Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/859e835b-525b-38c3-9f19-710fe0bb4e0d.roa
File: 859e835b-525b-38c3-9f19-710fe0bb4e0d.roa (raw, json)
Hash identifier: DsS+oXoZlXKsflx3NCbCcxJz38OtOGnj0dUgPW9Vi3w=
Subject key identifier: 71:40:47:D2:21:CD:C8:A4:D9:80:89:97:80:C1:1B:24:1E:F7:AB:FE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842AE33D37A6ABF3A81CF0DA5E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/859e835b-525b-38c3-9f19-710fe0bb4e0d.roa
Signing time: Thu 27 Jul 2023 01:00:17 +0000
ROA not before: Thu 27 Jul 2023 01:00:17 +0000
ROA not after: Wed 25 Oct 2023 01:00:17 +0000
asID: 60721
IP address blocks: 108.165.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ae:33:d3:7a:6a:bf:3a:81:cf:0d:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 27 01:00:17 2023 GMT
Not After : Oct 25 01:00:17 2023 GMT
Subject: CN=5a1dd102-405c-4210-b9d3-aa5572e4698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:eb:e3:66:01:c5:fd:7d:48:32:3a:57:2a:
a0:f0:63:45:de:2f:35:c4:5a:17:cf:bd:d6:41:24:
6e:04:80:44:f8:41:08:74:26:2a:be:ee:c8:0a:c2:
ea:db:b4:92:78:b6:bf:5d:7e:58:43:02:5c:97:fb:
e7:61:2c:ba:5e:5d:17:61:7f:e4:cf:a5:69:80:ce:
98:6e:7b:94:1f:61:f4:30:0e:19:63:3b:96:25:ac:
42:02:f4:94:39:bc:55:e2:db:6a:88:62:09:d3:3f:
81:d7:12:f4:7a:57:37:81:36:15:b2:1e:c4:a1:57:
51:14:f0:9f:10:93:42:0a:c7:cc:86:54:82:0d:79:
c5:4b:63:10:f7:f3:97:8e:da:9a:f0:6c:e8:34:b5:
6e:e5:da:1a:49:be:5e:75:e5:3d:3e:0e:6e:63:5b:
eb:03:e8:98:63:e3:d5:54:bd:7f:35:85:e3:a1:fd:
da:00:6d:57:65:78:77:e2:db:3a:ad:51:61:b1:e0:
c8:4d:33:e9:1c:65:d7:76:cd:d8:dc:32:7b:28:e4:
ce:fd:4f:12:fd:d7:1f:c1:7c:3d:2f:c4:c5:e2:75:
e5:4e:32:f3:0b:c9:09:e1:e6:f2:4b:f5:f2:52:16:
bd:d8:de:39:63:79:e7:f7:e4:82:0f:fd:c3:81:57:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:40:47:D2:21:CD:C8:A4:D9:80:89:97:80:C1:1B:24:1E:F7:AB:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/859e835b-525b-38c3-9f19-710fe0bb4e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a7:70:87:f6:48:2f:a9:df:c3:e4:ad:66:76:4f:b4:53:62:
ba:69:3e:2f:8b:10:78:f5:26:d9:a7:60:02:cf:04:f7:c7:69:
78:46:92:8b:e7:97:e7:50:c1:a7:db:cd:cc:fd:b6:7a:3f:86:
1b:f7:9a:65:c6:be:06:50:22:d2:c3:0c:d4:68:d7:13:73:8b:
17:6e:e3:51:3d:a3:63:f5:06:37:0a:82:dc:16:5d:d1:3c:6c:
d6:f4:d8:50:2b:8c:39:ba:bd:e2:fd:02:c8:4c:29:37:87:55:
e6:5f:12:55:c0:e4:80:c7:fc:6b:4f:27:42:74:2f:58:bd:9a:
14:40:e4:2d:67:dc:1d:98:cc:44:f1:49:aa:ee:e0:f5:ef:9b:
e0:95:f0:0c:1c:6c:86:88:41:f6:65:50:d1:52:09:5a:6d:27:
47:c7:3e:e6:f5:3c:b3:04:e5:0f:72:3f:16:10:a9:9b:df:ae:
92:d2:ab:13:84:2f:21:99:f2:6d:b3:35:12:13:91:dd:40:a7:
f8:77:c6:84:98:f6:3f:38:01:06:6d:0c:4b:ef:f4:82:f8:52:
00:9b:6d:77:be:40:96:81:16:a4:cf:6d:4e:44:e1:36:a0:9a:
a2:06:75:ce:dc:bc:d0:b4:6b:4c:62:ab:54:58:cb:2b:94:54:
b2:02:6d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 17:07:35 2025 by rpki-client