Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ab9902a-f05c-3814-bfc2-04b3b61c8088.roa
File: 1ab9902a-f05c-3814-bfc2-04b3b61c8088.roa (raw, json)
Hash identifier: CYX0rM4OVljctJzfltNLx0YQ4RSb/HU14TEt04huOt8=
Subject key identifier: B4:04:3F:C4:E9:40:12:BE:88:B9:F9:AE:41:17:D9:14:93:97:C0:48
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843C4BD1D5BEA0CFBB5BEE91040
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ab9902a-f05c-3814-bfc2-04b3b61c8088.roa
Signing time: Fri 03 Nov 2023 19:31:41 +0000
ROA not before: Fri 03 Nov 2023 19:31:41 +0000
ROA not after: Thu 01 Feb 2024 20:31:41 +0000
asID: 212238
IP address blocks: 108.165.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c4:bd:1d:5b:ea:0c:fb:b5:be:e9:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 3 19:31:41 2023 GMT
Not After : Feb 1 20:31:41 2024 GMT
Subject: CN=832db3a5-c174-478a-b40b-b66900fb86ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:ad:b0:ad:a1:14:3f:6e:63:ec:d4:ca:93:
85:3a:03:87:29:a0:b3:42:0d:10:a1:1d:7a:f7:cc:
57:a6:45:aa:00:13:43:8e:7f:f3:f7:4d:56:b9:cd:
a9:e4:bc:1e:51:8a:d2:64:c7:2a:9b:ca:3d:6e:9b:
45:3a:20:46:49:73:c4:96:c3:90:26:64:2b:47:4d:
2d:eb:1c:33:d6:30:9d:92:ba:57:1e:ab:5d:aa:df:
10:20:04:26:a4:5a:20:26:3f:2d:74:75:77:03:3c:
65:78:45:80:43:e4:90:6a:7a:31:75:c9:c5:ca:b3:
b6:bd:30:0e:52:fd:dd:1f:6d:8e:92:8d:27:1d:28:
0a:63:03:1a:31:ae:97:57:eb:8c:81:fe:f8:5b:a2:
17:37:06:32:16:e2:c4:6a:93:2c:d5:11:48:59:3d:
8b:98:e8:37:f3:f3:b7:3c:a9:c3:56:f9:8c:bb:5e:
e1:23:af:22:c4:d1:aa:69:52:8a:fa:93:44:d1:05:
06:89:ce:37:b3:f7:7b:52:15:bd:aa:0a:1e:4d:26:
e2:17:02:c2:36:9d:21:05:c5:be:ba:1b:84:1b:e5:
f8:21:6e:d0:d3:eb:c9:71:68:4b:e8:41:43:94:f8:
5a:04:0a:9f:4f:05:e5:00:94:03:4b:94:08:a6:fd:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:3F:C4:E9:40:12:BE:88:B9:F9:AE:41:17:D9:14:93:97:C0:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1ab9902a-f05c-3814-bfc2-04b3b61c8088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:41:9a:ca:51:5d:0a:d2:7e:5a:33:d8:82:59:e5:b9:7f:56:
f4:ae:1c:6d:91:8f:b3:c0:8c:cc:27:e7:e7:e8:50:aa:11:64:
20:75:8f:85:d5:41:3f:57:ab:0d:0b:8e:af:ec:2d:fc:d1:80:
3b:b6:af:fd:96:1c:95:67:f7:ee:c0:99:32:df:d8:3e:f7:c4:
a5:8e:91:ef:d7:54:ed:11:16:f1:68:0b:60:3a:94:7a:54:4f:
ff:78:a2:a1:a1:01:58:17:18:6e:b8:82:92:23:ee:f6:66:ac:
3a:2e:53:cd:3c:ad:0d:a6:54:4b:3d:03:ce:d7:2b:37:8b:cf:
a0:d8:f3:e7:9a:f8:5a:d8:4f:34:73:28:98:b8:83:a0:62:b4:
7e:df:92:5a:5c:57:9c:d9:82:d3:5d:d7:23:be:81:f2:91:4c:
7f:a3:98:02:2e:44:00:44:b0:87:05:50:bd:3f:77:28:77:1b:
08:b6:f4:8f:47:66:b3:7c:a7:0b:7b:16:de:54:bd:ca:a0:9d:
1d:3b:e3:dc:fa:11:3e:2d:06:db:8a:34:ae:ca:ea:60:76:74:
3d:48:85:50:62:89:89:a7:a0:f4:af:fc:40:16:ef:04:21:d8:
ae:55:36:f8:54:58:49:18:2d:3a:8e:08:da:e5:7d:36:8c:48:
99:51:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:52:59 2025 by rpki-client