Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa
File: dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa (raw, json)
Hash identifier: 07JKMcQa5lPRRR/seGn6piCdYOF0SpIuqD3bGDhBVBM=
Subject key identifier: 98:F0:99:E1:EA:6C:F2:B8:4F:6D:37:3C:5A:A7:24:12:50:EB:15:1C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446DB20ACFB4FD5EEE7F4C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 18 Jul 2023 05:07:26 +0000
asID: 61317
IP address blocks: 108.165.232.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:db:20:ac:fb:4f:d5:ee:e7:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Jul 18 05:07:26 2023 GMT
Subject: CN=19596a9f-0783-4f89-a86b-9cb3677d8646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:e3:a5:45:e5:95:47:40:a6:bd:23:ac:41:
9b:4b:0c:b1:ed:23:4c:43:fb:60:c9:11:ba:8c:e5:
85:47:6e:ce:cc:a9:68:f3:e4:2e:a9:6f:ea:75:3e:
57:dd:4e:de:4c:2a:7a:ea:f4:04:d0:b6:73:af:e8:
0d:5a:ae:c1:53:41:d8:25:52:e1:78:7a:3f:6b:c3:
81:25:5e:d1:77:26:c8:a1:f2:85:59:fd:06:7c:24:
83:24:7c:94:4c:b9:b5:7b:45:d9:60:ec:29:e1:b5:
29:bb:e6:1a:2f:6d:9e:32:f7:4c:41:fa:9e:44:6c:
3c:a7:7a:c7:4b:d9:47:52:9a:d5:02:c8:30:1e:32:
02:3a:81:10:ab:bf:64:89:6e:b3:08:25:6b:51:40:
85:52:7c:db:cb:e1:36:40:69:cc:a5:f4:25:4f:e7:
fa:58:63:10:a7:0f:2f:2f:ba:d9:b1:d1:67:aa:04:
9b:ea:b6:f7:31:51:91:d9:ab:e6:e2:ee:06:80:cc:
64:2a:24:5c:8d:95:fc:b4:52:77:a1:67:c3:b3:57:
81:6a:c2:03:96:08:c0:6d:a1:7f:8d:04:2f:16:3b:
35:3c:60:bb:54:bc:a0:5b:45:3e:40:d6:7d:0e:d6:
81:78:a8:ea:a4:7d:7d:85:ac:01:d9:a8:a7:c6:e7:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:99:E1:EA:6C:F2:B8:4F:6D:37:3C:5A:A7:24:12:50:EB:15:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dad670d5-56c4-3b10-b0b5-c1fe4eb93a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:72:13:00:86:31:2a:16:e8:ed:32:98:62:9e:35:ba:bf:51:
09:95:73:71:d8:dc:c6:f2:6a:05:c1:54:27:e6:1e:79:ef:90:
4e:6e:8a:e5:70:af:1e:6f:6f:27:ed:88:95:c6:c9:6d:27:62:
28:c6:31:ee:9b:04:ce:93:1c:17:48:f9:a7:a3:6b:e2:f2:d5:
17:e9:22:0a:e5:a1:87:d3:11:2a:c8:81:fe:85:aa:00:34:74:
8b:a3:5b:b6:0f:69:ab:6e:b0:15:ec:b5:71:eb:2d:2b:e2:34:
c3:cf:bf:4e:c0:cd:01:80:66:46:33:f6:06:2c:ab:02:b5:6f:
82:13:03:31:0b:67:8d:ae:6d:74:0c:5c:0d:61:9a:33:3f:ab:
a6:b6:46:da:5e:01:27:d4:b7:0a:b0:47:4d:62:4c:23:13:bf:
33:82:e7:49:9d:02:b2:2b:7f:ef:31:53:2e:55:04:25:4c:3b:
66:39:42:06:9a:e8:c8:cc:80:27:61:ad:00:26:fc:0c:be:0e:
b6:52:4d:bf:bc:84:28:8b:4d:82:3c:7b:a9:7a:10:78:a5:92:
79:c6:e9:b6:4d:28:d4:34:29:bb:cb:bf:07:7b:b6:1d:6d:09:
57:50:8b:87:69:75:f1:ef:b1:97:44:3f:37:94:57:bb:c6:50:
53:82:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:22 2025 by rpki-client