Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d1aaff7-7a54-3bdb-9e88-0795aa335b7b.roa
File: 2d1aaff7-7a54-3bdb-9e88-0795aa335b7b.roa (raw, json)
Hash identifier: pKjXgXNo31JKYpanfN70tIKp/E+0o700Axs6Ow6vV5o=
Subject key identifier: 9F:01:EA:40:83:9B:DA:88:B5:80:E1:CF:B9:E3:66:FD:95:F9:9E:05
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847A39F941EB37CE8A7EBCC0E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d1aaff7-7a54-3bdb-9e88-0795aa335b7b.roa
Signing time: Wed 23 Oct 2024 17:58:14 +0000
ROA not before: Wed 23 Oct 2024 17:58:14 +0000
ROA not after: Tue 21 Jan 2025 18:58:14 +0000
asID: 7018
IP address blocks: 108.165.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a3:9f:94:1e:b3:7c:e8:a7:eb:cc:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 23 17:58:14 2024 GMT
Not After : Jan 21 18:58:14 2025 GMT
Subject: CN=409a4605-1199-4a89-8cff-b392a9260397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:21:f7:ac:eb:4c:68:a6:44:97:54:04:78:
ca:31:7d:e0:ec:8d:70:02:b0:8d:8e:1d:65:81:c6:
7c:44:05:0e:c7:f3:c9:39:a2:e4:1c:e2:ae:1f:11:
a6:e9:94:4b:07:d6:29:08:1b:72:d2:ad:c4:9b:56:
cc:07:32:97:f8:11:e3:b7:ac:bc:6f:60:e8:2f:45:
c8:c4:bb:38:c0:4c:c2:b8:e7:e7:98:ef:a8:21:1d:
85:ac:35:80:83:68:a7:0f:7a:24:bd:66:65:76:1b:
50:f8:ef:92:c0:50:51:0c:03:40:d7:07:9a:39:12:
d3:a2:4e:44:0f:6d:2e:fa:19:2a:5e:0e:60:a2:3e:
e9:2c:0b:eb:61:04:2c:88:7e:f0:e4:9a:4d:77:16:
72:41:d9:19:9f:be:4a:ad:dc:53:69:82:3c:1e:fe:
f5:85:aa:a2:61:77:6d:67:d2:9a:21:53:e7:47:2a:
fa:1d:db:06:6c:36:c7:62:f7:a8:50:bf:f0:15:a9:
ff:1b:80:27:cf:b3:30:1f:59:1c:59:11:1a:30:2c:
a9:36:4b:33:0e:21:fb:9c:88:54:43:52:9e:77:54:
d4:0a:1c:6a:51:b7:62:6b:3d:ce:73:e8:4d:dc:4b:
dd:f1:bb:9d:66:83:a0:ce:e4:31:d2:18:8d:3d:2c:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:EA:40:83:9B:DA:88:B5:80:E1:CF:B9:E3:66:FD:95:F9:9E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d1aaff7-7a54-3bdb-9e88-0795aa335b7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:14:fe:ae:50:07:aa:6e:a3:da:a0:57:6e:ee:c9:55:ce:25:
92:87:bd:d0:72:7e:ef:cb:2d:ca:1a:b6:84:31:a4:3c:19:23:
93:37:89:7a:32:a3:a0:f1:b9:60:6f:47:d0:2a:d4:9b:06:56:
94:54:1b:3b:3e:60:fd:17:07:11:be:33:23:53:c8:2a:a3:50:
86:e4:41:64:92:ec:50:55:89:ba:48:3f:71:7e:2b:84:8f:62:
20:e5:54:91:50:b1:28:4d:ce:f6:90:d0:2b:f7:52:63:eb:a8:
f9:52:68:46:9b:80:32:43:09:88:ea:b4:1b:2a:b6:2d:93:e5:
0f:06:1c:cd:79:4f:4c:26:28:61:86:9d:fc:8d:b9:19:7d:5a:
e9:a4:51:aa:7f:f8:57:bf:b1:82:14:18:02:4a:5f:1a:d2:1b:
95:1b:13:43:58:11:02:38:49:a6:36:b5:4f:b0:e5:30:91:fa:
f3:ef:51:31:51:aa:c2:2d:b6:d3:84:eb:60:4e:58:08:f0:3c:
03:38:0b:a7:00:67:43:93:fa:b5:4f:be:4d:39:02:04:30:fe:
0f:95:d4:03:c3:22:2b:a7:84:03:22:99:6f:34:c5:3e:ce:e9:
0a:e1:61:7b:f9:12:a0:0b:73:49:7c:3c:d8:2a:22:4b:25:42:
be:7b:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:58 2025 by rpki-client