Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d38daa36-acbe-32fb-8f20-1dba7c94ee7a.roa
File: d38daa36-acbe-32fb-8f20-1dba7c94ee7a.roa (raw, json)
Hash identifier: 6RzDrVl3yUC3M6fxUfynUMWKG65bex1b6TqVvFPT0X4=
Subject key identifier: D6:5F:F8:6C:E6:92:32:D6:91:0A:4C:7B:8D:FB:6F:85:8B:DD:FC:01
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D73E0075AECCFDCC5E7FE6B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d38daa36-acbe-32fb-8f20-1dba7c94ee7a.roa
Signing time: Thu 10 Aug 2023 17:48:59 +0000
ROA not before: Thu 10 Aug 2023 17:48:59 +0000
ROA not after: Wed 08 Nov 2023 18:48:59 +0000
asID: 16509
IP address blocks: 108.165.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d7:3e:00:75:ae:cc:fd:cc:5e:7f:e6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 10 17:48:59 2023 GMT
Not After : Nov 8 18:48:59 2023 GMT
Subject: CN=38d6e0af-17e2-4918-8faa-e7148c3adb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:eb:ca:f2:d3:59:f4:cd:87:dc:ee:0c:89:
61:ab:1c:f2:5c:6c:61:40:90:e7:9c:49:ac:93:df:
c3:9b:c0:4f:1d:f9:ad:52:2a:25:36:d4:cf:6b:68:
fb:3a:d8:dc:f8:45:b7:e9:a0:ff:03:e2:cd:e1:3e:
6b:03:80:3a:e6:d2:1a:48:4a:20:d1:49:6a:3b:d9:
27:fc:b4:99:22:90:0e:52:f2:16:48:71:13:35:2e:
97:a0:d6:3a:af:c7:b0:da:4f:5a:79:e6:d8:e9:b2:
c6:69:65:7c:25:02:6a:a8:ae:fd:18:e8:03:6b:3f:
49:2d:e6:d4:61:59:c1:23:4c:61:8b:6d:90:fe:2f:
35:6b:49:50:1d:f4:e1:30:1c:8b:68:2d:6b:5b:04:
4c:18:f5:26:39:23:ee:17:2f:40:ad:60:07:fb:dd:
5b:d5:b3:b2:69:dd:71:8a:c3:cd:b8:d3:11:62:75:
47:44:cf:f4:b6:71:4a:f8:96:97:72:ef:01:8f:df:
2a:9f:e9:cd:17:53:d0:8d:8c:86:3b:8c:56:3e:21:
18:16:49:dc:98:0d:d6:c2:b8:0e:96:98:bd:ac:30:
51:3b:00:c1:27:6c:37:74:59:da:0c:f0:fe:f6:68:
9d:da:fb:82:2e:36:c9:45:8f:fe:ab:1d:3e:71:8c:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:F8:6C:E6:92:32:D6:91:0A:4C:7B:8D:FB:6F:85:8B:DD:FC:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d38daa36-acbe-32fb-8f20-1dba7c94ee7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:81:b9:c5:a6:8d:4f:70:fa:51:ad:ac:94:85:5f:d7:3f:83:
bc:0d:cf:e2:92:3d:36:ac:f9:9d:02:e2:1d:87:df:da:12:12:
4b:04:c1:c7:cd:d3:1a:80:a3:32:24:27:c7:3c:a0:af:42:d1:
e9:20:0e:80:5c:47:22:a3:7d:0e:20:fb:50:5f:14:75:36:8a:
ae:57:54:aa:35:14:c4:c1:49:6e:bd:3a:e6:59:54:10:3c:de:
9f:99:35:f8:56:8c:3e:e9:35:44:cf:30:9b:e2:4b:3c:e4:7a:
52:6f:d5:31:6e:ef:58:ea:ac:45:ef:b5:54:73:4e:3b:bb:f5:
9a:2d:1d:84:a0:16:2a:ae:f7:85:5c:8c:a9:e1:1a:02:1f:b7:
01:f5:a2:b7:4d:0e:d5:4e:ff:e4:08:6e:fd:3e:e4:be:27:87:
47:94:51:c6:12:b1:7e:99:3c:78:22:a1:58:07:69:28:6b:d1:
e8:9d:cf:82:68:5c:d4:7a:5e:e7:99:32:5a:c6:6f:42:32:a9:
cd:c8:29:28:e4:eb:c6:1b:48:88:16:1d:a6:9c:4f:15:07:f9:
f2:6d:fa:8c:55:1e:90:75:f1:ce:14:ae:f3:6f:af:06:df:31:
9a:18:8d:a9:4b:22:15:a6:96:24:43:53:9c:08:dc:85:95:aa:
b5:6d:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:19 2025 by rpki-client