Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1d27744-59b6-3966-9529-f26887906073.roa
File: a1d27744-59b6-3966-9529-f26887906073.roa (raw, json)
Hash identifier: BpFUrZX2fGpmIxRIBEYoatG8h+XOXnfY5xbCJmRFyH8=
Subject key identifier: 31:A3:AD:B9:D0:07:84:A2:37:14:B6:74:A1:80:81:5D:A6:A5:83:30
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584395EA964C608A4DCA9A73B6C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1d27744-59b6-3966-9529-f26887906073.roa
Signing time: Wed 18 Oct 2023 01:00:16 +0000
ROA not before: Wed 18 Oct 2023 01:00:16 +0000
ROA not after: Tue 16 Jan 2024 02:00:16 +0000
asID: 834
IP address blocks: 108.165.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:95:ea:96:4c:60:8a:4d:ca:9a:73:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 18 01:00:16 2023 GMT
Not After : Jan 16 02:00:16 2024 GMT
Subject: CN=71c37d14-1211-4599-bdaf-bcb4e0419400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:9c:26:a2:d1:9f:58:f6:40:b3:67:23:83:
36:57:fe:41:c3:c1:f7:53:d6:66:5d:9b:b3:96:86:
59:ec:b6:82:4a:f9:5e:a5:21:2b:bf:7e:09:6b:37:
4e:19:9b:ca:29:3f:85:9b:ab:83:5d:74:96:87:0e:
c1:ed:75:1e:e9:9d:fc:c4:c3:be:6a:20:c3:f2:de:
2f:f1:ce:11:4d:75:6e:a8:e0:2d:e1:4e:7a:33:5f:
16:5e:61:23:fc:86:96:c4:11:3c:0d:02:cd:71:8d:
38:50:93:93:e3:f3:56:4d:89:60:1a:85:64:fa:8c:
7e:64:b1:02:ae:f8:0d:15:32:f6:52:69:b4:97:2a:
b6:cd:46:28:b8:ee:15:19:d5:16:fb:f7:a3:c9:de:
1c:c7:5b:d2:f6:d3:a2:f4:a2:d0:75:42:2f:79:bb:
1f:24:90:17:5d:69:3b:82:06:b9:13:e5:b0:95:cf:
fb:33:2f:f5:59:e7:78:1d:ac:64:36:72:06:5f:a6:
e7:3f:f5:78:2c:15:26:3b:94:aa:bf:66:b4:39:91:
c0:64:09:a4:be:3c:b8:86:18:cc:69:81:87:fc:9d:
4b:08:3a:23:8a:eb:90:c0:85:4b:56:44:c9:4e:c8:
da:6b:a4:81:b2:0f:b4:24:01:6f:89:4a:39:c1:24:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:AD:B9:D0:07:84:A2:37:14:B6:74:A1:80:81:5D:A6:A5:83:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1d27744-59b6-3966-9529-f26887906073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:14:6e:0c:ea:b6:b5:70:53:6d:ec:dd:a1:1d:89:68:61:51:
82:00:39:62:cf:2d:21:ca:41:4d:56:35:76:1a:48:72:43:89:
2f:e0:80:64:a3:cc:4e:48:23:58:28:7d:7c:cf:e8:c6:32:4a:
42:6f:68:35:19:49:6d:2d:84:71:3e:9a:b5:3b:7b:e0:f4:d1:
dd:f2:8c:c7:47:89:17:c1:c7:c6:4b:ea:c4:45:6d:ca:f0:1a:
e9:6b:d8:7e:b7:52:43:ac:17:5a:c3:8e:c9:e2:87:f1:21:ce:
4f:b8:62:cf:da:c0:ab:76:01:f0:4e:81:16:77:c7:10:b8:f1:
cc:92:48:b7:10:15:07:ea:27:38:f2:2f:04:28:45:a6:2a:b8:
90:01:b5:52:a0:2e:83:81:d6:97:ed:85:66:3c:1e:20:d3:25:
b5:f7:00:f0:70:c7:c6:c6:0e:21:82:24:c5:66:4f:2c:37:d6:
64:30:87:39:91:97:88:20:99:8f:45:65:c0:23:c6:6f:14:8a:
16:5e:51:42:de:0c:65:55:94:c0:0b:6d:9c:cf:93:9c:47:3f:
c4:19:fa:ac:44:a6:06:0b:89:87:9f:11:90:d0:04:aa:18:ca:
6e:3f:d8:bb:78:48:56:0e:fb:7c:d5:7b:7b:d6:60:73:17:64:
70:e6:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 12:10:38 2025 by rpki-client