Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cbae532-9e47-3e9f-83ae-0570a202d41e.roa
File: 2cbae532-9e47-3e9f-83ae-0570a202d41e.roa (raw, json)
Hash identifier: JrKia3DkLGrRbQWNAU++2NXWyjiHgfUNugEMB/vb0ig=
Subject key identifier: 18:24:8B:34:44:B3:74:77:01:D0:09:0C:E9:BC:31:20:16:CB:A5:D3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487D9784502BBE5155D68E32A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cbae532-9e47-3e9f-83ae-0570a202d41e.roa
Signing time: Thu 09 Jan 2025 19:48:13 +0000
ROA not before: Thu 09 Jan 2025 19:48:13 +0000
ROA not after: Wed 09 Apr 2025 18:48:13 +0000
asID: 834
IP address blocks: 108.165.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:97:84:50:2b:be:51:55:d6:8e:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 9 19:48:13 2025 GMT
Not After : Apr 9 18:48:13 2025 GMT
Subject: CN=64c7cc0b-89da-426a-8c11-cc0999c915be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:02:f2:c6:6a:c5:69:c9:61:41:70:e6:69:
e4:a1:e1:2d:00:b9:bb:57:d9:99:69:eb:cf:e0:4e:
40:b3:8f:c0:fe:1b:05:4b:45:e1:7a:ff:ae:3a:96:
9d:1a:8a:41:57:5a:89:c3:06:f3:78:38:dc:6d:96:
98:75:85:28:49:b0:59:f0:16:ef:2b:53:40:40:41:
76:f5:a8:28:11:bc:f6:1b:3c:31:37:ef:53:8a:71:
68:0d:7e:6e:19:a2:54:08:ec:ae:b1:03:30:92:05:
dc:5b:1f:b3:7c:0a:2e:a6:02:0d:fd:aa:23:ee:e6:
78:60:13:e5:5c:f4:82:2f:a7:d6:b3:c1:1c:6a:b4:
69:fa:3f:ac:58:b5:6f:cb:ba:29:2c:65:a1:b3:49:
99:6a:a4:30:3e:7c:d8:18:58:13:95:1e:53:d7:93:
a9:e4:88:5e:64:57:71:d8:60:51:2b:a2:41:61:42:
f1:c1:09:f1:45:46:e1:88:a6:87:0a:9a:9d:28:c0:
93:c1:ca:ab:11:37:0d:59:97:ac:f4:64:a5:3c:57:
7f:71:db:fc:a6:fc:47:5a:e7:6f:e3:e7:a6:0e:d4:
c1:b9:e9:69:c8:c1:d8:42:d0:13:06:60:8b:eb:fe:
1f:b0:20:a9:b8:e5:35:b2:1c:19:5b:5a:24:01:bb:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:8B:34:44:B3:74:77:01:D0:09:0C:E9:BC:31:20:16:CB:A5:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2cbae532-9e47-3e9f-83ae-0570a202d41e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:f3:51:4f:37:4d:4a:71:91:4b:aa:de:f6:6e:b3:e2:51:8b:
4c:6b:b2:1d:7c:63:03:77:ed:0b:f6:e5:05:a6:45:50:8a:8e:
6e:f2:f6:50:c2:ca:e1:ff:30:bf:a3:86:93:99:7b:77:5e:db:
c2:9a:19:d4:79:c9:38:b1:d0:0a:4b:b9:00:b8:e2:3d:b0:d8:
4c:19:30:20:67:f6:20:96:ba:0b:63:40:d7:76:b8:90:53:02:
3f:af:0e:98:e8:a6:5b:4c:6c:da:50:00:85:52:22:ec:21:73:
23:bc:f9:6c:d7:45:b3:04:fd:66:4f:ab:4f:03:71:fd:4a:ad:
22:f6:da:fb:74:d1:e5:3d:3f:36:d9:ac:de:a9:00:62:6a:b8:
7a:17:43:ce:a9:2d:4e:ea:cd:9f:91:7e:e9:1f:0e:84:be:31:
41:ce:e7:c5:3b:1c:43:27:90:f4:55:0a:bf:a4:52:aa:99:cd:
cb:6d:c2:86:5f:e2:21:d8:fd:a9:2d:aa:f6:19:90:f0:61:35:
d5:6c:9a:55:c3:03:fc:75:9a:50:4b:e7:99:f5:c7:de:54:f9:
5a:13:60:01:2c:71:ac:f5:d5:e4:fb:3e:fb:24:b7:25:df:83:
35:30:ce:0c:b2:22:cf:ad:2e:7b:08:1e:e3:61:9c:5f:91:d4:
ba:3a:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:34 2025 by rpki-client