Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29f7d64c-5ed0-3773-9e76-0352c9adc4ee.roa
File: 29f7d64c-5ed0-3773-9e76-0352c9adc4ee.roa (raw, json)
Hash identifier: EUbs76t6ho66u7GnjMAfPq84+ygL5v1OdYA/cNuDK/k=
Subject key identifier: B3:1B:13:D2:1D:B6:73:7F:B5:31:07:FF:0E:93:8B:CE:D2:8C:5C:62
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF8091A5166F6A5B997980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29f7d64c-5ed0-3773-9e76-0352c9adc4ee.roa
Signing time: Wed 05 Feb 2025 20:03:22 +0000
ROA not before: Wed 05 Feb 2025 20:03:22 +0000
ROA not after: Tue 06 May 2025 19:03:22 +0000
asID: 11798
IP address blocks: 108.165.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:80:91:a5:16:6f:6a:5b:99:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:22 2025 GMT
Not After : May 6 19:03:22 2025 GMT
Subject: CN=9615b86a-703f-40fc-ab94-fa9d62897e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:5a:d5:82:a8:b4:bd:09:87:c2:ba:e8:87:
b6:af:4f:5d:e1:7c:6c:75:a0:4a:8f:30:d5:7a:3e:
19:2a:d6:d6:48:54:b0:de:dc:29:91:fd:fd:59:ed:
0d:0a:b4:c1:a0:08:21:61:ed:97:73:69:20:d4:f5:
6c:5f:26:bd:9f:f2:1f:81:6b:9a:47:30:51:9d:e9:
92:72:b5:ee:b2:ac:53:56:67:7e:f2:80:c0:fa:3b:
ca:bf:d0:c0:a7:8a:c3:d2:c6:7c:bd:70:3b:7c:c4:
3e:04:56:f0:1e:aa:3e:ee:ea:6b:1d:1c:61:42:5e:
09:4d:87:b4:02:b1:dc:38:19:26:9f:82:05:b4:4c:
a1:a8:da:66:aa:9a:1d:78:cc:54:c1:5b:b7:56:fc:
bf:57:b9:62:6d:86:4e:8b:ed:ac:31:8b:c0:37:4f:
2c:5a:e7:e1:d8:8f:a2:32:af:02:83:f4:33:13:fb:
22:97:55:66:6b:4e:78:dc:d4:f7:3c:29:65:46:d7:
9e:e1:bd:7a:fb:91:62:e2:d0:49:d2:a1:5c:a1:7a:
1d:1e:ce:52:38:27:a1:5d:5a:a5:1e:f8:dd:88:87:
3e:52:6c:65:a3:bf:a9:e5:5d:b2:b8:be:ea:78:d7:
39:21:9b:41:57:90:ba:7b:31:44:b7:48:f7:08:7d:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1B:13:D2:1D:B6:73:7F:B5:31:07:FF:0E:93:8B:CE:D2:8C:5C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29f7d64c-5ed0-3773-9e76-0352c9adc4ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ad:0a:a1:8f:2d:f2:18:25:9b:c6:42:fd:87:1f:a4:b5:d2:
0d:3e:75:a2:27:ad:59:37:81:3d:de:9a:a6:22:0d:56:a0:99:
57:c6:ef:6a:35:58:08:5b:b2:7d:72:98:b8:7f:c8:61:16:12:
de:77:68:a0:03:88:f6:98:15:a8:55:72:0f:a0:33:b4:fd:fe:
00:8e:21:ba:94:1f:8d:9f:5a:22:6a:21:b6:b0:22:c4:11:7f:
4a:32:0f:e3:bd:de:02:b4:cb:7a:b0:96:74:90:17:66:7d:c5:
28:9d:bc:b1:81:42:54:db:62:19:c5:36:d2:fa:21:da:99:b3:
50:b7:50:e9:76:7b:8b:ea:b1:af:e3:2d:4e:94:da:12:bf:83:
19:02:6f:86:9d:b6:97:e3:47:3c:52:f2:54:e9:c7:ea:3d:f4:
ba:4e:d1:53:e4:fe:43:e4:9b:8c:96:cb:e4:c6:50:44:8c:d6:
15:a4:26:b6:cd:7b:f5:16:e3:df:08:b6:16:f2:aa:d7:57:ad:
20:d1:35:f9:93:06:4d:77:30:ad:45:ae:bc:37:ad:3e:4d:1e:
18:46:61:c8:cb:53:bc:ad:7d:f2:ac:e2:ef:4a:8c:e5:36:2e:
a1:50:86:70:4f:88:77:ef:fd:f0:df:6f:36:12:8d:fc:a5:86:
da:22:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:40:20 2025 by rpki-client