Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4b067a0-6d6e-3e28-ae22-572fa03023dd.roa
File: e4b067a0-6d6e-3e28-ae22-572fa03023dd.roa (raw, json)
Hash identifier: GA2tdJmKqHUqstt/7ccMvmF2MbrlgFpmGsz1HyUE0Ls=
Subject key identifier: 40:BE:77:11:4A:1B:77:9B:6F:5D:6E:DE:D7:97:1B:18:55:84:9A:2F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E0C674FFB8B45D661B60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4b067a0-6d6e-3e28-ae22-572fa03023dd.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 05 Aug 2023 07:40:31 +0000
asID: 43260
IP address blocks: 108.165.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e0:c6:74:ff:b8:b4:5d:66:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 5 07:40:31 2023 GMT
Subject: CN=01a14f7e-727a-410b-a44a-f51ccd31fc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:38:d3:7f:17:80:c7:1f:cd:7a:16:26:f9:
68:7b:47:b0:12:1c:92:de:8d:18:26:e6:17:37:22:
47:76:c1:88:99:e6:56:95:e1:21:99:e3:5b:2c:31:
d8:2c:ba:d2:fe:51:cc:98:be:71:31:23:6a:3a:e2:
c5:78:1d:a6:ce:c7:a0:c8:c1:ec:c2:fc:54:71:5f:
a7:12:cc:fc:31:ac:13:eb:f0:0f:f0:9e:b7:2e:bf:
e1:1c:91:94:54:74:f8:53:d7:5a:b5:1a:35:6b:f1:
33:9b:33:c2:6b:f7:22:e9:7c:05:f1:79:44:35:be:
2f:16:1c:70:bc:71:15:cd:10:6c:7a:0c:30:48:2b:
21:75:54:f5:3d:c5:af:ae:8f:fc:61:fe:3e:11:05:
ac:d5:40:65:37:67:fe:a7:2b:c3:91:90:9f:9e:82:
7f:6c:05:51:3c:f5:85:30:c3:55:44:fd:f0:8e:f8:
7d:a9:5c:b0:5a:a3:d2:77:a8:e9:d0:fc:a0:c3:1d:
6d:52:8b:d8:67:e6:c1:0d:c8:f7:05:20:c6:dc:1b:
13:ba:26:5a:0e:ac:3b:d4:22:e8:79:44:e6:36:ed:
6a:f2:53:2a:46:a0:f0:66:7d:f6:07:18:c0:7e:c4:
02:2f:01:c9:8b:be:9d:5e:63:6a:4c:be:88:82:85:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BE:77:11:4A:1B:77:9B:6F:5D:6E:DE:D7:97:1B:18:55:84:9A:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e4b067a0-6d6e-3e28-ae22-572fa03023dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:50:77:f4:66:1c:53:a4:56:fc:5e:fa:0c:65:a4:35:b6:fe:
14:14:1c:9d:5b:a4:99:56:81:76:f8:6a:d3:99:d4:bf:87:aa:
a4:0c:9e:ed:89:a8:b7:50:7f:56:df:54:63:a2:82:29:16:f0:
07:ed:87:d2:2e:e4:19:0e:21:00:22:8e:50:1a:8d:23:34:ad:
44:03:14:11:4d:9b:7e:c8:10:2b:b9:88:3a:80:a3:3a:b5:94:
f2:89:46:4c:6b:d4:77:25:56:83:8b:5b:8f:1f:f2:59:44:29:
a8:6b:51:4d:a1:e6:d6:42:fd:46:df:a3:2f:dc:9d:18:50:3c:
d7:1f:ed:3c:bf:96:d0:82:05:62:d3:d5:3b:23:03:73:79:4b:
48:a8:44:25:64:1e:6c:9b:98:62:86:fc:f8:5c:3f:09:64:97:
8a:79:ed:df:13:97:1e:13:1a:33:e1:cc:92:dc:90:06:25:a7:
36:51:84:47:e0:c5:8f:dc:53:54:26:c8:5a:fa:9b:eb:af:df:
8b:97:94:cc:43:e7:c6:ad:4e:79:83:50:21:04:73:6c:9e:dd:
4a:53:68:a9:0d:8d:74:16:34:e9:4e:d9:b9:96:15:5e:c8:66:
6e:2a:7d:17:bb:83:ef:3d:84:18:f6:98:c7:47:d2:fe:37:c5:
00:d3:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:35 2025 by rpki-client