Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35e9472e-844c-3be0-adfb-6257de3fe616.roa
File: 35e9472e-844c-3be0-adfb-6257de3fe616.roa (raw, json)
Hash identifier: 825nB/x6cYssX8Z0dy1Q2P+SNs9sCpMfUD1VVZxHGa8=
Subject key identifier: 52:25:E4:4F:DB:BF:BF:2C:B0:71:47:78:90:77:AA:6E:60:86:0D:09
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E44700981469ACC08699BC40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35e9472e-844c-3be0-adfb-6257de3fe616.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Wed 09 Aug 2023 01:20:48 +0000
asID: 7411
IP address blocks: 108.165.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:00:98:14:69:ac:c0:86:99:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 9 01:20:48 2023 GMT
Subject: CN=0803d012-2399-4ca7-b36a-caabe2c29ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:9f:3c:49:7e:db:45:99:89:61:02:e9:31:
1a:cb:98:15:29:40:b1:5e:7d:24:d0:9a:c3:36:1b:
0b:5a:f5:8b:91:5a:39:a8:a7:eb:d3:00:c2:bb:cc:
42:00:38:86:28:f3:18:b9:ed:f7:5e:4a:58:f6:8e:
d3:96:91:69:51:9b:05:73:ae:2e:15:4a:73:32:79:
42:64:99:b9:be:92:27:82:35:0e:3e:63:bf:68:f5:
1d:30:69:52:84:5b:09:4a:a7:e5:6c:3c:e1:4c:8b:
e6:51:62:ba:3e:cf:a0:48:1d:7c:46:35:ca:ff:b6:
fc:df:a0:37:1d:62:09:98:d5:b2:c4:8c:fb:d4:ef:
ba:7a:3e:19:eb:66:50:13:54:76:6b:6e:46:db:d6:
88:25:74:13:c1:b1:a8:44:13:96:cf:50:1d:9e:5c:
37:b3:01:24:c3:3c:89:51:09:68:38:1e:f2:41:15:
14:cd:26:06:46:a7:95:86:e6:89:db:25:b4:f9:38:
62:e8:39:84:12:21:81:53:92:9e:bc:41:fc:57:14:
8c:8f:96:6e:0d:dc:8e:24:8f:ea:93:f5:e9:fd:77:
d3:ba:3f:9d:77:3a:73:e9:68:03:d8:34:9f:c3:64:
19:55:51:14:7e:bf:d4:d9:f8:03:74:a6:cd:d9:58:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:E4:4F:DB:BF:BF:2C:B0:71:47:78:90:77:AA:6E:60:86:0D:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35e9472e-844c-3be0-adfb-6257de3fe616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d7:a1:c7:b7:95:30:87:1c:50:c5:cb:b3:d2:ac:25:20:00:
52:8a:db:65:65:35:39:88:05:f3:f7:23:a4:e9:f9:34:c9:c9:
2a:b2:73:86:2a:5d:e5:00:ef:2c:f8:19:3a:56:ad:17:99:a4:
31:26:91:0f:9d:f8:36:12:67:fb:9f:d2:15:c5:2b:52:f1:82:
3f:77:12:14:5a:f4:c3:b8:a5:dd:04:50:6d:7e:65:0e:12:3a:
85:f7:8a:28:2f:16:b8:56:ec:84:6b:35:a1:23:cd:71:e9:d4:
10:44:64:bf:27:f9:0c:82:1d:2d:50:59:eb:d5:56:4c:51:d7:
75:31:c0:b5:a4:30:c2:4c:c6:bf:d1:c1:3e:79:0d:b4:76:a6:
88:22:d7:75:9f:eb:4e:84:47:61:e6:e4:e2:26:85:98:0f:74:
89:0c:5d:c1:f8:fc:ba:63:0f:61:6f:3e:df:c6:15:e6:7b:a9:
1a:be:1c:d3:9a:7c:9f:62:3a:8b:b1:29:cc:ba:14:93:86:9d:
e0:e6:24:08:c5:f7:df:bb:f9:b2:cf:3f:f3:ee:06:dc:ba:08:
72:bc:b9:9c:e2:99:21:7f:19:7d:cd:3b:5a:56:27:d9:12:2e:
29:64:d2:50:bb:5c:c3:7d:72:55:6a:3f:d7:2b:2e:90:4d:f8:
69:c6:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 13:40:54 2025 by rpki-client