Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/522cf3f1-9244-36ad-9226-a2eac4e3d654.roa
File: 522cf3f1-9244-36ad-9226-a2eac4e3d654.roa (raw, json)
Hash identifier: K414TeDJ4CbzPg9vsMXGEZxnsVDxrorfjZr9EEQaj+M=
Subject key identifier: EB:4D:E9:BA:AE:71:4F:25:CA:98:47:7E:96:F5:FC:C6:6D:A6:5B:82
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858482D5AA7228867FB5F9FA62380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/522cf3f1-9244-36ad-9226-a2eac4e3d654.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 212238
IP address blocks: 108.165.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:a7:22:88:67:fb:5f:9f:a6:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=6f9432f2-27ce-4bcd-8ad1-672ec0de08c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:54:7b:3d:ad:bf:80:91:9a:69:21:5a:26:
0c:69:eb:26:d3:12:a9:ef:7c:e1:c1:35:3d:68:c7:
e2:ea:de:ce:20:5d:ae:5a:2f:ac:7c:51:a0:a8:ed:
2d:36:37:86:0a:77:1a:b0:6a:d7:43:9a:c9:59:48:
e5:48:ec:2e:db:e0:f4:7e:f3:75:2a:8d:26:85:43:
f9:ed:31:93:1a:0a:98:26:79:07:33:57:62:3e:81:
76:53:18:a1:9e:8e:c9:8b:b6:43:42:17:13:10:2e:
33:81:bf:6a:d6:ce:d9:97:55:70:23:7c:55:69:e9:
3a:c6:a9:72:da:5a:40:73:59:8f:00:31:d4:8a:2b:
04:48:f1:65:bc:21:27:7c:b4:a8:59:92:7c:9f:f4:
4b:b4:ec:e8:91:a5:35:6a:0d:18:59:ce:51:af:12:
11:c6:4a:27:a6:c5:b0:67:94:a6:7f:b2:db:09:c5:
28:d6:d9:c7:71:2d:7e:16:65:da:5f:4a:07:4e:a8:
0e:87:e1:ce:26:98:50:2e:c9:f4:1b:fa:af:5d:4d:
56:64:28:59:6f:99:25:10:c7:ff:fd:08:52:c5:75:
64:dd:64:bc:29:99:12:70:ad:2e:b0:0c:a4:54:93:
8a:2a:25:2b:23:fe:44:cd:de:28:f7:19:1e:6d:d0:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:E9:BA:AE:71:4F:25:CA:98:47:7E:96:F5:FC:C6:6D:A6:5B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/522cf3f1-9244-36ad-9226-a2eac4e3d654.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:50:ce:e1:41:d4:1c:19:b6:ff:d0:e7:1d:89:54:4d:3b:d1:
82:ab:32:aa:25:04:ba:87:29:98:67:f5:8d:01:9f:de:74:3b:
7a:dd:10:f8:d4:82:38:8e:29:92:c5:2d:aa:f2:de:0e:b8:8e:
a2:ba:bc:db:c7:0a:ab:0a:77:13:38:64:11:7a:2b:8f:fa:88:
c6:1e:c8:ec:3b:50:a5:b9:d5:61:06:ef:3f:5d:2a:94:5d:3b:
38:36:e2:85:7f:92:c0:09:e4:6f:2c:ed:ad:a4:97:45:98:a6:
dd:dc:e4:69:85:93:6d:64:9f:bf:e9:92:09:6e:72:03:bd:13:
12:bb:2c:91:70:bd:e3:7e:95:87:de:0f:d5:79:28:b2:bc:11:
14:88:9a:00:91:39:e4:be:21:58:df:ca:e4:5e:4b:3c:3b:64:
fb:55:72:ba:28:a3:32:86:99:f4:15:b2:cc:70:a9:be:ec:20:
3b:04:d2:37:d1:60:12:38:92:d0:bd:8e:80:10:56:e0:a7:54:
78:34:ee:b5:1c:d6:8a:a5:a5:9d:d0:59:72:6d:18:c5:af:60:
09:00:63:27:9f:3a:2c:09:3e:ba:d2:4f:f2:98:c7:94:8a:2b:
fb:42:82:99:b7:1c:ec:f8:24:71:22:09:1e:6c:14:7f:c4:3c:
3e:e9:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:37:55 2025 by rpki-client