Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/759d97ec-2979-301f-bdfd-90ae8bdf09d1.roa
File: 759d97ec-2979-301f-bdfd-90ae8bdf09d1.roa (raw, json)
Hash identifier: tFkGh7+8enKsNO42roF836NBTUlghbswDGSRjujcs+Q=
Subject key identifier: EA:EA:9A:EC:86:6C:92:E9:F6:43:04:C4:B6:53:5A:52:4B:98:82:25
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CBAFE97BD5AF00F2EF9EF640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/759d97ec-2979-301f-bdfd-90ae8bdf09d1.roa
Signing time: Thu 06 Feb 2025 19:10:25 +0000
ROA not before: Thu 06 Feb 2025 19:10:25 +0000
ROA not after: Wed 07 May 2025 18:10:25 +0000
asID: 401152
IP address blocks: 108.165.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:af:e9:7b:d5:af:00:f2:ef:9e:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 19:10:25 2025 GMT
Not After : May 7 18:10:25 2025 GMT
Subject: CN=6bb8bbc5-ea2b-4257-a0d2-37401af9b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:62:e4:eb:44:42:91:1d:3a:41:91:4a:6e:
4d:1b:f4:c3:65:b5:28:95:ec:aa:1f:1f:17:16:63:
bd:83:7d:2c:9c:9b:1f:21:4a:04:72:85:c0:b2:84:
f3:63:35:56:ec:01:79:e1:df:35:82:8e:07:a0:09:
64:d8:b0:c3:67:f5:4d:da:ed:85:6a:27:32:37:c0:
65:d7:6e:45:1b:a0:16:24:0e:af:c4:b0:17:be:0d:
94:0c:43:6b:e1:a7:51:03:82:df:57:50:9f:f4:59:
c9:6d:d5:b5:c1:4d:fc:1c:4a:93:ff:d6:d6:e4:6c:
c8:9c:48:93:ef:52:42:22:77:89:bb:6c:5d:14:72:
57:52:be:a6:0b:a8:4e:98:38:1e:ff:fd:38:c2:13:
19:a0:e8:ca:47:f0:ac:2a:66:b8:ae:c3:57:b7:0c:
3b:f3:12:27:a2:0b:53:c8:08:b8:bb:cf:6d:68:a0:
27:1f:d0:84:43:9d:d8:24:0f:f6:96:28:3c:b8:10:
31:4e:44:04:06:3d:9d:cd:db:be:b8:07:8c:47:6b:
84:1a:35:ec:2d:c1:0a:15:74:4f:7e:1a:d3:6d:9e:
4d:9e:de:3e:05:a3:eb:7e:b7:a0:a7:19:0e:8d:cc:
4b:3f:29:6f:5e:f0:41:c9:e4:77:1e:1f:ff:73:9f:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:9A:EC:86:6C:92:E9:F6:43:04:C4:B6:53:5A:52:4B:98:82:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/759d97ec-2979-301f-bdfd-90ae8bdf09d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b3:be:33:19:d0:d1:10:ab:a7:5b:5d:49:29:2b:71:a1:d1:
b1:6a:9d:60:02:b4:de:5d:ac:b1:9d:0b:e5:9a:5f:6d:14:a0:
c0:64:ec:c7:a8:8a:a1:32:c4:73:e2:8e:40:39:ba:b6:64:f0:
17:85:f5:02:dd:7a:1f:5c:90:9e:78:be:4a:42:07:ee:b9:ae:
1a:e4:19:4f:70:73:b2:8f:58:ee:ad:a2:ad:5e:ca:ce:0e:67:
07:f4:e5:a4:20:ba:44:ff:f7:a5:93:d7:f7:bb:2e:01:28:ae:
3c:71:ea:c4:c9:66:50:b1:74:2a:99:a5:26:f7:cb:83:20:fe:
dc:92:57:49:b5:94:f9:29:0a:83:9a:0d:6b:0f:a5:d0:f0:80:
85:16:d0:5e:56:b6:d7:42:b2:23:e3:3c:3a:dc:42:01:e3:f9:
47:c8:f9:15:c7:7d:0d:4d:9b:7d:39:36:1d:a4:e5:74:2f:51:
29:e2:12:71:66:e8:1a:ff:16:ac:38:c3:cc:70:23:61:1f:6c:
4c:c4:88:cb:be:1d:ab:a9:73:78:da:6b:b4:6c:eb:42:56:24:
ad:f5:c6:f0:b5:c9:da:6d:b0:29:cb:4c:1b:bf:60:af:31:e3:
0e:4c:cb:85:ce:f5:d3:82:dc:5e:cb:ce:f0:5f:78:bc:d3:fb:
1c:aa:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:13:22 2025 by rpki-client