Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3b7c99a-34a0-37fc-aca6-3290c6512451.roa
File: f3b7c99a-34a0-37fc-aca6-3290c6512451.roa (raw, json)
Hash identifier: PmjQOu5JQHrVy7nzbycW+hjRmkBukyGT9gys+T3U7KU=
Subject key identifier: 47:74:C2:50:55:12:01:38:F8:E4:0B:71:5D:FE:3B:7B:0F:93:AD:87
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842432F26FBA3B3B3E120FEC700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3b7c99a-34a0-37fc-aca6-3290c6512451.roa
Signing time: Sun 18 Jun 2023 16:59:26 +0000
ROA not before: Sun 18 Jun 2023 16:59:26 +0000
ROA not after: Sat 16 Sep 2023 16:59:26 +0000
asID: 834
IP address blocks: 108.165.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:43:2f:26:fb:a3:b3:b3:e1:20:fe:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 18 16:59:26 2023 GMT
Not After : Sep 16 16:59:26 2023 GMT
Subject: CN=62330f03-22bb-4fb0-a818-3fff861cecb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:cf:df:18:fa:a9:d4:38:ac:ba:3b:80:ee:
01:36:aa:29:fb:92:d9:0a:a9:07:d4:4b:a1:51:7b:
03:9f:a6:b5:54:16:09:48:30:17:6c:79:ff:96:13:
bb:2d:08:e1:f6:dc:eb:e6:e4:8b:11:f1:e7:4d:94:
cd:00:1e:f6:5c:65:36:0e:09:70:81:23:e4:3d:4d:
93:79:4c:03:9b:ff:34:6e:7c:ec:80:62:d5:dd:b0:
1a:28:f9:d8:5e:de:48:a5:61:e9:07:6e:5d:68:6d:
aa:49:94:50:ce:3c:ec:87:01:1a:6b:b0:f9:fc:82:
0d:cf:d1:71:0e:f0:9a:cf:9d:3f:2d:c9:3f:54:d8:
36:16:d5:2e:75:01:6e:b5:87:12:51:5f:f4:f7:d4:
6c:f6:c7:52:be:9a:a2:a2:2b:95:35:f8:04:85:a1:
1b:c1:58:6e:9f:e4:fb:f4:b7:59:43:75:63:ac:50:
77:37:48:f5:bc:57:7b:23:87:6b:8d:e8:27:3e:89:
e1:32:37:0a:f6:4e:08:ab:0e:e4:4f:74:7f:2b:59:
b4:74:6b:20:3b:15:1a:8a:a8:ab:bc:ac:1e:1d:4a:
f7:fa:cd:d5:67:36:3c:b6:cf:1b:ae:e5:24:d3:36:
d2:10:e4:9a:6f:74:51:a5:e4:f5:de:40:da:c1:d2:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:C2:50:55:12:01:38:F8:E4:0B:71:5D:FE:3B:7B:0F:93:AD:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3b7c99a-34a0-37fc-aca6-3290c6512451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:59:12:0c:f7:49:dd:47:1e:c0:b0:50:9d:40:42:83:cf:e7:
e1:f9:30:97:cf:2c:32:82:6a:59:92:30:8d:06:f8:0e:e9:e7:
32:60:71:99:47:76:b8:d6:99:0c:9e:52:33:df:a6:60:03:c8:
28:a3:1e:5e:d2:43:2e:41:56:b8:90:43:52:68:43:e4:b5:11:
86:d1:3d:0a:a0:1d:c9:47:f5:b5:90:94:ff:46:4c:4c:a6:0a:
0a:76:06:5a:d4:ee:7a:8a:26:1c:94:ae:19:eb:99:06:97:e9:
74:53:e2:b4:8f:85:76:28:93:07:be:c0:a4:2d:d5:25:81:18:
35:fb:25:10:eb:d5:57:b5:d7:bb:9f:a2:78:7c:23:d7:34:83:
7d:42:4b:c3:f1:f1:ba:d9:48:f7:1d:05:a8:ae:43:a3:9d:e3:
29:41:3a:9d:94:8e:0c:e5:48:db:73:6d:e7:42:a8:1a:39:c4:
16:69:68:e2:46:40:e0:4f:e5:e0:e1:30:0c:83:a7:a0:83:ca:
da:ec:80:8f:d7:d2:7e:5e:83:55:22:6a:fc:75:27:47:df:32:
f3:ba:f0:6f:cf:da:2c:6b:fd:ad:83:6d:88:de:4b:8a:11:74:
7c:8e:b2:90:b4:6b:17:04:7d:d9:51:e3:77:ef:5a:5a:db:9a:
26:ef:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:49 2025 by rpki-client