Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47054948-109b-309b-8144-5f57dd3aec44.roa
File: 47054948-109b-309b-8144-5f57dd3aec44.roa (raw, json)
Hash identifier: RwMd8oIT4b6NLwanhpSAMPcxdoufNlJ0owTcvAgWbD4=
Subject key identifier: 4A:0F:75:81:B3:DB:3F:2E:8A:B7:66:F6:70:19:2B:8D:35:FA:BC:F2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584395EA9996D1A6C451462325C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47054948-109b-309b-8144-5f57dd3aec44.roa
Signing time: Wed 18 Oct 2023 01:00:16 +0000
ROA not before: Wed 18 Oct 2023 01:00:16 +0000
ROA not after: Tue 16 Jan 2024 02:00:16 +0000
asID: 9009
IP address blocks: 108.165.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:95:ea:99:96:d1:a6:c4:51:46:23:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 18 01:00:16 2023 GMT
Not After : Jan 16 02:00:16 2024 GMT
Subject: CN=6530da2f-1f06-4422-ae56-9c78633b0608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:d7:7e:b8:a4:e9:99:10:d4:eb:0a:3d:8e:
3f:ce:09:10:35:3a:ea:5a:a4:10:97:57:8b:19:e0:
2f:f7:66:84:8e:17:6c:e3:33:aa:31:b0:a5:e0:9a:
dc:fe:1a:fd:c9:d4:07:b9:39:15:b6:6d:08:3a:11:
d2:ee:83:14:01:97:07:0a:10:31:cc:15:4e:83:26:
87:ef:da:ab:12:f4:e7:c0:c2:a5:74:e3:90:68:db:
76:87:ab:48:4a:fa:08:70:ab:93:56:af:7a:47:3e:
a3:5c:7f:39:7e:0b:a4:c3:de:0e:3b:2e:9b:1f:8c:
7f:9a:60:9f:19:57:f5:31:4a:42:56:07:7b:dd:a3:
a2:33:38:59:74:8f:f4:35:d9:f1:c1:4c:7d:b4:d7:
44:ad:84:3f:a0:a7:ce:1e:82:ef:40:18:e4:4c:cb:
ec:58:61:f4:c6:f0:c8:f7:bf:31:39:b3:80:4a:a5:
dc:9f:f9:cb:7c:64:22:70:7c:9d:53:d7:89:80:e2:
39:44:4f:77:47:a7:89:d8:ef:3e:4d:9c:19:92:cb:
b8:3f:f1:d8:34:d5:1b:bd:6a:59:db:af:30:2f:08:
4d:f2:66:45:5c:5c:17:ed:71:6f:1e:3e:97:89:db:
70:12:06:28:77:60:f1:5f:2b:07:65:91:91:92:5f:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:75:81:B3:DB:3F:2E:8A:B7:66:F6:70:19:2B:8D:35:FA:BC:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47054948-109b-309b-8144-5f57dd3aec44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d6:4c:d4:49:2a:c4:2d:e2:45:4b:70:56:3f:65:c5:6b:d2:
3a:be:b5:99:ef:b0:33:5e:4e:af:4e:f7:f2:79:a9:a4:ea:2b:
fa:49:d0:5d:f7:b7:59:86:75:65:d7:bb:12:11:4e:75:04:77:
a4:98:ea:53:ab:0f:c3:60:82:54:9b:8e:db:ae:d3:1b:19:80:
3f:54:df:d4:b0:c0:cb:cc:23:30:f3:38:7c:0f:b4:be:cc:4e:
a5:33:30:47:27:d6:9b:4a:88:e0:02:a9:c6:3b:02:cf:51:85:
81:b9:75:df:3f:07:f7:25:a6:fc:7e:dc:d9:65:8d:83:8a:08:
dd:55:31:ba:37:fd:43:4c:96:e6:91:75:4f:dc:1e:28:7c:2a:
a2:5b:f5:3e:cb:ed:a3:33:2c:40:c5:cc:da:db:4b:c0:b4:7c:
ce:35:36:4e:c1:5d:12:06:a4:3e:68:33:f2:56:e6:db:12:fa:
d8:e3:b1:85:4c:9f:a5:5c:51:17:8e:f1:75:b3:c1:0a:1b:21:
bf:db:54:78:e4:d7:dd:ed:27:60:b6:86:40:31:98:b1:72:96:
2f:0d:ae:f2:71:f2:8b:3e:95:f3:c5:29:06:e9:3e:2a:8e:d5:
82:28:8d:bc:f1:0a:6f:0c:16:99:e4:c2:51:77:32:04:aa:d1:
fc:97:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:40:12 2025 by rpki-client