Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e845d61f-efe4-375f-adb0-8e870e91c077.roa
File: e845d61f-efe4-375f-adb0-8e870e91c077.roa (raw, json)
Hash identifier: ct/jUFN/E37HXGD9p+yZL9igYokbXIax8vN/cD8DLb4=
Subject key identifier: DD:FE:0B:B3:B9:0F:90:5E:18:DE:D7:26:8E:1E:22:40:C2:61:D1:D1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843145D8A0FFE13FBB92BB31940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e845d61f-efe4-375f-adb0-8e870e91c077.roa
Signing time: Fri 01 Sep 2023 15:16:50 +0000
ROA not before: Fri 01 Sep 2023 15:16:50 +0000
ROA not after: Thu 30 Nov 2023 16:16:50 +0000
asID: 834
IP address blocks: 108.165.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:14:5d:8a:0f:fe:13:fb:b9:2b:b3:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 1 15:16:50 2023 GMT
Not After : Nov 30 16:16:50 2023 GMT
Subject: CN=ef257068-7a9f-47ca-9b9d-a880f30a52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:27:41:46:1b:11:c1:f7:02:f0:08:49:be:
b1:d2:57:bf:07:d4:8e:f1:77:cb:b2:ea:38:2e:88:
67:b5:b9:61:aa:4a:02:f1:64:03:3e:b3:ab:87:f0:
ed:20:8f:4c:46:12:92:6d:3a:84:ca:ea:52:33:4d:
7f:78:1f:b0:a7:eb:ba:b1:cb:19:8f:8c:49:e8:2c:
9f:20:c9:98:24:60:45:32:d6:6f:43:91:03:60:90:
b6:31:c3:65:30:af:73:07:85:e9:21:30:ef:fd:50:
ee:8a:d6:6c:9b:f4:65:3c:97:cd:57:b9:d2:89:8e:
0e:ea:59:d6:b8:5d:ef:a6:4d:fc:d4:57:04:b5:25:
e9:42:ed:f9:9f:2a:c9:2e:ea:14:7c:2e:81:49:ab:
6f:31:5a:3a:d9:98:01:1b:10:93:85:91:c4:19:50:
b9:94:e0:81:de:ed:41:ee:b0:12:e8:bb:b3:46:08:
8d:eb:a1:1d:e5:f6:b9:41:3d:c7:48:f2:c8:eb:4d:
ec:e8:87:f1:8e:48:45:56:20:02:76:05:08:31:c0:
de:2f:5b:8f:d8:0a:08:58:89:a0:c5:d8:33:63:dc:
3d:b6:12:30:c9:f4:c1:ee:cb:a2:dc:c1:21:b4:bd:
94:0c:69:36:68:a3:52:fb:39:e9:a1:b9:a8:b4:b1:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FE:0B:B3:B9:0F:90:5E:18:DE:D7:26:8E:1E:22:40:C2:61:D1:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e845d61f-efe4-375f-adb0-8e870e91c077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:53:69:9e:9e:ee:07:6d:84:2b:b1:71:1a:7f:73:0d:b1:a5:
9e:2e:71:77:cf:c5:06:da:3e:4c:da:5f:43:d7:7c:40:66:a6:
e3:c5:3b:6c:75:ba:b9:bd:5b:a9:67:d9:94:df:33:0d:6d:50:
09:2c:b1:28:bc:41:82:77:8d:34:ad:85:15:04:82:eb:f2:9d:
7c:be:4b:a0:5e:13:80:10:19:d0:ff:d4:7c:ff:e6:32:42:58:
a4:ca:c4:fd:39:3e:8a:b9:3b:9c:02:84:6d:10:67:ca:d0:7d:
b9:5d:9b:cb:37:c4:87:39:bb:2d:4a:d6:a2:d4:d1:b6:e7:6b:
c1:d4:c5:e8:d6:a4:0b:44:77:49:dc:21:51:f9:58:66:92:e4:
b5:b4:1d:3c:82:e5:94:e6:8a:ea:76:80:cc:2f:5e:7c:4e:9a:
6a:50:1c:90:25:fb:bd:66:a1:59:d1:37:a1:49:a6:46:75:56:
3e:40:bf:a8:c5:89:f6:12:6c:4a:9c:90:46:55:0a:15:17:d7:
8c:97:0b:f0:4b:33:93:85:c1:29:ce:1d:8b:9c:69:5f:d2:69:
ec:56:58:aa:c7:c0:a9:70:a5:03:1e:5b:21:eb:5d:85:fd:d7:
5c:c9:6c:b4:da:d6:49:67:04:05:1d:5d:e0:1f:29:40:0e:ce:
19:15:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:06:17 2025 by rpki-client