Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff58503a-39cf-3639-965d-fbc177d15914.roa
File: ff58503a-39cf-3639-965d-fbc177d15914.roa (raw, json)
Hash identifier: e1JdZuc3tGYak8S9xuHZKTdzM8fRk5Bi0jsdR8svXfI=
Subject key identifier: BE:28:FA:3F:F8:F9:F9:6B:54:40:DE:CB:A4:3C:5D:EB:57:36:84:98
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446EADAE4E50D22605DA100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff58503a-39cf-3639-965d-fbc177d15914.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 12 Aug 2023 01:59:13 +0000
asID: 211585
IP address blocks: 108.165.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:ea:da:e4:e5:0d:22:60:5d:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 12 01:59:13 2023 GMT
Subject: CN=6714d21a-ba84-4e9a-a307-4e48c4520eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:ad:e4:9e:b0:b5:ee:a6:90:3b:10:18:78:
bb:5b:f2:61:16:43:6f:d2:34:e0:86:bb:80:29:3d:
04:da:a6:eb:65:44:53:6c:16:e2:c9:db:fe:57:93:
73:08:99:9b:b1:0d:7e:fc:2e:57:9b:f8:5f:41:78:
37:ec:b8:ee:d4:66:6b:1b:6a:a8:d9:a0:c4:67:c2:
7e:ce:67:10:5a:af:24:91:26:07:5c:bf:b9:99:a4:
f9:ab:86:de:82:76:2b:d8:f0:a6:b3:47:cc:e5:d6:
a6:18:e4:c4:8d:c7:14:8e:b0:5d:72:5e:dd:a2:6d:
1e:51:31:85:d7:86:68:f7:fd:df:ab:9b:eb:28:98:
64:15:8b:54:95:44:10:50:27:09:27:40:7d:75:f4:
d3:f8:fa:99:72:ef:f1:fd:fd:f3:29:c3:f3:3f:5f:
a4:c4:70:49:1d:4f:bc:b7:10:71:2d:95:24:bc:28:
ab:be:e0:78:45:8c:04:c4:d4:bb:a8:41:09:e4:58:
8d:13:13:6a:fd:54:f6:d7:4f:b3:92:cb:b6:ce:2a:
98:cf:63:da:99:07:4e:22:40:29:14:70:62:eb:3a:
37:53:88:98:28:ea:45:9a:93:c0:63:d9:c4:f9:ca:
be:2a:bf:fe:54:c5:05:4e:80:71:ac:f8:7f:4b:53:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:FA:3F:F8:F9:F9:6B:54:40:DE:CB:A4:3C:5D:EB:57:36:84:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff58503a-39cf-3639-965d-fbc177d15914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:dc:41:6b:46:75:21:61:5f:dd:ae:c3:3a:6a:9a:e6:e0:b2:
59:db:d2:09:3c:d7:b6:9c:d2:94:b7:84:00:85:b0:3e:dd:12:
0a:e4:e6:3a:1b:15:c2:68:ae:00:6a:e6:af:01:ee:6e:08:e6:
01:0c:66:ee:00:b9:7a:c8:9e:ab:4b:86:c3:db:bc:c0:78:33:
3d:0e:7d:32:31:9c:3b:2c:f5:6c:87:ad:07:b5:5f:f5:14:bf:
af:51:2e:a2:07:3d:38:68:84:9a:e9:8c:c6:3f:4d:2c:09:97:
fb:89:f0:a1:70:30:8a:40:61:7e:41:68:c9:d8:d2:15:19:15:
e6:2d:18:e9:d9:03:07:df:46:42:67:fd:63:c8:e4:87:3a:fa:
4a:1a:51:dc:b3:36:e3:44:1e:ac:e0:ba:8f:3e:56:be:11:ac:
bc:0b:93:8b:1f:c9:4b:ec:ef:45:68:e0:a6:96:5f:04:0f:28:
cf:fe:76:fc:bb:2a:56:f8:fa:60:41:19:9b:9d:d5:71:49:74:
2a:59:f8:45:ee:be:36:e7:5e:50:d2:29:c3:16:0b:ab:85:fe:
15:ac:68:2e:98:8f:a9:c1:16:3d:19:b6:12:55:3b:47:94:88:
32:6b:6d:1f:d0:2d:f8:83:a7:2c:de:13:88:8c:4a:21:21:57:
53:32:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:37:56 2025 by rpki-client