Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a3a162f-3d51-3f9a-a4f6-6fb9b81a7c3c.roa
File: 1a3a162f-3d51-3f9a-a4f6-6fb9b81a7c3c.roa (raw, json)
Hash identifier: YiScIQ14J32zoR8IId6gUDerLCmNM2lOqR1fz9d0QbY=
Subject key identifier: 31:01:12:91:1E:79:A9:7D:0E:8B:C0:6D:1B:2C:37:B3:E1:8F:29:CD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C5D31FFCBD05BFDFAC5C4980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a3a162f-3d51-3f9a-a4f6-6fb9b81a7c3c.roa
Signing time: Tue 04 Feb 2025 16:46:31 +0000
ROA not before: Tue 04 Feb 2025 16:46:31 +0000
ROA not after: Mon 05 May 2025 15:46:31 +0000
asID: 834
IP address blocks: 108.165.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:d3:1f:fc:bd:05:bf:df:ac:5c:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 16:46:31 2025 GMT
Not After : May 5 15:46:31 2025 GMT
Subject: CN=de699924-591a-418f-a7c5-46698a1e7c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:c5:05:6e:df:43:0f:d9:21:d0:59:1b:dd:
ca:ba:0d:1b:48:99:94:55:0c:77:0a:96:54:69:a6:
ff:93:32:69:54:ef:dc:c8:36:58:dd:c6:d5:d2:8d:
a6:ba:b3:35:62:8b:28:ec:9b:da:84:c7:e2:66:a1:
65:10:f8:fd:09:e5:80:58:b0:bb:00:b5:af:28:6b:
fe:af:4b:04:2b:9c:fa:4c:36:6c:5e:f6:71:aa:df:
33:9d:4d:9a:18:81:5f:a3:21:dc:d1:1f:b4:04:c1:
28:e6:2c:6e:73:ba:22:57:4b:59:ab:7d:88:f1:4b:
28:d2:88:81:71:ae:a8:9f:09:2d:79:10:b9:ca:1d:
d2:f6:c2:ce:3f:56:67:7e:b7:3e:07:69:ac:82:e9:
91:c4:70:d6:b5:a5:0a:09:9f:8c:0b:49:cc:3e:74:
09:f7:10:81:60:72:2f:47:aa:9c:c8:be:bf:ee:d4:
5d:ae:31:c4:89:8a:dc:d1:f0:bf:2b:06:8e:09:b8:
cb:01:18:8a:ad:f6:d8:4a:30:33:d7:3c:3b:be:63:
aa:32:74:68:5b:94:25:35:45:a9:3a:dd:a4:4d:13:
e9:51:1f:92:13:8f:55:18:6e:25:61:a7:81:3d:72:
69:b4:9d:77:e5:6a:23:b4:6d:76:4a:c3:98:1c:d9:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:12:91:1E:79:A9:7D:0E:8B:C0:6D:1B:2C:37:B3:E1:8F:29:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a3a162f-3d51-3f9a-a4f6-6fb9b81a7c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:46:1c:d3:94:71:ae:a6:36:b4:a4:e8:80:7a:7c:00:6d:d2:
de:94:33:b1:aa:74:9d:9d:ab:48:f7:d2:5a:8e:27:98:a1:6d:
bf:7f:28:eb:17:9a:ba:98:56:bf:d3:8e:7e:02:76:d7:06:bc:
ff:3c:56:2b:4e:d5:2c:92:4d:b8:f3:86:ac:9c:ad:aa:a0:b2:
fb:77:aa:21:8e:11:ed:25:1c:da:5c:56:dc:f9:be:32:76:2a:
ba:0b:84:c1:a9:06:df:c9:d1:2d:10:db:ec:cf:2b:f6:fe:b3:
10:d8:db:b9:48:2f:4a:40:41:b8:56:c8:0c:58:f1:c7:b4:d9:
f1:ff:b8:d3:a7:95:1a:24:89:e0:9a:1d:3d:4d:66:47:e4:20:
5b:3a:3b:4f:6c:d0:79:e7:44:57:4c:bc:74:53:dc:79:b8:bb:
89:d2:c1:97:99:90:89:b0:2e:45:f6:b1:58:5a:59:d8:3a:0d:
9d:10:e7:6b:03:44:8d:59:72:d2:a3:7d:f8:df:e0:25:de:bc:
c3:5d:5b:c2:81:3c:6a:30:d5:67:65:3c:c4:57:1b:09:14:49:
bb:58:10:1f:f5:fc:38:fd:1d:c3:b3:f6:8c:aa:e3:a0:45:94:
a8:ce:c3:9c:6d:6f:28:d6:50:10:e9:65:a9:11:e8:6b:c5:7d:
5c:6d:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:33 2025 by rpki-client