Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d63a6fa8-0627-3bc4-b63e-ac812c7cb1ba.roa
File: d63a6fa8-0627-3bc4-b63e-ac812c7cb1ba.roa (raw, json)
Hash identifier: BPFOtJL3thDPdaHV7z3feTfaUdXBbJVMhBtI8o6/HBc=
Subject key identifier: AD:68:35:92:ED:2D:DE:08:F6:9C:AA:47:54:5F:32:AB:B5:20:EE:70
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E0D7D58A34792CB08C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d63a6fa8-0627-3bc4-b63e-ac812c7cb1ba.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 05 Aug 2023 07:48:15 +0000
asID: 43260
IP address blocks: 108.165.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e0:d7:d5:8a:34:79:2c:b0:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 5 07:48:15 2023 GMT
Subject: CN=7daa944f-85f4-489c-8a88-53e5474ac4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:6f:02:62:e5:f8:22:ef:09:21:bc:31:b2:
4f:7e:5c:08:68:86:2d:10:af:89:7a:07:37:36:bd:
c0:4c:d6:b0:80:20:9f:c8:0c:65:fc:dc:4e:d4:44:
fc:27:ec:bb:28:88:87:39:50:c4:6f:47:6e:15:fd:
4a:90:40:d4:b9:e0:f0:84:c1:6c:d5:60:c3:26:79:
32:7e:b2:c8:c9:26:08:aa:12:d1:83:c4:f1:cd:03:
91:8f:aa:57:4d:2e:eb:ed:80:bc:e1:98:8b:56:b3:
71:35:b1:eb:2f:79:c4:d1:3b:d3:c8:eb:44:c3:b7:
5d:6c:47:e8:66:05:e0:1a:78:2b:5d:1f:be:b8:23:
6c:e3:ca:39:fa:c6:7a:34:12:00:2a:ad:d9:b7:3c:
e8:9d:0f:c7:ad:6f:57:21:50:66:b7:1c:f6:13:84:
43:21:3c:1b:9e:54:43:ee:e6:f4:a8:3d:11:dc:b3:
a4:ef:94:b5:65:33:bd:74:6b:b1:12:58:6a:c2:7a:
36:ec:ff:a8:d2:51:c8:d1:93:f5:92:16:9b:e2:f4:
12:e5:04:5c:07:7c:5a:d1:a8:5e:a4:9c:eb:94:08:
4d:77:69:f7:36:50:2a:a1:ac:fa:8e:85:a7:70:0b:
28:97:13:f8:e9:d2:35:69:59:c3:fb:f3:66:8d:ba:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:35:92:ED:2D:DE:08:F6:9C:AA:47:54:5F:32:AB:B5:20:EE:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d63a6fa8-0627-3bc4-b63e-ac812c7cb1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:a0:24:87:75:17:b9:5d:e1:29:fb:c3:78:e6:9d:f9:70:ba:
7c:e4:20:73:f4:8d:43:84:6f:80:fa:fe:59:15:88:e3:b0:06:
8d:d7:b1:be:00:60:25:9e:d1:5c:d6:84:b3:a2:24:71:db:02:
c9:2e:8d:b4:dc:cd:b0:8e:84:d3:9b:d6:17:4b:f9:20:6c:d8:
cc:7b:47:72:96:81:ef:62:73:dd:79:58:91:ad:96:53:0f:9e:
40:d7:31:38:9a:d5:6a:61:99:d3:9d:31:4b:f9:7e:a3:b2:00:
aa:6c:59:c4:ee:38:d0:1c:63:c5:c4:eb:34:f9:82:5f:c1:14:
db:45:b8:4e:4b:e6:18:2b:ce:55:20:e2:6f:2a:fd:3c:5c:43:
d3:1f:2a:38:96:3f:a8:64:ca:ac:55:2d:11:76:17:a9:53:2f:
16:0c:a4:73:95:66:e1:82:40:52:6e:16:90:60:f5:d3:2f:0f:
ef:e9:95:8f:5f:e3:fe:46:93:75:63:01:49:66:e2:40:09:bd:
ca:17:e2:2a:1f:72:32:06:15:d3:02:cc:59:bb:b3:57:77:f8:
c3:b4:a2:f6:eb:f9:5a:4b:d2:d3:0d:f2:c5:f6:ad:e7:6e:7f:
45:58:a6:c4:e2:9c:80:55:45:e4:e4:8b:00:18:d3:0a:94:8b:
d2:80:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:00:25 2025 by rpki-client