Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d35744d8-d568-3ea8-b70b-e6482da24e26.roa
File: d35744d8-d568-3ea8-b70b-e6482da24e26.roa (raw, json)
Hash identifier: oJ+rcVKgWNg+HYgKb7lzLTQzJJiwDwPAHKOSpT/Q8bY=
Subject key identifier: 5E:6B:4E:CF:1D:E2:C9:A1:A6:71:69:AC:64:A7:93:BB:5F:3E:2E:BE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E447008BA42911A652713B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d35744d8-d568-3ea8-b70b-e6482da24e26.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Wed 09 Aug 2023 01:13:03 +0000
asID: 135752
IP address blocks: 108.165.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:00:8b:a4:29:11:a6:52:71:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 9 01:13:03 2023 GMT
Subject: CN=a96da641-febc-4c1f-95b0-20d8fe34457e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:28:c0:b7:be:ef:1f:cd:f0:e2:48:a6:07:
62:10:69:74:b8:6e:53:af:ba:54:e8:a4:8b:17:8c:
34:00:f8:5f:06:2b:79:10:ae:33:7f:d3:99:b7:55:
ae:90:d9:e0:11:b7:72:f5:31:8a:91:11:d3:e2:ea:
ad:85:76:e9:67:b7:15:ce:27:a7:6b:f0:c2:75:86:
c7:9d:ed:65:a5:38:9a:1b:7e:8b:0f:32:59:bd:50:
30:c8:a7:21:ea:5a:63:b8:06:51:63:c3:27:26:9b:
35:c7:7e:c0:3f:e9:cb:f1:c1:15:ad:02:d9:f8:a4:
7c:e3:85:38:e0:1c:fb:a8:c2:d4:3d:28:80:80:2b:
38:f7:0e:e6:ac:e9:c5:ed:23:58:7b:fa:df:01:6c:
25:3e:1e:ca:b5:65:74:1b:5d:a3:f4:29:29:3f:bb:
dd:4d:62:4f:e8:15:21:28:bf:e6:25:4c:34:8a:59:
e3:b5:d7:1e:5a:82:0b:9b:24:06:93:55:d0:fe:af:
79:68:ae:59:e4:f0:6d:85:ba:d2:67:f8:b5:7c:3e:
89:38:f7:05:47:4b:f4:85:68:bc:74:b2:6b:6d:41:
58:4f:bd:a6:ed:d1:b8:a9:dd:c9:67:d6:e1:94:ff:
1f:e4:47:b4:9a:a0:d3:eb:0a:39:e9:8e:96:63:3c:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:4E:CF:1D:E2:C9:A1:A6:71:69:AC:64:A7:93:BB:5F:3E:2E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d35744d8-d568-3ea8-b70b-e6482da24e26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:6a:27:64:94:99:7e:a4:18:07:e3:1d:c6:d6:cb:db:1f:79:
e9:cb:9f:de:2e:6b:61:2a:cc:4c:95:f0:fe:92:26:f3:f5:ee:
fd:c7:dd:b6:cd:d1:8e:38:a8:08:85:60:0d:3b:98:46:cc:22:
5c:32:b6:40:62:90:4b:3c:d3:9d:6b:16:6d:98:11:a8:ab:83:
d6:1d:cd:27:e0:a0:a8:33:12:04:67:5e:87:e3:9e:ac:f9:f4:
33:3d:95:0a:ec:5d:cf:7f:e3:9c:74:b1:ed:fb:6f:02:40:17:
53:c6:ed:f1:f1:a4:aa:7b:7d:d1:16:1a:53:ba:c5:a4:33:cf:
7c:59:89:d6:63:83:61:96:1d:0f:5a:18:c4:f5:d9:e7:de:b1:
0b:22:a4:81:94:31:67:91:6f:31:3e:2b:8c:71:41:42:8d:c1:
37:80:5b:38:63:7c:a3:94:7b:4e:7c:a0:cc:a1:59:e7:ad:f4:
ed:ab:4e:3f:5e:77:ea:44:40:f5:d1:ec:d8:1c:dd:70:23:6f:
5a:22:54:c6:e8:e9:18:d4:d0:0e:d3:1a:79:69:5f:14:1e:46:
9e:cd:e6:fd:3c:da:cb:7d:57:67:a3:86:f5:ed:4b:ce:6d:23:
d7:b6:ab:dc:20:da:b4:71:9c:fd:07:09:76:47:7f:16:ad:98:
2d:9b:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:14 2025 by rpki-client