Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fbfdeb99-1d27-376d-8401-f1538941a394.roa
File: fbfdeb99-1d27-376d-8401-f1538941a394.roa (raw, json)
Hash identifier: 7lsEyWNJaVHuiF6k9mcK3nHljI0p8rWe4O4W1pt+bgE=
Subject key identifier: 46:B4:3C:39:6E:1F:BE:E2:1B:A8:49:A2:12:67:76:0C:AD:A2:1D:56
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858432BD4A2BCA0355B8158A06490
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fbfdeb99-1d27-376d-8401-f1538941a394.roa
Signing time: Sun 10 Sep 2023 01:00:22 +0000
ROA not before: Sun 10 Sep 2023 01:00:22 +0000
ROA not after: Sat 09 Dec 2023 02:00:22 +0000
asID: 1239
IP address blocks: 108.165.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2b:d4:a2:bc:a0:35:5b:81:58:a0:64:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 10 01:00:22 2023 GMT
Not After : Dec 9 02:00:22 2023 GMT
Subject: CN=de6dee96-7697-4c1b-a6af-883fa2d9d338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:75:c1:6d:28:6c:23:5b:7b:53:3f:fc:fb:
a8:87:a0:83:02:66:2c:12:25:81:b1:45:e1:47:34:
f9:5e:fe:01:8c:20:66:b6:fc:12:e2:9c:fd:0a:21:
c1:12:f0:7d:8d:8a:04:76:33:f7:6a:62:cf:c0:18:
b4:ed:4f:3f:dc:70:5f:b5:09:23:6d:0f:f5:ad:bc:
ff:53:42:7f:5a:3e:f8:55:ee:a8:c1:4a:4f:32:aa:
f0:eb:c7:23:dc:ce:5e:64:db:3a:8e:cd:a4:ed:fa:
d1:54:a7:74:b4:8a:27:c8:16:e9:82:ae:7b:5c:f2:
8f:e7:22:c8:e4:5a:bc:d2:1d:c3:7d:d9:14:83:0f:
1a:ff:a1:f0:94:2f:a0:73:94:58:c8:d8:90:98:9e:
d6:d0:90:9a:c9:93:07:b6:6b:1f:93:06:14:2a:29:
b9:3b:77:fd:c3:fa:38:46:0b:3d:61:d1:19:45:f3:
d0:b9:16:53:06:9d:a8:ab:79:ce:b3:9d:cb:c0:67:
46:86:51:05:f2:5a:7b:25:30:48:e0:8c:2d:71:49:
17:10:5e:6d:df:87:c5:b6:78:0f:98:bd:ba:96:87:
1e:1c:89:ad:9d:93:e3:5c:2b:45:17:42:15:07:b7:
b7:5b:5c:47:cd:2f:49:9f:02:e7:d1:82:90:eb:3b:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:3C:39:6E:1F:BE:E2:1B:A8:49:A2:12:67:76:0C:AD:A2:1D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fbfdeb99-1d27-376d-8401-f1538941a394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:68:e9:e2:0c:6e:50:6f:74:55:d5:08:81:a9:d5:a6:dc:a5:
80:29:19:3d:7f:65:0b:51:27:49:16:8c:99:35:67:0c:c6:b7:
f1:eb:bd:47:bc:d0:42:ee:d2:36:29:7d:85:ab:a9:1d:de:86:
8a:6f:6b:8b:d2:05:bc:77:bf:05:5d:eb:20:6f:6d:b6:c1:d4:
c4:a2:11:1d:6a:75:42:79:6c:4e:bf:72:2f:c7:29:da:80:69:
33:d6:98:f8:75:5b:4b:b1:0a:30:55:32:a0:e5:65:3c:4f:08:
de:19:33:23:18:e4:71:60:ca:a3:b8:e0:0c:b2:0c:8b:e5:7a:
3b:78:09:2b:db:af:33:34:3d:c8:d9:f9:29:f1:7f:36:fc:a1:
4a:78:06:9b:fd:49:4d:27:3e:23:63:5d:6b:9c:5e:75:be:52:
b4:aa:56:42:f6:dc:bd:4f:9a:54:e0:d3:7a:a8:76:95:1c:de:
a8:e5:3a:0c:08:8e:a7:b0:06:b4:f7:18:1a:77:8f:17:5c:14:
47:8b:c0:9a:14:d4:a4:59:4c:cb:fb:89:7c:06:5e:a1:d5:22:
4d:33:73:0b:32:08:02:e3:ea:f4:5c:02:7a:a8:f5:fa:ea:7b:
27:93:7e:1d:37:7b:ce:12:5c:c4:9d:02:ad:04:82:1b:57:36:
ee:05:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:27:44 2025 by rpki-client