Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/26973c6b-1f07-3de2-acd6-a6377dea0915.roa
File: 26973c6b-1f07-3de2-acd6-a6377dea0915.roa (raw, json)
Hash identifier: HiwR7v4btpfV6TsT/myJfRyAmwvSzFDuL6VQGddEjbw=
Subject key identifier: 4F:19:4F:29:A4:91:A8:48:B1:DA:8E:58:1C:78:34:C0:F0:6E:93:06
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842432D4CDBBFA7D1CD34142400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/26973c6b-1f07-3de2-acd6-a6377dea0915.roa
Signing time: Sun 18 Jun 2023 16:55:42 +0000
ROA not before: Sun 18 Jun 2023 16:55:42 +0000
ROA not after: Sat 16 Sep 2023 16:55:42 +0000
asID: 834
IP address blocks: 108.165.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:43:2d:4c:db:bf:a7:d1:cd:34:14:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 18 16:55:42 2023 GMT
Not After : Sep 16 16:55:42 2023 GMT
Subject: CN=ffd3f6b5-b92d-4eb8-b3f1-282aeae7e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:f9:5c:76:2f:86:e0:6a:98:b1:90:67:42:
df:ed:87:6e:58:ad:d4:b7:22:1b:1c:22:58:3e:25:
1c:3a:b3:b1:b6:a1:15:ff:06:a2:3f:8d:4b:55:83:
e1:c8:c0:db:db:9a:5e:9c:f3:39:18:77:3b:af:e0:
86:5b:cc:11:23:70:dd:3f:78:4e:5e:ef:1c:64:0e:
7a:61:6a:d6:83:d0:43:08:bf:02:85:69:f1:25:8d:
b4:b5:7c:6c:74:c5:2f:e3:8f:d2:5c:04:72:0f:d4:
09:9b:a0:72:f1:3d:c1:89:ad:43:17:0a:cd:63:3c:
e0:07:12:04:09:46:52:c5:f5:36:01:45:e3:8d:39:
81:3f:7b:82:f5:07:6b:a9:09:18:c4:ed:de:b0:1c:
1f:28:bd:a6:62:8d:14:8d:99:90:a3:8d:50:39:03:
69:bd:50:c4:5e:14:d9:ad:73:78:f2:de:7d:82:ba:
9f:bf:91:e7:1f:f3:cf:45:a6:6c:8c:c1:76:a7:47:
b1:c3:e2:7c:33:31:ad:98:1f:4d:0e:b2:97:87:d0:
27:8e:04:21:38:0c:38:54:c5:41:ac:61:d8:25:d3:
76:e8:31:1e:2d:fa:d5:b1:ec:cf:2d:53:95:0e:06:
ee:4c:2d:5f:e3:98:26:a8:72:55:2e:8d:04:67:56:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:19:4F:29:A4:91:A8:48:B1:DA:8E:58:1C:78:34:C0:F0:6E:93:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/26973c6b-1f07-3de2-acd6-a6377dea0915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2f:10:00:34:e8:60:00:b6:e0:92:04:5e:f4:08:fa:8b:73:
69:99:96:6f:48:a1:fc:d5:45:aa:e7:4b:bb:bb:ec:bb:09:9d:
e9:e9:1e:9c:23:ff:c8:84:05:86:4f:26:f4:26:f6:32:0f:69:
43:70:61:e0:d7:48:7c:1a:1c:03:91:46:76:8c:2b:8d:34:d0:
1b:ee:89:7c:76:bc:f6:4a:5f:2c:d7:92:8f:b3:1f:20:08:f2:
3c:90:de:72:1f:de:fd:eb:36:bb:7a:d5:09:cf:e0:14:e0:a1:
83:0e:f8:11:ca:19:d9:f4:ff:09:f0:52:fb:dd:b3:0c:fd:c0:
d1:cf:aa:13:4f:c9:94:a3:a3:31:18:17:cb:12:da:e6:34:66:
84:d0:e3:bf:a3:c0:39:e4:e6:2e:70:40:fa:01:e3:1c:48:db:
13:53:9e:0a:f7:50:4b:0b:0f:6e:8f:d2:22:82:de:cc:c1:52:
e0:25:e4:ec:1b:4f:96:92:9b:93:47:cc:80:fa:45:5f:3e:91:
bb:d8:de:cc:45:42:eb:cf:b6:08:23:6e:26:14:f8:d9:83:e7:
a7:d0:e3:08:b6:18:a9:46:90:37:8e:62:1c:45:6c:e6:1f:70:
0c:90:b6:df:df:1b:37:71:95:d2:a7:6e:b4:d5:23:01:cf:a1:
98:ad:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:00 2025 by rpki-client