Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e617b0f-0c00-3911-8bc4-0da84b916495.roa
File: 9e617b0f-0c00-3911-8bc4-0da84b916495.roa (raw, json)
Hash identifier: wQj35h5jXvezoCSnO30DilFtIzVmFNGDxNujtIqoTX0=
Subject key identifier: FC:C1:68:72:C8:5B:E3:69:E2:1E:5B:91:1B:04:88:39:A8:D5:83:0C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858447CD84C57DBEFEDC2B3723180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e617b0f-0c00-3911-8bc4-0da84b916495.roa
Signing time: Mon 08 Jan 2024 18:15:11 +0000
ROA not before: Mon 08 Jan 2024 18:15:11 +0000
ROA not after: Sun 07 Apr 2024 17:15:11 +0000
asID: 21859
IP address blocks: 108.165.60.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7c:d8:4c:57:db:ef:ed:c2:b3:72:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 8 18:15:11 2024 GMT
Not After : Apr 7 17:15:11 2024 GMT
Subject: CN=937b0174-8a4a-493f-9ca8-9f594d4623b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:20:d9:d5:69:c1:31:1a:42:67:e0:51:53:
de:9f:2d:83:83:ba:b1:6d:c5:ec:09:d3:b8:70:3b:
7a:63:3f:8e:e6:ee:8a:76:bb:8b:75:af:bd:0f:c3:
41:0f:2c:6a:bf:8b:3d:cb:a9:3a:b0:24:71:cc:91:
21:fb:c5:ff:af:64:8a:cf:79:da:75:2c:47:a8:fc:
18:57:5b:f6:bb:a3:3f:53:a0:f4:64:96:a3:20:54:
24:34:08:0b:6f:16:a1:3d:42:14:5d:49:2f:06:11:
fb:7d:9d:b0:34:90:e8:ea:49:46:b8:79:f1:e7:7f:
65:e2:71:8e:e1:f9:de:6e:14:d5:2f:35:1f:26:f5:
51:d5:0a:43:85:a2:a2:10:a2:af:70:8e:db:36:e5:
19:d5:0e:ea:2f:7d:91:a6:aa:cd:af:9c:da:4f:4f:
85:6c:b2:99:5a:b9:cc:92:66:30:aa:2e:fd:63:97:
60:d5:16:a0:a1:b8:0f:11:6b:9f:90:85:5c:07:fd:
43:35:a5:12:74:6b:17:24:34:80:c6:a0:ae:2e:13:
bc:16:22:1c:ff:e8:1f:20:aa:e9:1b:cd:61:05:00:
db:a1:89:d4:9a:3a:65:e0:15:54:77:15:fc:72:bf:
ea:51:57:23:a4:e4:f1:6f:56:12:63:49:69:18:1b:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:68:72:C8:5B:E3:69:E2:1E:5B:91:1B:04:88:39:A8:D5:83:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e617b0f-0c00-3911-8bc4-0da84b916495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:72:5f:3e:5f:fc:f2:f1:4f:a8:61:3b:05:8c:2b:5f:f1:df:
fe:0f:f3:3c:68:c7:84:1c:f5:60:e1:35:6e:58:c8:b3:85:f2:
9d:84:66:f9:41:0e:f6:44:71:ed:fa:ca:72:a9:32:33:45:c4:
d6:83:86:c1:8b:d6:2d:19:94:f7:6f:78:86:26:f0:e6:08:c9:
19:ee:fa:4e:86:cb:7a:f1:c3:01:e7:e1:23:bf:31:45:49:e0:
12:0d:39:95:69:74:92:18:6c:09:c9:3b:e4:5b:05:d4:87:ed:
9c:ba:47:fa:23:51:26:74:c6:94:e3:5b:a0:ef:5c:a4:5c:37:
f7:56:bc:c9:30:b9:36:3f:a1:be:79:90:af:56:c7:f3:bf:f8:
3b:32:1c:dc:15:13:2d:df:85:4b:e0:70:62:7d:07:32:02:5f:
c5:3f:d6:2c:b5:2d:3f:48:7b:75:d7:53:37:bd:10:48:80:f4:
4a:3e:d0:2e:43:9f:49:48:29:f2:61:74:9f:83:54:37:c1:6e:
e1:49:54:61:2a:be:95:7c:1a:94:73:97:c6:3a:0f:18:e0:ab:
96:32:a9:29:3a:97:d4:7e:1f:8e:92:bc:c6:95:3e:fb:63:93:
87:52:76:d4:9d:7a:7f:e3:81:70:09:d6:c7:b4:75:99:7b:06:
8d:69:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 17:00:43 2025 by rpki-client