Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d53a1e8-2a50-3b03-b319-7076bd95fede.roa
File: 3d53a1e8-2a50-3b03-b319-7076bd95fede.roa (raw, json)
Hash identifier: yNRcIVuwS7a5QYbnC8O8Pr/QwXdDNyujFteMdn68wvk=
Subject key identifier: AB:E0:70:7D:65:50:2A:1C:C4:96:3E:30:B7:17:B2:BC:F3:FD:03:02
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858439E4AA0ECD595F3A59826BC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d53a1e8-2a50-3b03-b319-7076bd95fede.roa
Signing time: Sat 21 Oct 2023 01:00:16 +0000
ROA not before: Sat 21 Oct 2023 01:00:16 +0000
ROA not after: Fri 19 Jan 2024 02:00:16 +0000
asID: 834
IP address blocks: 108.165.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9e:4a:a0:ec:d5:95:f3:a5:98:26:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 21 01:00:16 2023 GMT
Not After : Jan 19 02:00:16 2024 GMT
Subject: CN=fab22d7e-ae15-40dd-87a9-75003e0ddb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:32:69:4b:e7:21:f4:e5:3d:5f:49:56:5e:
38:8c:d1:4c:6d:74:f8:96:46:89:cc:aa:d2:0d:b5:
84:0f:51:69:3b:c5:b6:79:37:a9:b4:64:66:1f:86:
b1:7f:86:a5:e8:7c:5e:68:89:9b:72:41:59:e5:d2:
c5:c8:54:a9:e6:07:a2:99:d9:e5:d0:50:a4:87:a8:
bc:6c:c4:81:dd:8b:8c:ef:b2:a2:26:ee:5f:12:a4:
32:ed:63:03:22:5d:b6:69:dd:54:ff:4b:d3:4a:5b:
c3:f7:9c:c5:62:78:01:99:c6:e6:f1:4d:ca:82:56:
43:fb:42:6f:b9:08:0d:9e:89:0f:bd:fb:05:70:b1:
e2:c6:0e:13:54:81:c2:3e:d7:4b:ac:c8:22:ca:ef:
24:b0:0b:75:37:37:61:a5:1a:a9:20:21:8b:8a:f9:
55:fc:cf:a1:96:99:09:c1:10:45:b8:ad:99:4d:bb:
c5:9b:e6:fd:9a:83:a0:ad:84:3a:39:52:93:37:d7:
c6:35:b2:a0:d3:92:03:8e:6b:69:6e:8e:12:0a:c5:
cc:9c:a7:f6:f4:30:73:d9:4e:15:b3:71:23:3f:72:
fc:ed:53:f6:27:8f:3b:45:b2:28:2a:c7:89:74:b8:
09:82:f7:3b:08:45:18:8a:4d:a1:b0:0f:a0:cd:9f:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:70:7D:65:50:2A:1C:C4:96:3E:30:B7:17:B2:BC:F3:FD:03:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d53a1e8-2a50-3b03-b319-7076bd95fede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:4b:82:d2:17:a1:cb:d8:33:5e:7d:e0:47:88:dd:f8:20:47:
aa:f6:9b:2c:e7:b2:f1:08:61:51:a1:73:eb:91:3f:00:1d:58:
b5:79:f6:3b:d9:9f:09:a8:1e:5e:07:16:61:de:7a:ba:bf:91:
19:63:9a:93:5f:c1:a3:46:05:f8:79:2b:78:90:56:f5:bd:7d:
e1:cb:19:ea:67:24:15:dd:cb:9e:26:38:ae:80:db:c2:7e:60:
90:a2:e0:95:f2:ab:80:33:5f:66:97:3c:ce:5b:da:06:e5:a7:
a0:28:3e:fa:82:ae:9c:e7:f5:a0:a6:27:8a:bc:e9:5a:90:d3:
07:1d:f9:6a:18:14:1a:b3:26:c9:5c:91:58:07:a0:be:42:4d:
1a:52:a0:4d:5b:a3:2e:2c:ec:d9:8e:2b:ee:3c:5a:5f:1b:21:
9c:f7:b0:81:6f:54:6d:46:a4:ea:1e:7a:ed:71:ed:20:cb:f5:
16:27:12:8a:57:56:a2:3a:ec:46:af:38:38:c6:19:27:5f:db:
a5:4b:b2:a1:8e:f3:23:d8:c8:ef:f4:37:40:cc:74:59:97:1e:
e4:50:a2:be:19:06:15:12:c4:e4:c0:9f:3b:c4:0a:e8:fc:95:
8f:ce:f7:54:c1:2d:9b:44:37:2e:e5:0f:d9:52:9b:49:fa:3a:
1b:17:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:56:06 2025 by rpki-client