Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d098eb18-7946-3d64-a048-a919b51fafaf.roa
File: d098eb18-7946-3d64-a048-a919b51fafaf.roa (raw, json)
Hash identifier: 6tgO3fr4igv+b/hrzV62njsXlc6CjQin9+C2yKNeBhE=
Subject key identifier: DD:D1:1C:D1:38:42:D0:4F:2C:AA:27:C6:B4:A9:AC:EA:CA:C4:4B:EF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584819D0080DBDD379D993DF0700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d098eb18-7946-3d64-a048-a919b51fafaf.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 108.165.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:08:0d:bd:d3:79:d9:93:df:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a2140cff-151c-4f8e-8151-31c049304cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:6b:48:9e:c1:5e:74:2e:70:f3:b6:16:7c:
90:ea:6e:8c:ec:ce:32:b0:bb:d8:51:36:f7:44:66:
a9:9d:5a:2c:0d:c7:b0:61:69:a3:1c:6b:98:21:22:
fb:40:80:59:de:10:70:43:c8:c4:8d:99:97:85:5c:
ca:4d:6f:72:af:a0:6c:bf:ef:fd:2b:e1:6d:fc:40:
70:1d:13:e8:2e:08:8a:60:c3:c4:a3:23:d1:27:fd:
61:32:1e:56:50:98:94:dc:0c:c8:72:8d:3e:d8:a0:
c5:91:2c:38:59:55:ec:75:5c:90:e9:ad:f6:4b:7f:
ff:dd:23:63:7b:94:c0:26:6f:4b:8f:e0:71:a8:2f:
45:33:16:a8:42:16:ee:9f:fc:58:f7:2d:cf:ad:60:
19:ba:03:ed:9b:b3:7a:76:ef:15:8d:42:da:c0:2d:
82:cf:de:7f:01:b5:18:a0:4e:c4:3c:c6:3e:0e:90:
2b:a3:d4:7d:74:56:27:52:c5:a4:3e:29:4b:6b:52:
aa:e5:b1:d5:89:84:4b:50:ec:3a:83:7b:fb:b2:80:
b7:bf:f1:f5:07:3c:39:c7:6d:dc:63:bc:f4:39:2d:
58:b8:33:21:f7:4b:d6:01:ae:7b:69:87:00:02:8c:
d9:03:2b:02:22:22:80:5f:ff:11:a9:bf:7d:40:9b:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:1C:D1:38:42:D0:4F:2C:AA:27:C6:B4:A9:AC:EA:CA:C4:4B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d098eb18-7946-3d64-a048-a919b51fafaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e8:cd:e8:64:3d:81:30:12:ed:a8:14:6d:75:e9:c7:b1:99:
87:92:a9:76:9f:3b:a0:be:40:a8:46:ba:3c:07:26:da:8a:99:
a4:c0:68:fd:24:0d:92:3c:1c:00:cc:ba:8d:88:bf:d6:fb:65:
d8:30:e1:e2:63:32:2e:95:ed:b7:2d:9c:d4:bf:ea:ad:a5:81:
a6:0b:4e:d4:a0:0e:a1:79:d1:5b:51:36:2b:41:88:b7:6a:68:
b7:e7:0a:76:d1:b1:a8:df:70:ca:bb:99:0c:ca:16:e7:e2:03:
52:62:ff:ac:07:e9:78:2d:f2:00:b1:28:78:a8:2e:fe:4d:c7:
29:af:24:11:29:3d:6e:f5:6b:12:61:28:ca:d4:b6:f4:01:f4:
aa:40:11:5e:03:37:44:e9:07:52:48:4b:ff:d9:e4:57:46:0b:
a3:14:7b:f8:c1:f0:44:cc:40:48:8b:23:9a:98:08:44:b8:af:
ac:c8:da:ea:18:19:64:58:14:68:b2:f8:50:99:7d:d5:4d:fa:
8d:8a:4d:a5:fe:2d:4b:e0:4d:86:5f:d2:c3:8e:8a:d3:9d:c2:
f5:3b:f8:ef:22:79:5b:33:38:96:58:45:a6:84:3d:76:85:04:
82:16:8b:6c:c1:aa:97:11:f2:97:ae:72:fa:7d:2d:b9:72:04:
d5:cb:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:24:47 2025 by rpki-client