Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d43235b-266a-35c0-9996-ad3f3f17398c.roa
File: 0d43235b-266a-35c0-9996-ad3f3f17398c.roa (raw, json)
Hash identifier: 0M1NqEzKAekCvVCzhtzJZeAwTcNFmaa/UG++fqPih3I=
Subject key identifier: E5:47:93:FB:6D:DA:6F:40:D5:24:14:1F:35:AF:CA:E2:62:68:D3:D5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D1BC76AD91800407DA33B660
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d43235b-266a-35c0-9996-ad3f3f17398c.roa
Signing time: Sat 08 Feb 2025 23:10:34 +0000
ROA not before: Sat 08 Feb 2025 23:10:34 +0000
ROA not after: Fri 09 May 2025 22:10:34 +0000
asID: 834
IP address blocks: 108.165.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d1:bc:76:ad:91:80:04:07:da:33:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 8 23:10:34 2025 GMT
Not After : May 9 22:10:34 2025 GMT
Subject: CN=f78a6331-f74c-41fe-8c0c-ef16abb7ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:44:65:f7:fa:a6:d3:c7:37:d2:81:6e:34:
1c:36:8e:23:63:79:92:ba:7d:d9:05:b7:7c:a3:2a:
22:67:5b:8e:81:5e:e6:db:15:6e:12:f8:f7:d1:95:
26:c8:48:31:77:2c:48:29:39:1f:d8:c1:00:ba:a7:
a5:87:24:29:4c:53:de:8d:98:00:97:18:b9:68:e5:
a1:10:dc:e1:bd:c9:2e:8f:51:f6:08:80:28:2e:e0:
01:7d:d5:07:5e:35:35:f5:4a:df:07:95:c1:1c:a6:
d6:98:99:7f:97:95:37:64:a4:86:cb:83:9c:85:63:
17:94:09:4e:70:1d:78:14:40:03:12:06:b9:37:c9:
9d:39:47:82:1c:ee:45:e9:f9:9a:2c:17:a9:1f:62:
5d:bf:e6:bc:25:e9:7e:d2:a7:91:4c:09:9e:8f:09:
9d:72:8b:ff:c8:a0:63:a0:46:28:c6:ef:b9:dc:b7:
4d:f6:d9:af:a3:d7:cb:15:fb:63:d9:e5:12:68:9a:
e5:f4:30:0a:49:52:8c:45:0d:71:2e:75:ff:3b:6c:
e3:0a:54:14:1a:ad:14:72:fc:c6:77:99:2d:35:3e:
61:9b:2d:a6:20:c7:50:b8:74:59:d6:f3:2f:8c:b0:
d6:9a:46:09:54:87:1c:03:0a:7c:ed:05:15:23:7d:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:93:FB:6D:DA:6F:40:D5:24:14:1F:35:AF:CA:E2:62:68:D3:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0d43235b-266a-35c0-9996-ad3f3f17398c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:63:b0:79:9e:7a:ab:28:f4:f9:fb:98:37:6f:2d:6c:48:06:
4c:d3:ff:ba:53:51:93:4a:44:1a:91:f2:de:20:11:e1:af:a5:
2b:3f:55:2f:0e:4d:36:9f:23:1c:a2:dc:cd:7c:45:c9:04:aa:
0c:09:d5:0f:75:3a:76:59:fe:6c:28:6f:ae:87:4e:a4:09:8c:
bb:b7:03:d3:70:6b:04:25:c3:26:e4:8e:05:ce:02:2f:40:46:
05:e9:19:63:bc:99:81:43:f7:38:f4:9a:c3:ae:dc:33:de:27:
f8:a2:ab:fe:48:2a:ae:78:7e:66:b1:62:82:29:6c:09:79:52:
55:d0:76:c2:89:52:f8:b1:2a:e1:b8:e6:3d:b1:ac:ca:32:5e:
26:60:6e:ae:52:8c:1e:53:1c:6e:a2:07:bb:72:78:3d:76:8b:
a1:93:36:1a:ae:ea:10:77:3d:70:2b:4d:5c:8c:dc:06:1b:5e:
ac:15:e9:0c:93:f8:77:3d:a5:fb:64:a2:82:2a:de:ae:57:08:
59:91:21:28:24:46:35:8d:2c:b2:6a:21:45:89:2a:18:49:ff:
d9:9d:c9:74:76:ab:23:3e:d7:df:3e:56:54:06:64:29:3c:cf:
d6:7b:6a:46:9e:27:15:a0:cc:76:d8:2c:48:7f:68:cf:33:7a:
0e:4a:4d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:05:40 2025 by rpki-client