Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32832cbc-db74-373d-ad68-264ef69f63eb.roa
File: 32832cbc-db74-373d-ad68-264ef69f63eb.roa (raw, json)
Hash identifier: Vx32mUAS6pSshDedTo4n3HKXAX1vuLLEMSs+TaUWn3Y=
Subject key identifier: 80:DC:95:0D:7A:AD:F2:2E:A6:1F:BE:3B:34:69:20:61:8D:19:19:DC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584510D7DEF67B3BECAB8E6ABFA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32832cbc-db74-373d-ad68-264ef69f63eb.roa
Signing time: Fri 01 Mar 2024 18:33:58 +0000
ROA not before: Fri 01 Mar 2024 18:33:58 +0000
ROA not after: Thu 30 May 2024 17:33:58 +0000
asID: 834
IP address blocks: 108.165.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:10:d7:de:f6:7b:3b:ec:ab:8e:6a:bf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 1 18:33:58 2024 GMT
Not After : May 30 17:33:58 2024 GMT
Subject: CN=25da817c-6846-4414-b0de-7e1e542d91c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:ac:94:7f:ef:41:13:f4:0b:ba:0e:0c:0c:
66:83:dc:55:68:87:d1:74:33:9d:cf:ed:e4:3f:a4:
e2:6c:31:3e:8b:47:aa:94:2e:fe:20:75:0a:1c:39:
6b:41:f7:a2:ed:86:46:dc:ee:f3:91:4f:e7:3e:a1:
78:72:b7:62:6b:5b:95:51:f3:53:fd:44:04:69:a0:
c2:bd:a3:ff:30:a3:d2:6b:80:10:83:98:42:fa:70:
8c:95:39:fd:26:9a:4e:c4:9c:00:84:10:c2:94:fd:
ae:3f:a6:91:ad:c7:51:a8:57:23:1e:13:b6:a0:f9:
e0:8c:84:23:06:96:05:28:24:de:1a:05:66:4e:a2:
d9:a0:99:c7:1a:97:5e:42:67:12:c8:9e:b9:6d:54:
5d:36:5f:cb:12:89:38:32:21:25:ac:63:0b:57:62:
41:a8:72:df:6f:e3:19:4f:30:2e:c6:49:34:f8:fd:
2b:2f:e9:73:f0:a2:0b:d7:ee:57:e1:ad:b1:54:7b:
ea:32:2a:e6:11:e8:e4:37:b2:28:39:2f:05:14:e1:
48:e8:4e:d9:2a:d0:ae:f2:fa:e6:0b:4a:cb:7e:f1:
6a:65:9d:f9:74:23:8c:d5:3f:b8:f5:ff:3f:8c:90:
bd:59:50:1a:c3:49:9c:9d:1c:18:63:87:ac:cb:bb:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DC:95:0D:7A:AD:F2:2E:A6:1F:BE:3B:34:69:20:61:8D:19:19:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/32832cbc-db74-373d-ad68-264ef69f63eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:00:5f:bd:ef:50:6e:16:4c:56:03:3a:06:b2:c2:ee:de:e3:
7e:1e:3e:f7:76:7d:2f:38:f5:78:0f:a1:9f:f6:71:88:66:56:
ad:c8:83:8f:ed:82:64:51:23:7d:8d:0b:43:60:1c:76:57:28:
22:fc:fb:71:9b:6d:a5:e4:90:80:d7:e1:26:23:91:7f:17:02:
24:5c:39:a8:98:e2:a7:d8:c2:77:be:d6:fe:15:ef:15:76:7b:
89:75:f9:4f:47:4d:1e:0d:68:78:72:22:0a:67:4c:d7:31:cc:
b2:ca:02:ea:f2:41:30:bb:41:a1:83:d6:ac:57:6c:3a:c3:70:
44:96:6a:82:00:bb:29:33:d0:77:e1:43:a3:87:17:4d:b4:7f:
f9:df:13:18:64:99:97:d3:78:52:9b:6a:40:b3:e2:c8:7c:5a:
57:c4:fc:84:fa:0f:6d:af:55:16:36:0b:e7:38:4a:da:86:7d:
ad:f1:5b:6c:6a:1a:a4:03:29:6a:30:a4:9c:2b:32:10:ef:60:
85:c3:ee:6e:68:31:33:3a:f4:6d:5f:93:d9:1d:87:7c:7a:87:
c0:de:12:93:d7:e1:2b:c8:b4:f9:01:db:6a:0a:49:fe:3f:6c:
d1:2b:12:88:bf:34:c2:58:a7:ec:dd:05:e4:d5:95:4e:82:69:
f9:0f:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 21:36:16 2025 by rpki-client