Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf64a066-6761-3548-8a59-584d35216beb.roa
File: cf64a066-6761-3548-8a59-584d35216beb.roa (raw, json)
Hash identifier: O4DQESs13GRfmrlr/hndASl9a4fOxnlp91r6oo7UzbE=
Subject key identifier: A9:70:A8:9A:60:90:5D:F8:6B:56:9E:5D:FD:DB:80:AF:EF:63:1F:DC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846F490124D7CEACBC831570C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf64a066-6761-3548-8a59-584d35216beb.roa
Signing time: Thu 22 Aug 2024 01:00:31 +0000
ROA not before: Thu 22 Aug 2024 01:00:31 +0000
ROA not after: Wed 20 Nov 2024 02:00:31 +0000
asID: 834
IP address blocks: 108.165.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f4:90:12:4d:7c:ea:cb:c8:31:57:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 22 01:00:31 2024 GMT
Not After : Nov 20 02:00:31 2024 GMT
Subject: CN=35e0851d-68f4-4dda-9c26-e9095e601582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:65:80:b5:24:6e:89:0e:2c:b8:69:95:bf:
90:a4:47:3d:10:99:be:58:66:c8:59:3e:0e:64:5c:
81:d0:29:5e:46:93:b2:1d:6f:69:cb:60:3a:be:b7:
36:89:eb:d4:06:23:ed:f8:48:b5:ed:c6:44:a7:cd:
52:5f:44:d5:2a:0f:a3:15:f9:14:e1:e4:64:a4:bd:
ff:15:8a:e2:64:74:99:6d:82:77:59:38:2b:6d:3d:
20:31:78:04:43:3e:ff:0c:e5:7b:aa:a7:6d:e5:42:
10:f3:66:aa:a9:63:69:f0:1e:11:b6:f9:b5:8c:17:
d9:06:7a:dd:80:cf:f1:2c:8b:d9:d7:34:ca:a1:dc:
48:d0:e1:3b:a6:41:d3:f8:86:65:de:7f:80:fd:f1:
a1:41:3f:9f:58:6a:73:e1:6b:84:c9:f9:f6:f4:c6:
91:6f:31:91:ef:ef:aa:bb:b6:2c:91:18:45:e1:67:
7a:ea:d1:75:37:7e:66:01:62:0a:f2:fc:d3:49:03:
80:d2:5f:7c:11:10:0a:71:a0:ab:1f:f9:05:c7:85:
e1:05:be:20:cf:ab:22:4b:90:c0:7a:0e:38:99:6d:
e7:36:0e:b1:6e:85:ca:8f:51:af:ba:7b:b2:21:34:
ba:d2:47:28:61:1d:76:a2:6a:70:41:90:77:7f:35:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:70:A8:9A:60:90:5D:F8:6B:56:9E:5D:FD:DB:80:AF:EF:63:1F:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cf64a066-6761-3548-8a59-584d35216beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:72:f0:2b:e6:8d:91:a1:12:33:95:71:6d:27:cc:d3:44:b4:
e9:7f:c6:fb:a3:99:3d:42:3d:49:af:53:a3:06:76:b9:4e:3c:
15:13:7e:45:bf:2e:05:9a:21:54:26:2a:f4:e3:b6:a0:f9:a5:
89:2c:d9:c5:69:14:7f:b5:8b:a7:60:35:3b:b9:d1:74:a3:bc:
fe:e7:7f:25:0a:b6:36:74:b1:66:bb:82:5a:44:18:b3:0a:69:
9c:e2:4c:2c:cb:ab:b8:fd:f5:2c:99:45:ce:cc:9d:c7:b7:b3:
10:ab:40:f3:03:62:54:c6:f7:97:45:b5:e4:04:7b:1b:08:46:
4e:ee:94:02:5f:7b:e6:1a:a1:fe:b4:0e:8f:a0:ed:df:fd:00:
b6:86:c4:62:3a:ba:53:dd:23:1a:7e:8a:62:03:70:39:00:b2:
de:9a:7f:8a:27:6c:fb:95:23:ac:41:74:3a:89:df:f6:12:57:
7d:b0:fc:2f:0d:a7:7c:ab:98:3e:99:a1:d6:db:b2:63:d0:cc:
b5:70:3c:6a:9b:8c:e9:44:4f:23:9a:c8:42:a2:a5:59:64:8d:
76:2c:c1:3f:ca:a9:7d:f7:3a:10:be:7e:9d:3e:81:a5:32:8d:
cb:a2:8d:eb:2e:66:fa:82:40:eb:f1:96:f2:f7:43:35:d3:51:
15:77:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:19 2025 by rpki-client