Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c01526-99f9-3190-b0f5-c515b607f246.roa
File: d4c01526-99f9-3190-b0f5-c515b607f246.roa (raw, json)
Hash identifier: ttNfTrlxTkFjD04k6/jEdTBs2HWnze1drAmIxMyysRc=
Subject key identifier: 71:39:B3:45:6D:5C:0A:78:2C:8E:49:1D:5B:AA:5B:C4:54:3E:44:1B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584005B33791DEAB4A5E3B7CB020
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c01526-99f9-3190-b0f5-c515b607f246.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Wed 26 Feb 2025 05:00:00 +0000
asID: 61317
IP address blocks: 108.165.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:b3:37:91:de:ab:4a:5e:3b:7c:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Feb 26 05:00:00 2025 GMT
Subject: CN=00f608c0-b09d-416b-8dae-db35fb3cb8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:00:e8:50:d5:d2:e6:5d:3b:b9:00:4f:06:
74:26:36:ce:ed:d0:8a:9c:31:9f:5f:e2:98:f7:fd:
a3:fc:b9:b9:4c:69:55:2b:69:fd:37:37:da:7c:89:
1e:10:87:59:97:9b:23:c9:85:13:be:66:ac:b1:b0:
c2:45:f8:ab:a9:1d:f2:12:ba:7a:a9:2b:ce:8f:15:
32:4a:ac:fc:44:20:cf:5f:ec:c3:48:76:75:37:21:
c5:90:20:86:3a:5e:9b:6b:df:64:6c:c0:ca:bf:1f:
30:88:9b:43:62:10:7b:eb:78:75:e4:19:57:13:e3:
54:95:31:75:6b:ad:26:39:d1:74:82:c4:16:71:4c:
3b:8d:7c:c4:7d:77:9e:4f:d2:fa:fb:46:c5:9a:37:
c0:97:c1:dc:2f:0e:d3:be:16:d4:7c:78:08:45:c4:
70:95:bd:b2:f7:bb:44:31:1c:38:50:e1:b4:5a:db:
2c:db:dc:2f:2c:ec:1c:8e:fd:e4:34:8b:4d:60:25:
7f:3b:06:b0:ef:41:0c:7d:54:64:4e:b4:bd:ce:fb:
f9:f6:39:6f:02:24:a0:63:55:62:9f:19:b4:1b:dd:
b0:c7:c1:f5:85:72:d5:b5:6d:22:e9:0a:be:02:02:
38:7a:40:f6:97:60:b6:91:0a:05:f8:62:86:d2:50:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:B3:45:6D:5C:0A:78:2C:8E:49:1D:5B:AA:5B:C4:54:3E:44:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d4c01526-99f9-3190-b0f5-c515b607f246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e9:4b:ed:c4:7c:20:33:a1:27:5f:63:15:5e:8a:36:a8:ab:
36:07:ee:a6:f5:45:44:0b:39:0d:6d:5e:e3:e3:23:5b:ec:40:
d9:0c:37:9f:da:52:4c:81:34:b3:e3:99:69:0e:5f:f2:ff:de:
9b:06:5e:85:be:3f:b0:bd:5a:55:f7:93:71:68:0e:5b:4c:7e:
15:ec:f9:9a:a8:ef:8c:cd:40:93:96:6a:89:87:60:2f:85:17:
34:6a:88:12:46:2a:e2:47:0f:68:e7:73:eb:bd:48:17:c2:09:
3b:60:70:a7:9b:3d:38:e0:16:94:91:08:a4:29:3a:c4:53:48:
04:29:58:90:81:2e:0d:cd:f4:45:49:96:3f:8b:1d:e3:0a:3c:
77:7f:0a:07:c8:88:97:2f:f7:46:dc:3d:ef:c1:1c:49:df:19:
16:4c:62:ac:34:a2:a4:36:e2:70:55:4b:83:56:44:de:51:6a:
5a:de:b3:27:d2:c3:be:29:28:c5:a3:4d:d1:25:6f:8d:09:41:
e0:0b:ad:98:29:9c:b8:98:86:80:bd:d9:fd:6b:20:df:02:05:
f2:f0:38:19:ec:d8:13:37:13:bd:90:13:60:b7:55:20:89:82:
17:a1:9e:f9:45:17:7c:50:a6:4e:3a:c2:4d:61:9b:12:54:af:
62:b5:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:30 2025 by rpki-client