Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/550db864-da2c-3dfc-9132-fb4786e7f38a.roa
File: 550db864-da2c-3dfc-9132-fb4786e7f38a.roa (raw, json)
Hash identifier: Q+vfGTb4tujSL3VnK3piA381Rq3px3HAyEVUnQiN81c=
Subject key identifier: 77:A7:15:08:20:B0:54:EF:38:79:C3:EF:C9:B9:37:ED:59:9D:26:CF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842E068BFAB1A3E28031EA07EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/550db864-da2c-3dfc-9132-fb4786e7f38a.roa
Signing time: Mon 14 Aug 2023 00:37:23 +0000
ROA not before: Mon 14 Aug 2023 00:37:23 +0000
ROA not after: Sun 12 Nov 2023 01:37:23 +0000
asID: 834
IP address blocks: 108.165.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e0:68:bf:ab:1a:3e:28:03:1e:a0:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 14 00:37:23 2023 GMT
Not After : Nov 12 01:37:23 2023 GMT
Subject: CN=d71fd3ff-d4d6-4816-a1fc-25c604f3a4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:ed:8a:d7:10:ce:23:45:32:37:06:08:94:
b1:cd:57:4a:39:58:e6:98:9e:1c:a7:d7:6d:f6:1a:
24:2d:c9:33:9a:f0:e6:48:79:79:5d:2c:2b:38:a5:
e9:8e:02:57:c8:86:f5:f1:d2:6b:65:9a:2e:2c:06:
72:0d:88:d7:13:b9:db:7a:fb:b4:04:7b:81:75:64:
25:20:68:78:fd:d9:09:36:80:6f:da:f5:63:b4:3e:
e6:a6:82:4e:08:36:4c:a3:97:74:8b:a7:d4:f5:d3:
ee:43:9d:4c:f2:84:ca:64:0c:a5:87:af:74:f6:95:
06:cf:91:f3:a7:d8:f3:62:ab:f8:c5:aa:c1:d1:ff:
34:55:51:09:82:f0:5b:c8:12:9e:4c:08:a2:0a:ee:
9d:b8:a5:c7:89:6d:83:d3:26:d7:35:58:f0:6a:5d:
66:08:62:34:39:3c:47:6d:5f:b1:d9:83:24:1e:fa:
93:e9:a4:46:9b:21:8c:31:cf:45:49:25:58:6d:d5:
46:f1:2c:c1:0d:51:2e:87:e3:fb:24:22:89:6c:e7:
48:0c:49:27:0f:81:6c:39:99:da:85:cd:a3:fc:5f:
e1:c6:3c:61:89:c6:a7:06:a9:fe:12:3b:9f:b8:2b:
74:1f:4f:53:7c:6a:18:f8:96:5f:ca:f3:50:51:8a:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:15:08:20:B0:54:EF:38:79:C3:EF:C9:B9:37:ED:59:9D:26:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/550db864-da2c-3dfc-9132-fb4786e7f38a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:3c:c2:84:c3:d8:dd:6b:b5:a6:95:86:3b:6b:e8:97:75:b7:
50:8c:fa:27:6a:f6:bf:6b:38:d5:0e:de:36:38:8b:64:36:a7:
ce:54:d1:c2:9a:1e:1a:04:6c:7a:1b:73:08:bc:59:24:86:46:
14:ce:a2:9e:f0:47:1a:7c:3c:2f:f5:16:24:b2:16:7a:d1:a6:
55:0e:4f:3d:d4:ba:08:49:f2:0b:1d:7f:93:e9:a8:f6:c7:58:
bf:94:ef:d1:02:9d:c0:ef:ab:c3:c0:ab:7a:5b:80:5d:f0:07:
b9:9c:aa:96:1e:8b:28:4d:3b:31:1b:50:42:3b:bb:28:54:57:
fc:f3:50:b9:83:c7:eb:49:a9:1f:4d:2c:c9:15:5d:82:b2:a6:
56:d4:1a:6b:6c:2d:ea:89:ca:1d:52:a4:d6:9d:a7:4e:29:52:
07:24:d6:07:e6:f9:84:92:86:71:10:1d:43:0a:4a:48:3a:b8:
c0:31:11:ac:55:6b:11:a1:31:64:59:4a:a5:c7:97:cd:05:af:
c3:9d:de:de:c6:25:f1:20:29:0b:05:06:e0:4e:c0:fb:78:c9:
14:ac:d7:59:95:90:3c:8e:30:35:31:c9:46:74:6d:68:44:ce:
d2:12:d3:55:75:e3:e2:06:8f:bf:0d:ed:0b:00:7a:98:80:7e:
79:3f:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:43:48 2025 by rpki-client