Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a940bfe-7f60-30cf-a51b-96834a93388d.roa
File: 5a940bfe-7f60-30cf-a51b-96834a93388d.roa (raw, json)
Hash identifier: qo2DXUtBEh59eH0l5ix7x+aR3JHOchOovSFM7gA3AuQ=
Subject key identifier: E0:59:64:67:F2:FB:F7:96:E9:B6:4B:C1:D6:94:E5:8D:4D:D5:54:FD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843C9C462F4A39ED34768310100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a940bfe-7f60-30cf-a51b-96834a93388d.roa
Signing time: Sun 05 Nov 2023 14:45:22 +0000
ROA not before: Sun 05 Nov 2023 14:45:22 +0000
ROA not after: Sat 03 Feb 2024 14:45:22 +0000
asID: 834
IP address blocks: 108.165.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c9:c4:62:f4:a3:9e:d3:47:68:31:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 5 14:45:22 2023 GMT
Not After : Feb 3 14:45:22 2024 GMT
Subject: CN=dcafd5c2-b278-4f72-bd12-1572c12b3ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:b2:67:b0:75:05:73:53:fe:48:da:49:f8:
3b:fd:2b:74:39:9b:3a:95:1c:5c:1d:c6:1e:9d:1f:
41:9b:20:e1:e6:ab:3b:5f:fc:76:21:6c:d2:d3:2b:
5d:f1:82:07:3e:26:b5:0e:ae:89:10:dc:27:15:57:
6e:da:00:bf:0c:fa:04:ec:77:95:eb:cd:7b:66:d3:
f8:b5:bd:20:a7:84:ae:22:7f:f1:51:73:93:fc:82:
d7:e8:23:f3:40:98:f9:4e:c5:28:3b:6f:be:53:82:
4b:28:2d:bb:45:18:e1:9f:09:36:c1:bc:29:80:a7:
ed:a1:fb:8d:bb:d9:ab:cf:d6:67:4d:b1:ca:8a:93:
a2:22:c8:4f:a0:8c:31:a6:5a:00:52:32:5d:d8:8a:
d7:3a:2a:0d:e5:18:b7:90:a6:d7:26:44:d0:04:99:
fc:55:84:38:f8:f4:72:dd:23:33:14:73:db:36:4a:
ca:08:01:09:81:5f:71:94:83:13:86:0a:f5:bf:c4:
00:d4:74:21:71:4b:1f:22:92:94:d0:9e:4f:a6:f5:
c1:2f:fe:68:e8:72:0c:58:ed:fd:10:48:51:f7:86:
02:ae:a0:f8:32:1a:b3:9f:f9:93:76:8b:2a:e4:e6:
53:09:a1:51:2a:48:12:54:0c:4c:f2:38:30:8a:81:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:64:67:F2:FB:F7:96:E9:B6:4B:C1:D6:94:E5:8D:4D:D5:54:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5a940bfe-7f60-30cf-a51b-96834a93388d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:72:d9:05:ec:f0:9e:7e:04:58:b8:f5:f8:7d:f5:f9:bb:05:
13:8a:5d:5a:35:50:09:bc:b2:18:ca:a9:aa:bf:33:11:f3:03:
db:92:ac:a8:e2:00:90:5d:31:ae:a0:78:e5:bc:90:58:25:a6:
ee:6e:97:a0:f2:15:04:40:f7:81:ab:57:22:72:dd:19:2d:77:
99:ae:ec:65:db:12:0f:a1:2a:e0:d2:a3:1e:c1:e9:59:d6:54:
78:25:c6:d9:ba:36:30:02:ca:3c:9d:e5:69:79:83:4c:9d:d7:
4b:2c:55:5c:65:11:24:54:12:3c:79:55:22:8d:72:1f:33:ae:
de:74:07:aa:60:4e:72:76:dd:98:41:08:ab:cd:2b:02:c1:74:
1c:67:7d:1e:2e:74:c2:71:9f:f1:6b:b6:76:7d:b1:cd:8d:00:
63:fc:86:47:96:50:1a:c8:a6:9b:9b:e3:95:24:56:39:14:dd:
dd:ff:2f:ef:af:2c:b6:12:7f:94:50:55:1d:bc:58:ad:17:ab:
07:f5:5c:d7:00:21:12:03:d9:d1:34:70:3c:8d:89:14:89:11:
cb:b2:3c:71:7d:b4:4b:31:d8:05:8e:3d:77:63:ba:72:6f:e2:
a9:86:73:08:3b:a2:ca:75:3e:6c:cd:4c:39:d8:2e:13:af:27:
61:49:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:33:58 2025 by rpki-client