Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cab4030b-3daf-313f-ae02-1b240817e05c.roa
File: cab4030b-3daf-313f-ae02-1b240817e05c.roa (raw, json)
Hash identifier: Rh7TuZ0lwIn65xs7vrbIYVFr7AZrJACmDdPnsPZmcQI=
Subject key identifier: 11:F3:76:31:2F:A8:E4:69:5B:EA:18:7E:C7:67:6D:38:33:A3:12:C3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328576D51CC73C042CFC173772F9480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cab4030b-3daf-313f-ae02-1b240817e05c.roa
Signing time: Wed 22 Jul 2020 15:41:13 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Tue 25 Oct 2022 04:00:00 +0000
asID: 22773
IP address blocks: 108.165.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:2f:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Oct 25 04:00:00 2022 GMT
Subject: CN=58cb4367-58ec-4e56-b142-cdf4ea698801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:c2:df:58:14:f8:5f:ba:de:2b:e3:2b:0f:
1b:f2:55:f6:eb:bb:19:21:56:5b:96:b6:44:c9:92:
c3:a2:2f:8b:04:ee:87:95:c7:54:0d:7c:07:cf:63:
bf:a2:e1:1b:03:fc:34:b9:48:48:50:5b:da:0f:b3:
7d:a1:92:1e:da:81:e5:59:15:92:57:3e:cf:f4:c5:
79:5c:af:4b:16:f5:e4:ad:58:7a:48:e6:41:5d:d7:
4e:e4:8a:eb:6e:79:5d:c2:b2:2b:46:11:4e:5e:63:
b2:64:db:1a:f2:1d:10:fb:8a:fb:ba:82:ff:ee:13:
86:c1:03:fd:a9:5d:9d:6b:eb:6b:21:df:28:c7:19:
d4:86:a3:f0:f2:50:29:50:f5:dc:55:8a:e8:8b:0f:
ab:f0:7d:97:b5:2b:34:be:9b:07:ed:cc:f2:e6:2f:
59:58:ae:91:b5:62:af:f9:0f:cc:d0:6f:d0:ff:3e:
fe:2c:64:d4:03:8a:80:07:eb:93:e6:b5:08:3b:09:
e9:b4:0a:07:47:40:4c:57:3a:df:54:ba:4d:57:dd:
74:91:f6:18:86:db:50:ce:ae:16:fd:00:39:b1:0d:
78:9b:d9:77:c7:4d:4e:c6:cf:c3:2b:fd:08:93:aa:
07:69:94:5f:d5:b8:05:b9:01:37:95:d7:1a:71:06:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F3:76:31:2F:A8:E4:69:5B:EA:18:7E:C7:67:6D:38:33:A3:12:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cab4030b-3daf-313f-ae02-1b240817e05c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:1a:4e:ac:9b:65:e9:58:6f:f6:ad:0a:ac:50:da:e7:bc:25:
f6:66:43:34:d1:db:0a:52:49:0b:48:79:93:11:6a:e8:ca:94:
5a:56:21:bc:81:98:c3:ce:e1:0b:76:c8:5c:e9:88:6d:b8:ad:
e4:05:1e:b6:57:50:41:a7:41:51:cd:28:e1:98:27:92:7d:b4:
72:e1:62:23:56:1f:ea:07:d9:5d:93:be:59:ed:66:b1:48:1c:
c0:73:dc:b3:ee:c3:ba:e7:f3:2c:95:1e:b8:0c:b3:d1:bd:82:
96:2b:5a:18:1a:ac:cd:09:36:11:16:ed:bd:62:6e:7f:aa:e1:
2b:52:54:f8:c1:e9:d9:f3:28:b3:87:7c:8f:92:97:27:9c:42:
d1:7c:bc:46:0a:91:83:7c:c6:03:c8:8d:f6:9a:28:4d:1b:7a:
0a:ef:5f:66:c9:ee:b7:67:e8:10:d9:ba:cb:e7:06:64:4e:6d:
c3:21:4c:cb:7d:8a:6c:09:c4:b3:19:ea:98:77:29:aa:fe:33:
1e:b3:4f:0f:bf:3b:f9:0b:cf:34:6d:d5:43:cf:56:82:5b:ca:
22:46:2a:9f:0d:9a:81:c2:9c:10:a7:2a:d2:e7:74:b0:52:b0:
37:01:1b:7a:de:bf:60:21:dd:9e:60:b8:b3:cd:ac:f8:19:a6:
48:c0:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:47 2025 by rpki-client