Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749c5117-799f-366e-bdaf-1d701d8ada5a.roa
File: 749c5117-799f-366e-bdaf-1d701d8ada5a.roa (raw, json)
Hash identifier: eVeNA50Bnf2M7uvxCYV7teSZ3qG8cjttl1Ru27md4b4=
Subject key identifier: 0F:35:38:7F:9D:93:B5:0A:BD:0F:5C:46:4F:14:D7:FF:B8:A2:D4:E7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285838DA1CD428AE976CB2C620BB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749c5117-799f-366e-bdaf-1d701d8ada5a.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 11 May 2023 04:00:00 +0000
asID: 33696
IP address blocks: 108.165.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:da:1c:d4:28:ae:97:6c:b2:c6:20:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : May 11 04:00:00 2023 GMT
Subject: CN=31f87b81-53e1-4713-bce7-03bbd8927c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:9f:d0:1c:f7:23:bf:2b:8f:3c:f2:10:f0:
24:65:ae:f2:06:94:72:ab:69:6e:7f:11:97:08:25:
0b:43:88:46:46:d1:23:02:e1:ad:cb:1e:e7:a1:84:
0b:57:bf:76:80:78:f2:0a:54:2e:30:e2:10:cd:80:
a6:32:65:1a:63:03:9e:1c:ee:b9:5b:6e:c8:4b:84:
c2:c2:14:48:29:1d:5a:ef:9f:76:9f:cd:8d:6c:f6:
e4:30:9b:cf:56:46:49:d8:2a:7e:55:d3:13:76:db:
e2:00:69:d8:cf:8e:92:67:bd:4c:0a:c4:9b:76:04:
b8:29:52:56:57:3d:62:29:87:68:3c:86:5e:d6:c6:
14:90:73:f9:bf:42:c3:1a:46:a6:35:27:b0:c1:4a:
ad:d1:ec:9e:5f:c7:57:8b:d5:f2:0c:c3:26:c5:3d:
03:51:a0:63:47:cd:be:4f:63:e8:8f:46:1c:ea:a9:
bb:cd:0d:dc:e0:f6:44:58:72:b3:7d:bc:42:ec:81:
4a:ab:79:86:6e:a0:6b:e5:59:9d:f2:e8:ba:ff:70:
cb:5e:3e:6f:1d:52:3b:50:f4:b7:37:51:ce:47:82:
ae:88:70:75:5f:15:37:2a:5a:6d:f8:38:b5:45:99:
12:12:5b:fc:a0:e2:e1:89:6d:96:a5:99:2d:a3:84:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:38:7F:9D:93:B5:0A:BD:0F:5C:46:4F:14:D7:FF:B8:A2:D4:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749c5117-799f-366e-bdaf-1d701d8ada5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:5a:69:c2:9f:92:83:8b:92:76:80:d8:d3:8c:fe:ab:bf:25:
e0:7e:29:c8:73:f7:73:2f:b4:43:f3:64:88:c9:74:47:e0:3c:
19:fd:d5:49:77:a2:75:4a:0e:ef:fe:a4:40:89:d6:19:c2:bc:
96:08:cb:92:15:66:f0:58:aa:d8:fe:00:17:a4:de:63:c7:ff:
8a:07:94:b0:24:fd:4f:02:00:bd:ac:b3:f0:f4:a0:2e:3c:54:
1b:b9:a8:bf:e4:95:ba:98:3d:a0:13:b8:8c:e1:2d:db:15:b7:
b4:5f:07:a7:57:a5:1a:7a:8e:de:b6:5d:9b:d0:e4:35:37:88:
29:89:e4:dd:d5:77:e8:62:19:72:3b:22:a6:b9:31:6e:48:0c:
ef:ea:43:d8:ab:6a:8d:fd:11:39:fc:62:e6:b5:90:0a:f4:b4:
8e:6c:c4:aa:d0:b6:32:07:75:8e:f5:8c:25:3e:74:87:3e:f9:
69:f7:e8:26:07:15:54:d7:97:86:37:0a:79:a2:f1:26:03:a4:
dd:d8:05:6a:5f:1e:16:5f:4a:17:43:d4:c6:d3:b7:65:09:33:
c6:47:49:d1:3a:ae:1c:6f:a7:d7:af:5a:83:54:fc:14:7a:85:
19:e0:07:90:29:e2:f9:37:4d:54:00:97:12:f7:f3:5b:7a:db:
13:fb:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:20:33 2025 by rpki-client