Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9e7ebb3-1f6e-320c-8232-85f17f679df9.roa
File: c9e7ebb3-1f6e-320c-8232-85f17f679df9.roa (raw, json)
Hash identifier: +ADY1kZEeXI/D3Joi5q+LtGsFwL2dRkIiMD57dIN6d8=
Subject key identifier: E9:07:53:D9:8C:77:97:E2:6D:00:7B:9A:C3:DA:DF:4B:4C:B5:73:F9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858466B3635123C83F5B3602BFB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9e7ebb3-1f6e-320c-8232-85f17f679df9.roa
Signing time: Wed 03 Jul 2024 20:13:44 +0000
ROA not before: Wed 03 Jul 2024 20:13:44 +0000
ROA not after: Tue 01 Oct 2024 20:13:44 +0000
asID: 212238
IP address blocks: 108.165.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:36:35:12:3c:83:f5:b3:60:2b:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 3 20:13:44 2024 GMT
Not After : Oct 1 20:13:44 2024 GMT
Subject: CN=9eb1499b-40e9-41b6-abb0-6892717bfa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:e9:7f:5c:fd:1c:e6:9e:31:ff:1c:4f:20:
9f:8b:c1:2b:37:32:41:d2:8d:15:85:7d:8a:1e:a4:
4e:09:9b:54:f5:fd:a0:1d:90:a8:11:0f:b2:01:74:
b5:11:7c:55:48:5f:b4:8e:50:7a:14:57:88:d4:e0:
76:ee:4e:a6:79:98:3e:37:4d:35:2b:d1:f2:33:77:
4d:06:1d:7f:b2:ef:0f:f3:95:80:33:a5:f6:5e:c7:
39:4b:62:27:db:5f:26:8c:65:32:2a:2d:2a:34:49:
29:97:48:a9:e7:f5:b1:5b:77:01:41:23:94:c1:55:
35:dc:ba:1d:57:b5:d7:ae:0b:57:cf:e1:38:ec:19:
ec:0b:85:a2:f8:83:b0:1f:bf:51:53:89:9d:94:bc:
e5:30:30:91:78:38:b4:43:a8:76:87:19:99:a4:a8:
f8:ce:88:00:8a:8a:93:06:42:ac:da:1b:7c:6f:c1:
ea:10:72:58:8b:e3:ef:34:21:cb:f5:3b:e0:ac:5b:
31:45:ca:d3:77:08:22:35:78:9a:ef:bc:60:ab:b3:
10:e2:ca:be:ab:fa:a1:3b:33:91:cf:a2:61:a9:01:
cc:8e:4d:48:cd:0d:f9:72:1f:7a:43:a5:af:25:2a:
a1:c5:fe:ba:6c:ea:c9:09:4e:4d:30:11:16:1e:0c:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:07:53:D9:8C:77:97:E2:6D:00:7B:9A:C3:DA:DF:4B:4C:B5:73:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9e7ebb3-1f6e-320c-8232-85f17f679df9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e1:5c:e0:ad:3a:29:98:9e:17:8d:0c:aa:fc:fb:6f:ee:04:
29:28:38:70:02:20:00:77:a4:ce:9b:25:46:f2:bc:48:17:06:
99:0f:36:41:f1:08:cc:cb:38:5b:35:46:81:bd:62:16:ca:1a:
4e:49:76:ff:65:52:85:68:c5:b2:db:e6:72:32:85:86:2c:be:
03:44:95:3f:db:16:bf:b3:a6:27:3d:24:10:cb:e7:59:5f:f1:
07:92:d6:f9:0a:fb:7b:7c:c9:04:d6:2d:7d:e5:f5:f3:cc:c1:
84:50:21:b3:ba:bc:15:32:3b:15:3a:e4:c9:47:f8:5e:53:dd:
00:16:42:54:c8:71:3b:56:14:09:82:ff:b0:20:67:ef:32:19:
fd:80:1c:a4:06:24:b2:5b:f5:1b:7e:2f:74:b8:f9:fa:ce:f2:
62:89:55:9c:a2:34:5f:ec:b2:5e:50:fa:42:59:67:4c:4d:59:
da:d7:70:63:bc:21:4b:4a:69:d7:65:cd:97:d3:9f:54:9c:8e:
6c:82:31:83:c3:27:15:c8:f7:7c:da:10:ea:e8:e4:10:c4:36:
9d:9f:e1:00:84:d8:e1:a7:21:18:9c:60:70:1f:bf:c8:db:8f:
99:30:ed:a4:2f:7f:d7:51:23:bb:a7:0e:3a:7d:72:15:ee:00:
89:32:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:00:27 2025 by rpki-client