Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33ca08c-2f7d-3ff6-b158-8fcac2faeba7.roa
File: f33ca08c-2f7d-3ff6-b158-8fcac2faeba7.roa (raw, json)
Hash identifier: I+iH0AKoRP1Av/BFcePTgfy/1H4C54JKgbjYFMEa+HY=
Subject key identifier: B4:0B:DB:70:6E:B8:2A:F3:2D:41:45:DF:BD:21:18:02:26:85:EE:A9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584357ABEB0E4C1485079DC4AF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33ca08c-2f7d-3ff6-b158-8fcac2faeba7.roa
Signing time: Mon 25 Sep 2023 17:53:55 +0000
ROA not before: Mon 25 Sep 2023 17:53:55 +0000
ROA not after: Sun 24 Dec 2023 18:53:55 +0000
asID: 834
IP address blocks: 108.165.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:57:ab:eb:0e:4c:14:85:07:9d:c4:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 25 17:53:55 2023 GMT
Not After : Dec 24 18:53:55 2023 GMT
Subject: CN=506f0fbe-85f3-4e05-afa2-3cd9472984e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:6b:26:45:02:c8:6f:9a:6a:2d:e4:42:51:
44:1a:77:88:39:bd:41:93:c9:bd:23:64:86:26:53:
e7:b4:21:4a:0b:95:c6:42:a8:7c:4b:41:de:4b:70:
86:b9:b5:fa:ec:23:65:3f:b6:43:ec:1b:06:1e:17:
5f:22:dd:aa:1c:2b:c4:26:19:44:97:17:11:56:37:
ff:47:a5:6d:1c:e4:6e:cc:77:18:88:89:1a:89:9e:
fa:97:11:1a:ad:fa:a8:80:8b:4c:a7:64:2d:16:c1:
4d:74:1d:82:12:d1:60:53:54:db:6f:62:4f:f9:31:
b6:d9:e1:ca:a2:a4:15:d0:6a:74:48:8c:10:6b:f1:
b3:e6:92:bb:b2:5f:93:c5:c9:9c:17:f9:7c:9a:d7:
4e:2f:3c:fe:96:bf:6d:5c:9d:fd:25:c6:cd:8a:8e:
63:c1:c0:a0:d2:93:f7:de:22:b8:ae:72:93:0c:4a:
6c:fd:ef:85:de:6a:d3:91:b8:0a:e7:44:4f:34:b8:
49:93:3f:ab:81:45:9c:44:38:2f:68:17:c4:5f:1b:
0d:c9:ef:54:cf:97:52:38:95:cc:ff:ab:1b:21:64:
cf:88:ca:88:e5:ad:78:c9:6e:82:0a:76:3c:32:f6:
33:21:02:71:ea:97:d0:d0:28:25:ca:17:39:4c:17:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:DB:70:6E:B8:2A:F3:2D:41:45:DF:BD:21:18:02:26:85:EE:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f33ca08c-2f7d-3ff6-b158-8fcac2faeba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:89:a4:04:30:c0:1d:c3:1f:98:e7:5b:71:27:70:4a:b5:2a:
9b:44:f7:5e:a6:96:bf:b2:c0:2d:2c:f7:e5:c0:03:02:73:b0:
f8:67:21:c5:32:4f:b1:05:ca:45:e3:ff:84:92:a9:54:9e:61:
7f:5f:8e:3b:17:30:e7:6e:c0:2c:9a:15:d7:b5:02:da:c1:78:
99:cf:e1:dd:59:5f:d0:dc:fd:9c:dc:0d:d5:c4:38:6e:dd:e2:
2d:5d:24:18:45:10:4e:00:18:c6:11:1c:da:36:95:a4:13:80:
dc:07:6d:87:5f:1b:af:b9:fa:15:8b:d8:40:b2:cc:c1:80:4c:
fd:b3:de:51:1d:67:2b:bd:ea:13:72:02:80:ae:0c:35:3e:b0:
72:1d:03:7c:74:e4:d1:5d:ef:8d:b2:8d:c5:f1:15:af:93:39:
5e:46:9c:62:94:b9:23:58:b8:6e:44:5d:39:12:ac:77:af:58:
41:81:11:08:cc:f4:ca:b1:8c:c5:8c:31:f4:53:9b:1f:6b:51:
fa:0b:c1:da:2b:04:b0:ce:9e:69:ac:b8:24:2a:a1:4f:ed:4f:
87:a7:be:3f:8e:c5:48:3b:51:05:a8:e7:b1:53:14:34:18:30:
32:38:e9:0a:ef:4e:24:fb:0d:d3:75:b8:e6:16:f0:e8:59:13:
df:6c:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:52 2025 by rpki-client