Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae9b1c90-ae0b-39e5-ac34-e2890f55708d.roa
File: ae9b1c90-ae0b-39e5-ac34-e2890f55708d.roa (raw, json)
Hash identifier: N2ukO1/M01WYwbyHgQlADv+4gtjK8kHdiIc/8zVmMHc=
Subject key identifier: 32:A2:87:E0:88:13:7D:00:5C:C1:7A:B8:CA:76:50:3D:93:B3:80:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858434C52B2085B7594DCB3E69380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae9b1c90-ae0b-39e5-ac34-e2890f55708d.roa
Signing time: Thu 21 Sep 2023 16:20:15 +0000
ROA not before: Thu 21 Sep 2023 16:20:15 +0000
ROA not after: Wed 20 Dec 2023 17:20:15 +0000
asID: 834
IP address blocks: 108.165.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:4c:52:b2:08:5b:75:94:dc:b3:e6:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 21 16:20:15 2023 GMT
Not After : Dec 20 17:20:15 2023 GMT
Subject: CN=a1517ea9-0b39-453e-bd7c-85b53db072e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:c6:c2:35:89:ba:8e:10:f5:00:ea:3b:9f:
8f:ea:2f:02:5d:d2:e4:29:16:ff:63:01:61:21:f7:
7d:fb:09:be:6e:02:4b:b7:ce:0d:01:bc:bc:5d:43:
ac:2d:9b:52:31:6b:ba:6c:37:15:56:5a:71:f5:8a:
33:9e:9c:9b:fd:26:89:39:7a:83:9f:b0:06:71:66:
2a:48:3d:6a:64:cd:0b:b9:c8:12:58:d5:0b:b5:1d:
13:0b:37:a4:b1:fb:2d:5f:a0:94:07:cb:c9:82:8c:
47:08:8b:00:29:dd:26:d1:5e:e9:8a:f0:fe:4d:54:
97:a2:74:57:0a:db:c2:61:08:f6:24:12:2c:50:d3:
2c:07:8c:d8:0e:b9:54:5f:fe:72:a9:bb:96:78:0c:
0f:e5:13:ba:f7:b8:72:ff:19:1b:ba:c9:f2:0e:95:
24:2f:31:e5:44:61:8b:12:29:7c:d7:f0:80:ea:11:
86:56:d2:ca:a6:c5:1a:bf:e4:5d:31:47:95:7a:89:
94:68:6f:ad:c3:fe:7e:8e:36:39:6d:8f:31:02:ea:
46:d6:12:5d:d9:7f:77:d3:c0:a7:28:03:47:b8:1f:
98:11:14:5e:3a:92:8c:94:e7:d8:44:75:19:96:25:
11:34:a7:3d:75:ef:0a:21:36:db:2f:7d:db:7d:80:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A2:87:E0:88:13:7D:00:5C:C1:7A:B8:CA:76:50:3D:93:B3:80:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae9b1c90-ae0b-39e5-ac34-e2890f55708d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3b:aa:eb:be:3b:4a:ca:48:b5:84:d6:9a:69:41:ba:0d:ac:
f2:12:81:e6:ac:b6:f6:e9:e8:39:fa:75:9a:a3:4a:28:fe:0a:
3f:65:ec:f8:76:1e:03:12:ce:43:75:2c:5e:cf:de:1e:4f:12:
e8:51:6e:af:5d:fa:11:f4:0a:76:ab:a8:4a:9f:86:91:96:ea:
94:3f:67:39:27:19:08:17:91:04:9b:5d:82:96:0c:93:08:8d:
ae:3d:53:d3:c8:07:fa:56:e5:38:06:e6:a4:3e:86:72:09:53:
24:c9:d6:ed:c1:1a:48:43:28:83:40:c9:17:b8:4b:b2:59:4f:
12:b5:20:e2:a3:a6:91:19:ee:4e:63:42:4a:bd:14:fc:d2:6d:
7d:f3:0f:49:a4:38:ca:c1:af:29:01:c4:92:7b:71:be:85:6d:
99:0a:f4:7f:44:99:49:41:0c:cf:b6:89:91:17:e6:f3:de:1f:
82:5e:73:52:2d:4e:07:6e:1d:81:6a:7b:61:59:ba:04:3d:a4:
20:85:48:0c:39:64:d1:77:0e:68:8f:bd:b8:6b:e6:d2:6a:f3:
94:bb:48:46:cf:51:59:e9:52:b8:d6:92:a2:df:ca:a1:81:d8:
b9:cc:3d:0b:90:70:1d:bf:67:7e:27:f8:b1:ce:6c:a5:69:8e:
fd:d0:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 06:59:59 2025 by rpki-client