjlCOEQsNac8XmOXIpLpceMPZS53+0=
Subject key identifier: 01:94:BF:F5:D0:9D:15:03:2B:7A:E0:77:A8:B6:0E:89:7F:7C:CA:CE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584878BB085289CA8DC80D73F000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cc4dc3c-1e83-3c52-93d8-5ea51de221c4.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 152672
IP address blocks: 108.165.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:08:52:89:ca:8d:c8:0d:73:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=a6fac367-d84f-453c-80d8-c72a1ae129c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:fe:65:a1:c6:95:6a:d0:82:5b:1c:49:87:
93:b2:1c:51:66:4c:e0:75:25:17:9f:88:31:76:99:
76:3e:6c:d9:ed:7f:3a:31:58:6a:88:65:5b:b8:5b:
37:91:c0:86:2e:35:2b:8c:7d:ab:f8:fc:04:47:07:
13:fc:a5:ef:7c:e6:a9:7d:ef:ee:38:fd:2b:d0:3d:
3d:d5:94:9f:12:a7:fd:ad:b7:50:d5:54:c5:b4:1a:
33:ed:7e:e4:ad:f3:ee:56:ee:ff:c6:c8:8d:0c:33:
f9:d9:6e:f7:f3:17:a0:dc:63:de:49:68:b0:f1:1c:
84:f5:89:74:ca:44:e0:6a:9d:39:63:03:fa:1a:03:
74:e5:2b:26:33:7e:f1:dd:e3:cb:91:fa:4f:0e:ba:
dc:50:8b:ac:d3:20:8c:60:98:a8:33:21:e7:c1:50:
0b:df:45:96:d4:9d:2d:ec:37:1d:fc:e8:55:3f:d9:
f0:8c:70:45:fe:53:db:78:8f:99:66:fa:c6:9c:dc:
c5:3c:68:f8:2d:e9:ef:76:09:d2:5f:d4:fe:6c:7a:
f5:18:28:29:96:02:f8:08:4d:ab:2c:0c:46:b1:12:
7e:e8:a3:5c:40:d9:82:fa:3a:5a:4e:e0:c0:44:c9:
22:02:59:e0:70:4c:18:b1:aa:2f:08:7e:14:bd:c0:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:BF:F5:D0:9D:15:03:2B:7A:E0:77:A8:B6:0E:89:7F:7C:CA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cc4dc3c-1e83-3c52-93d8-5ea51de221c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:4a:aa:91:13:1e:62:6e:06:45:10:8c:34:0b:f3:e2:d1:f0:
54:c7:ce:7e:ca:9c:4d:ea:66:d4:72:38:29:16:64:a9:c3:f1:
a4:84:14:89:db:bd:92:6a:6e:4f:d6:c3:60:19:dc:d0:ed:a1:
e5:3a:ef:ba:f0:d5:53:98:d1:71:a1:9e:60:ec:32:5c:34:1b:
af:9d:07:36:85:8c:98:ad:9d:91:10:86:f7:74:2e:2b:ea:5b:
e9:18:53:81:40:97:25:b1:b6:15:fc:73:f4:5e:03:36:11:57:
af:71:90:2d:1a:e1:5b:9b:db:55:f7:28:b8:a9:a8:59:f0:28:
4d:03:57:93:3a:07:96:57:4a:c1:e8:62:ad:70:74:66:9c:3d:
21:92:5f:0d:cb:23:5d:1d:cc:b0:15:96:86:21:2b:63:7c:aa:
f6:19:aa:47:02:4d:1b:cc:df:4a:58:3e:7d:35:84:8d:aa:d3:
73:39:1c:02:11:40:48:47:78:1b:45:8a:cc:a1:bf:f7:6e:4f:
11:64:be:9d:b0:ea:6d:34:a0:fd:ab:1b:3f:5a:cf:f5:86:ce:
b7:a9:01:9f:35:f4:12:05:99:85:51:7e:82:cd:2c:8f:95:45:
2b:de:89:4f:fc:18:7b:62:bc:94:9b:5a:34:12:75:fe:de:f0:
4b:da:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:05:17 2025 by rpki-client