Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8463db7-d129-3980-9c00-a00a1e79096f.roa
File: b8463db7-d129-3980-9c00-a00a1e79096f.roa (raw, json)
Hash identifier: rRYuZe2VPayNY59YzSjVSVV4lkt3kgqFMf+pwL4iQG8=
Subject key identifier: 2A:2B:DD:08:3C:2B:2B:AF:F5:C2:9D:9D:89:F4:D8:31:C1:7C:3B:44
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584660484DF5B8257B0698215680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8463db7-d129-3980-9c00-a00a1e79096f.roa
Signing time: Sat 29 Jun 2024 22:16:18 +0000
ROA not before: Sat 29 Jun 2024 22:16:18 +0000
ROA not after: Fri 27 Sep 2024 22:16:18 +0000
asID: 21859
IP address blocks: 108.165.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:60:48:4d:f5:b8:25:7b:06:98:21:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 29 22:16:18 2024 GMT
Not After : Sep 27 22:16:18 2024 GMT
Subject: CN=f35353d7-da4a-4551-9120-97360be39323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:8b:43:5e:ea:93:93:18:d7:38:61:98:a8:
26:c6:5f:d0:85:dd:01:da:0e:7a:65:97:0f:ab:b8:
2d:3e:f2:0d:60:b2:24:2e:f2:57:73:eb:98:be:ce:
c6:b2:07:ab:63:70:c5:32:8c:60:b1:82:87:cf:d9:
5e:2f:be:22:a6:c9:4c:26:ab:1b:ab:e5:88:17:d1:
e0:1f:95:2c:91:eb:1c:62:23:c5:4c:56:6f:49:24:
9c:d3:ba:4b:ff:ef:f0:80:72:07:05:d9:4d:5c:9a:
b2:63:79:ea:5d:9b:c7:82:ef:3f:14:b6:ab:20:d7:
33:2c:d7:40:d9:bb:70:c7:c3:83:7c:54:41:a2:69:
10:ea:c9:aa:00:c0:36:e0:49:02:a6:3c:41:32:f6:
85:9a:9d:bd:5a:a5:a6:1e:fd:e7:b9:0f:d1:8c:74:
bc:58:ba:58:46:e8:34:2c:1e:51:1a:07:03:a3:7d:
0e:4d:99:42:0b:1f:33:36:13:bc:5f:61:cc:14:f0:
21:cd:28:aa:1f:3f:38:60:10:b1:5c:9a:80:eb:5c:
fc:ad:f0:d3:d6:49:43:f8:fd:44:fc:3f:d5:2b:53:
43:3d:be:28:64:ea:a9:3d:1a:68:e5:18:6f:89:a9:
50:65:09:5d:47:d0:28:4e:d2:84:62:6b:4f:39:e2:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:DD:08:3C:2B:2B:AF:F5:C2:9D:9D:89:F4:D8:31:C1:7C:3B:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b8463db7-d129-3980-9c00-a00a1e79096f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e7:90:2e:40:77:73:b6:7d:d6:1e:07:d9:df:57:0d:23:a2:
1b:e1:d3:bb:a9:d8:32:0e:4a:88:37:c9:dc:46:a3:1b:ee:ec:
05:69:21:56:f0:63:5b:35:b8:7d:f1:d1:c3:8b:25:ff:69:d2:
05:96:e4:8f:21:ee:16:4b:4a:a8:52:5e:e4:b8:b2:c7:d0:01:
77:a6:b7:a2:a1:a0:7d:b0:a8:24:a9:ea:59:1c:b3:11:07:1d:
58:a1:bd:a5:74:55:ea:92:5c:0f:6a:47:be:32:3f:82:c2:22:
cd:6f:05:40:bf:46:ad:81:10:a3:cc:94:f6:0e:29:43:59:3f:
4b:79:33:d3:ce:13:7f:73:bd:df:ca:02:59:74:49:af:5e:c4:
79:fa:85:5c:2b:7d:8e:18:34:1f:2a:c0:5b:a1:0f:62:ce:eb:
a8:ae:79:3a:8b:5c:7d:5e:b9:47:16:6c:45:71:8f:b5:bc:8a:
09:33:f3:a7:99:1f:60:a4:21:e9:75:9b:fe:57:c7:ed:c7:6f:
3c:48:b3:cf:51:34:e4:f3:03:a2:65:11:c5:f3:69:72:10:75:
93:4a:d3:35:69:ab:4e:39:f1:d5:77:52:78:21:9a:ab:64:66:
16:6d:0c:fa:b1:08:4d:ee:9d:6d:e5:d6:0c:00:f7:d9:4e:a6:
e5:77:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 28 12:43:19 2025 by rpki-client