Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7d68a1f-2f5e-36f0-bd96-fa28be44a56c.roa
File: d7d68a1f-2f5e-36f0-bd96-fa28be44a56c.roa (raw, json)
Hash identifier: xqYmjwrFH2pMy0wrEQJ7nDhmJAU1XYdkJtJ+Mo5DV4A=
Subject key identifier: 81:49:16:2C:1E:1C:6C:69:B1:56:A2:BE:7F:5B:04:23:99:8C:31:D9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858423AD83541AB76A115289956C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7d68a1f-2f5e-36f0-bd96-fa28be44a56c.roa
Signing time: Thu 15 Jun 2023 17:17:47 +0000
ROA not before: Thu 15 Jun 2023 17:17:47 +0000
ROA not after: Wed 13 Sep 2023 17:17:47 +0000
asID: 398929
IP address blocks: 108.165.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:3a:d8:35:41:ab:76:a1:15:28:99:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 15 17:17:47 2023 GMT
Not After : Sep 13 17:17:47 2023 GMT
Subject: CN=9003deb4-dbe3-4951-bb3b-39ca3d103931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:ad:1b:21:31:69:a4:af:9a:c2:0b:c6:14:
63:21:f9:fa:69:ee:11:a6:e5:cb:a7:d0:1c:47:b9:
58:c2:bf:79:46:ae:7f:46:ed:ed:5d:82:f0:bd:2c:
bc:ae:b1:f3:62:d5:92:2c:2b:3c:77:2a:5e:3f:06:
90:74:8b:7d:2d:8e:20:f8:1b:8f:19:af:21:9c:9d:
1c:69:30:a3:14:bc:95:61:d3:49:0b:02:f7:c0:dd:
6a:fa:3c:ff:60:b6:d6:46:52:45:d9:f9:c7:93:42:
3b:6d:d4:09:94:ea:2f:68:21:68:d2:08:c3:1a:21:
39:c8:2e:4b:1c:4c:90:62:a1:12:0c:9e:6f:18:78:
a0:3b:76:b9:b1:7f:a9:31:7e:05:0c:16:f1:52:7c:
b0:cd:1e:fc:08:97:99:fd:51:1d:fb:f8:63:d0:03:
1a:00:f4:9d:5b:39:1c:14:3b:02:e8:69:68:d4:d9:
21:ef:3d:80:8c:9e:67:43:56:2f:b1:eb:53:7d:12:
4d:5f:2f:89:e3:9d:8c:3b:14:3f:db:a9:bc:2e:d9:
bf:a3:9a:4f:cf:93:e0:14:b3:6d:32:91:f1:f0:bb:
28:cb:cc:52:e2:ec:d0:11:ed:ea:37:70:15:c7:b9:
39:9e:a9:fb:dd:0a:41:ca:1e:48:f2:c2:54:6b:c5:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:16:2C:1E:1C:6C:69:B1:56:A2:BE:7F:5B:04:23:99:8C:31:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d7d68a1f-2f5e-36f0-bd96-fa28be44a56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:a0:14:97:b5:40:e8:dd:2c:86:3a:37:65:25:32:67:17:c4:
63:3f:2e:5b:05:a7:ef:17:65:2a:fe:10:b2:e0:d0:f4:ed:b4:
cf:47:6c:6b:58:63:89:cc:0e:1f:46:81:f2:da:80:51:4f:f7:
22:69:7a:88:d5:1b:9f:24:ca:06:88:60:34:4e:95:93:c5:80:
84:d5:e3:bb:11:e0:8d:d7:0f:63:7a:19:08:0f:82:fc:1a:68:
ae:66:5f:fb:f7:ce:d5:95:ac:e1:93:11:0c:31:b2:2b:b2:51:
61:f7:3d:80:93:0c:d8:7b:53:e3:21:90:5d:5a:58:62:fb:30:
9c:7c:82:76:88:8a:a3:90:2a:18:d0:2e:99:e3:11:74:38:c0:
d4:56:f3:df:36:34:9a:7f:a2:25:de:4f:de:d4:75:95:94:54:
7a:47:23:7e:d6:8b:d9:0d:51:12:22:b1:92:95:83:c2:17:ac:
09:59:5e:85:96:70:80:19:6f:ee:b3:c4:d2:87:89:5c:61:be:
24:a9:11:bc:c0:74:cf:50:bf:31:8d:0b:30:cb:f1:38:68:3d:
16:59:04:c7:a5:02:05:4f:1b:9f:d1:83:c4:7c:31:7b:a3:58:
d1:fb:46:82:46:6f:f5:b2:25:55:70:13:3d:3b:f6:5b:aa:ae:
9e:26:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:11 2025 by rpki-client