Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0941c19-531b-3dad-bd5b-71c10274eafd.roa
File: d0941c19-531b-3dad-bd5b-71c10274eafd.roa (raw, json)
Hash identifier: KbqcfynpgZWDvtllJ4j9YGWCTWZb6WQdEtooIWP2EPs=
Subject key identifier: A0:C8:19:BD:83:8B:E6:F6:F3:5B:D8:4D:98:BF:5D:B4:C4:BE:18:D5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E447010FDFCF99C98E965640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0941c19-531b-3dad-bd5b-71c10274eafd.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Wed 09 Aug 2023 09:43:59 +0000
asID: 23470
IP address blocks: 108.165.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:01:0f:df:cf:99:c9:8e:96:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 9 09:43:59 2023 GMT
Subject: CN=43989e61-81c3-4b90-93ae-1239394d242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:76:4c:8c:4f:db:3d:4d:75:21:c5:02:a8:
3e:58:8e:c3:d3:50:82:bc:2d:22:7d:d6:44:59:0c:
b7:0d:c1:9c:8d:cc:17:aa:fe:dd:ab:4a:26:ea:2b:
d7:a7:89:8e:51:50:f9:54:ce:18:43:45:34:e4:66:
21:e1:62:70:85:15:b8:de:37:df:b3:cc:9a:bc:15:
ac:76:50:83:87:28:6e:89:d1:d5:51:ab:86:4f:75:
46:52:d0:7c:f8:4a:07:6d:d7:c2:80:e0:01:4e:1b:
8c:92:81:dc:cd:3b:fa:bf:cc:13:7c:8e:c9:e8:5b:
a9:c6:2e:f8:e4:65:4f:f5:0b:d1:82:6a:ac:0c:a5:
96:89:d3:5a:bc:08:1a:48:16:64:b5:a4:16:a6:3e:
c0:47:69:8b:25:66:05:dc:32:c3:6d:ae:92:7d:1f:
61:c3:58:e4:5d:38:b6:29:c7:68:06:85:37:7e:5f:
f2:fe:b6:22:dc:9c:0a:bb:0a:f2:ae:85:c3:e4:f9:
cf:b5:bd:c9:12:c9:35:53:d4:55:70:49:78:68:6d:
3a:69:72:9c:ac:1d:1a:c0:e6:05:f4:ce:c9:96:9c:
39:5a:90:d1:d0:5b:20:92:d0:55:d1:bb:34:b8:28:
1d:d9:2e:78:37:7d:c7:62:c9:28:ed:2d:61:87:dc:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:19:BD:83:8B:E6:F6:F3:5B:D8:4D:98:BF:5D:B4:C4:BE:18:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0941c19-531b-3dad-bd5b-71c10274eafd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:d5:2b:56:41:86:60:54:c8:56:d9:33:11:32:45:ac:1c:14:
ee:b1:4c:3e:12:f8:b7:57:12:02:e7:79:3f:8c:2e:b8:c0:d9:
72:7a:ec:0b:66:23:24:7e:33:0b:20:c0:c5:0d:3f:b5:bd:dc:
81:c9:11:89:ad:eb:7d:10:59:cf:43:94:32:69:e3:ad:a8:ed:
be:61:93:d8:bd:99:a2:8b:72:75:fb:fc:2e:71:60:54:b8:c9:
6c:c3:00:78:f3:a2:3d:07:97:42:61:d2:25:09:31:6f:af:fe:
36:5d:98:35:d3:a1:7a:2b:d6:71:ab:42:18:2c:6b:fe:07:d4:
5a:8c:e7:91:50:b3:7c:00:95:07:47:36:c0:42:3d:56:fc:72:
f9:6b:28:f6:22:a4:59:b8:79:fe:a6:7c:df:22:55:62:37:07:
93:f1:ab:c1:0f:ee:98:6e:bd:9e:7d:65:6a:b0:9e:ff:83:13:
70:68:c2:e7:92:48:99:6b:e0:f0:03:7c:44:b8:e9:4d:99:e9:
95:11:f0:70:19:b4:c5:62:44:24:4f:2a:f6:66:43:05:ee:23:
90:e4:c0:31:30:40:a8:09:b3:99:bc:a8:30:f9:05:57:19:31:
7f:fa:d2:f3:ab:16:b2:ce:cd:1c:0e:a8:a6:cf:32:d2:59:98:
27:d7:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:20:41 2025 by rpki-client