Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b9ec1b1-e396-37a7-8395-6c6180d52095.roa
File: 5b9ec1b1-e396-37a7-8395-6c6180d52095.roa (raw, json)
Hash identifier: DK0VaYqHMS/FJQgNeCGA8F9cmgkiFS24+Ep+W8XozGQ=
Subject key identifier: 47:97:34:D0:92:5B:D3:BB:72:DB:38:DD:16:91:DD:25:E7:32:5E:8B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844861F429A1418340E03D016C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b9ec1b1-e396-37a7-8395-6c6180d52095.roa
Signing time: Fri 12 Jan 2024 02:00:24 +0000
ROA not before: Fri 12 Jan 2024 02:00:24 +0000
ROA not after: Thu 11 Apr 2024 01:00:24 +0000
asID: 14445
IP address blocks: 108.165.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:86:1f:42:9a:14:18:34:0e:03:d0:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 12 02:00:24 2024 GMT
Not After : Apr 11 01:00:24 2024 GMT
Subject: CN=73e25374-7d25-4a2f-8f11-9b6cb740ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:90:48:5e:39:47:6c:62:e6:f1:02:45:d4:
98:f4:94:14:fc:3e:7e:7f:05:19:84:76:d7:eb:7c:
3a:2b:9c:2b:ef:bd:04:64:22:d7:6f:f3:f7:98:3c:
0e:f6:07:ba:86:aa:5f:97:5d:e3:13:9b:7f:07:37:
66:f7:f1:a9:3f:48:f6:cd:ab:ff:92:85:b0:e1:7a:
49:cf:25:57:70:6f:06:aa:20:07:8e:39:9d:38:5b:
20:7b:92:23:50:f1:a5:08:39:92:21:33:49:a0:28:
ee:d6:ca:76:cf:cf:d3:8b:e1:1e:85:eb:35:63:0a:
de:2e:06:1b:9d:c2:07:27:e5:86:93:5d:ec:3e:3a:
25:06:6a:4e:f1:75:18:52:61:08:f9:6a:cb:a3:b5:
b6:bf:0c:a2:2a:4e:db:97:f6:39:d0:3f:04:bc:08:
04:52:e5:ad:a8:19:f9:4f:87:bb:59:b2:b1:64:26:
92:27:f7:a9:11:f1:de:a0:cd:f2:02:a7:03:12:24:
08:b6:65:34:52:59:b5:d1:65:0f:c7:8e:89:55:d6:
20:d5:44:40:a0:0d:90:81:71:78:ed:52:ce:d1:71:
1d:79:d4:c7:52:a0:1f:df:39:0a:e2:c7:f8:e7:b0:
ab:db:77:24:4c:ba:a6:93:c0:b9:4d:e9:e5:60:02:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:97:34:D0:92:5B:D3:BB:72:DB:38:DD:16:91:DD:25:E7:32:5E:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b9ec1b1-e396-37a7-8395-6c6180d52095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:72:03:9c:6c:45:76:bd:49:f1:c6:aa:5e:31:bb:47:c8:f7:
7d:c0:9f:f7:67:08:af:b1:6f:29:52:e9:b7:c1:c4:5f:35:5b:
86:1e:9f:c0:3b:3a:fe:ca:67:ad:d4:6d:e6:49:a0:03:ae:3d:
e9:30:94:57:e4:11:4e:22:99:8c:76:8b:68:42:61:e2:6c:de:
2b:a4:ad:05:8c:b7:99:4d:4c:65:44:f0:0d:a2:50:6c:0c:65:
7b:f8:25:35:e1:c7:3e:42:0b:9c:23:1d:0f:d2:c1:b9:8c:21:
32:a3:bf:ef:bd:66:57:23:c0:3f:37:0a:40:ca:66:db:aa:38:
c1:20:99:83:9e:3b:14:f1:40:80:b1:be:d8:ae:19:44:e6:f1:
24:38:8b:c9:72:aa:cf:70:f8:9b:da:30:04:f2:4f:86:5b:b1:
a7:ec:aa:8c:83:b9:16:1f:95:13:37:fc:73:9e:51:6e:a7:d8:
bc:fc:c6:5a:76:eb:75:8f:18:a2:6a:16:d5:c4:cc:85:be:1f:
48:e7:d0:49:54:93:dd:ab:b0:b6:c5:4b:36:ad:f0:20:c3:41:
e0:50:ec:56:f5:1c:78:26:49:ec:e5:c7:f2:75:2e:28:e5:68:
ff:d4:f1:85:c7:84:a4:28:39:ce:11:fe:a2:65:95:89:2c:5c:
4f:51:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:39:07 2024 by rpki-client on console-ams.rpki-client.org