Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fddb8e40-16a7-3b3d-a155-e1907e467c9e.roa
File: fddb8e40-16a7-3b3d-a155-e1907e467c9e.roa (raw, json)
Hash identifier: wmyubrK71IAQuoCYbOyptAA4fTgT1wpnW/bfucmmjYM=
Subject key identifier: 35:20:B9:F8:3C:FD:9B:79:FB:14:08:18:48:73:59:FF:B7:25:F2:ED
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E447074FA70FD19CA8908300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fddb8e40-16a7-3b3d-a155-e1907e467c9e.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 12 Aug 2023 11:16:36 +0000
asID: 211585
IP address blocks: 108.165.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:07:4f:a7:0f:d1:9c:a8:90:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 12 11:16:36 2023 GMT
Subject: CN=a8848ee7-7381-4c99-94b2-d78319b74a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:59:cf:ba:c4:01:15:1e:5a:24:35:c1:f1:
ba:d7:c6:89:d4:0f:dd:a6:1a:00:db:a7:69:66:a2:
fa:63:de:e2:55:38:8e:ec:de:14:a4:56:40:ca:bd:
eb:d7:fb:3e:b7:50:64:30:aa:80:06:0f:e6:a3:42:
f7:3a:57:a0:83:54:4a:da:0b:78:a8:c9:12:f9:e2:
50:33:ff:9e:e3:9d:ea:b5:aa:3a:31:18:f4:3f:37:
83:e1:01:a2:49:3f:11:f3:61:a1:4b:08:b5:ab:8d:
6f:59:48:f1:d2:99:c5:f9:5d:1f:5f:1d:70:03:c0:
85:b5:b9:26:89:e7:ba:6f:5a:af:85:9f:97:87:e4:
79:50:d2:11:fd:74:f2:90:c5:8c:60:24:e0:63:1d:
06:da:48:5a:e2:bc:e1:ed:b5:48:44:b8:f3:10:b7:
10:87:1c:6b:1b:38:46:d8:9c:a2:1a:e5:9b:90:0a:
17:a0:cd:75:55:d9:58:8a:43:bf:d2:69:37:f5:cc:
0e:d5:ea:57:89:62:66:20:71:75:06:06:f5:b9:e5:
c3:74:46:f1:aa:55:0d:05:81:d0:de:cc:f2:62:7f:
d8:46:0d:b6:6c:9f:a5:40:ae:e3:a4:51:10:99:76:
a6:43:e6:1b:aa:20:e7:b4:c3:91:8f:31:75:f5:10:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:B9:F8:3C:FD:9B:79:FB:14:08:18:48:73:59:FF:B7:25:F2:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fddb8e40-16a7-3b3d-a155-e1907e467c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:38:46:de:28:b2:62:4f:41:9d:71:2e:5e:65:ef:6a:1c:00:
c0:67:98:28:38:d9:a5:2f:7a:9d:ae:b1:32:57:a1:e0:3e:04:
16:2a:1f:52:b1:bf:23:33:f3:ce:2f:2e:35:34:9c:e0:8b:dd:
ff:f1:fa:2c:d1:6a:57:b1:65:4e:ae:7d:8c:1a:60:d8:85:4d:
64:c7:c8:00:02:be:d9:00:1a:fb:8b:93:f7:84:ba:37:f2:7c:
d5:39:73:4f:a0:d5:61:bb:fb:cb:32:e9:bd:8f:b4:57:c8:a6:
61:40:8e:fd:04:bd:f9:05:04:3a:44:eb:35:b6:10:b6:c1:00:
7a:7a:f8:30:f3:5d:63:f8:e0:95:63:d6:b0:7e:d2:52:6e:0b:
79:cc:9f:ae:c0:b8:9a:ac:10:1b:d8:87:76:43:5b:d9:30:c7:
c6:7b:26:09:1f:86:25:73:6e:7f:a0:b6:a1:cc:6b:28:c8:db:
ba:eb:d6:07:3c:f5:2f:22:c4:20:6d:18:a5:8c:f7:16:40:6c:
15:bf:63:1b:4f:fc:98:24:ff:55:45:73:4a:eb:d7:9e:94:85:
97:2c:3a:ac:48:41:d6:2f:3f:0e:18:fa:a0:11:24:30:19:5b:
57:d0:95:6c:4a:9f:48:d4:cf:c3:82:25:f0:41:46:43:be:34:
93:52:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:38 2025 by rpki-client