Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebea0680-5b70-351d-8280-06acc7cc7aad.roa
File: ebea0680-5b70-351d-8280-06acc7cc7aad.roa (raw, json)
Hash identifier: Oi5BBZhRYHDoGz4t3oR1O00O0hErbOOvOoFrWDHhB20=
Subject key identifier: 05:1E:16:01:7F:33:D1:9B:E2:49:90:3E:77:CD:05:20:F9:21:6B:55
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843E5FFEE01D1EAD75ECA197780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebea0680-5b70-351d-8280-06acc7cc7aad.roa
Signing time: Wed 15 Nov 2023 17:27:59 +0000
ROA not before: Wed 15 Nov 2023 17:27:59 +0000
ROA not after: Tue 13 Feb 2024 17:27:59 +0000
asID: 834
IP address blocks: 108.165.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e5:ff:ee:01:d1:ea:d7:5e:ca:19:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 15 17:27:59 2023 GMT
Not After : Feb 13 17:27:59 2024 GMT
Subject: CN=577609fd-9e5e-4a0e-92e9-cdb650c62337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:f0:75:ef:bd:de:4b:79:50:6d:8b:12:fc:
8b:d0:cc:35:05:32:53:ed:16:a4:e0:7d:95:c6:62:
a6:4e:df:f9:6a:40:46:c8:2d:99:ee:a7:5e:ba:d1:
c9:79:48:9a:6e:d7:5d:7d:cd:c3:b4:58:2e:76:c5:
20:d3:bd:b0:1f:28:df:9c:f6:b1:02:d2:fa:55:de:
9c:cb:57:05:68:72:76:49:82:06:7f:df:5d:cb:95:
17:c1:a5:61:e5:f1:ea:a7:51:76:08:d2:d4:fa:23:
d4:51:14:00:53:4f:64:be:d1:0f:e1:dd:9a:f7:d5:
f2:24:03:c0:d7:85:99:ef:ce:17:ed:8a:f5:34:06:
96:67:28:0e:74:e2:d2:c1:56:a6:a3:37:2e:71:ef:
e6:9a:21:13:1c:e5:ba:78:7c:d8:b5:50:0e:03:e0:
80:cb:19:dc:20:21:41:ea:64:1c:35:fe:5f:d3:1a:
3d:84:7e:60:ba:14:da:54:02:16:8e:d6:32:32:dd:
37:71:c5:0f:ba:15:71:70:87:20:31:60:27:31:f3:
15:08:12:0f:c8:e3:b7:6e:16:c4:e7:f2:f9:f5:39:
fc:d7:aa:df:c8:03:06:4e:6a:eb:8c:6a:3d:00:f1:
fe:1d:99:2f:92:fc:0c:99:0b:11:be:37:58:34:90:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:16:01:7F:33:D1:9B:E2:49:90:3E:77:CD:05:20:F9:21:6B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebea0680-5b70-351d-8280-06acc7cc7aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:72:ad:d6:13:b8:4d:23:f5:aa:8f:fa:bb:ab:5b:cd:1b:a1:
ed:03:b4:16:8c:ef:5f:da:75:3f:a1:0d:b3:4a:0b:c1:5b:ba:
75:cb:1d:bb:92:51:15:e8:38:e4:57:51:0d:c8:9b:1b:b8:eb:
2a:09:f8:ae:60:03:26:c5:6c:36:aa:da:60:42:c2:61:5f:d3:
01:18:34:92:e6:0e:e8:7e:ae:82:d2:6a:89:04:40:64:c1:10:
f4:40:bd:91:a2:c8:f7:a3:29:3c:be:2c:cc:db:01:af:c7:24:
7a:0e:ff:76:32:48:69:d1:4a:f4:33:7e:c8:08:20:37:86:f3:
c9:8a:c4:c2:9d:8f:24:12:8f:2b:c6:67:8b:a9:0c:41:ea:2f:
24:ac:e8:a3:11:70:cc:18:41:92:a4:26:b6:e4:ba:58:47:d1:
92:4f:e7:22:1a:62:59:2a:cf:4e:c8:57:9a:59:40:6b:51:a4:
06:c2:b9:67:90:a9:83:fe:1a:6b:e4:fe:ed:3b:c9:e7:10:66:
b5:48:26:c5:21:c9:5a:e0:92:a4:5c:49:67:ff:cb:36:83:f7:
65:51:49:0e:85:f4:cf:f9:03:08:d6:05:1f:bf:06:e9:91:ac:
bc:a2:88:10:89:df:53:76:de:a3:29:98:08:86:6d:8b:a3:3c:
52:7e:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:44 2025 by rpki-client