Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/684584be-cf12-3c76-aed2-d46bccedb076.roa
File: 684584be-cf12-3c76-aed2-d46bccedb076.roa (raw, json)
Hash identifier: RuQ1aSmVNRBN4Frq7Qg6hOZPtE7YVOHpDnjSGOSt9mg=
Subject key identifier: 5C:07:AB:BD:D4:B7:C2:34:DA:97:B4:01:7D:BA:49:7D:64:3D:01:8C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843D37371762CDE7CB29C230C98
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/684584be-cf12-3c76-aed2-d46bccedb076.roa
Signing time: Thu 09 Nov 2023 02:00:16 +0000
ROA not before: Thu 09 Nov 2023 02:00:16 +0000
ROA not after: Wed 07 Feb 2024 02:00:16 +0000
asID: 834
IP address blocks: 108.165.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d3:73:71:76:2c:de:7c:b2:9c:23:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 9 02:00:16 2023 GMT
Not After : Feb 7 02:00:16 2024 GMT
Subject: CN=e76732ef-e901-4f50-ad15-5979ac2ecb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:b4:0a:5c:70:49:d6:0e:bf:91:e7:55:03:
99:f2:1f:20:d8:3e:5f:44:72:97:0e:fa:11:fa:9f:
67:c3:23:e0:6b:8b:0a:d3:36:86:90:12:b6:df:c9:
a5:16:98:d0:db:18:12:c8:b6:6a:fa:d8:34:62:48:
86:2d:72:65:60:e2:04:8d:f9:a8:dd:98:6d:57:41:
09:71:be:74:8b:f0:91:9d:02:86:cd:b3:f2:42:73:
b4:d5:34:4f:26:07:68:a8:8a:59:25:5f:70:0d:21:
83:86:c8:d5:37:7f:45:fc:35:60:79:1c:5d:c0:41:
01:ae:3d:97:94:70:82:29:7c:f1:54:85:d4:8b:cb:
8a:8a:61:05:6c:9d:aa:5c:a0:b5:e5:ab:49:6f:30:
69:fb:a2:86:6b:60:f1:c8:52:1e:f3:6b:83:28:21:
7f:75:30:ec:cb:cf:4c:a2:2b:cd:6f:a9:8b:e2:cc:
c7:0c:0e:92:99:ce:d3:df:ef:eb:fb:9b:9e:15:be:
de:53:d3:87:7e:c3:7a:f8:bc:61:87:ac:8a:e5:e1:
4f:eb:af:6f:3d:45:83:cd:eb:6f:eb:8b:73:dd:28:
11:17:99:d2:e0:0f:06:b4:f2:ea:17:da:fd:8e:4d:
5b:9f:e9:8c:e9:30:41:e5:9f:07:4b:4f:86:a3:05:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:AB:BD:D4:B7:C2:34:DA:97:B4:01:7D:BA:49:7D:64:3D:01:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/684584be-cf12-3c76-aed2-d46bccedb076.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:5a:5b:cb:3f:44:1b:97:f1:3d:f9:c7:39:ac:78:27:51:8e:
fb:28:3e:06:ba:e3:b5:70:4d:15:e5:1b:ee:37:ff:ef:3f:e9:
1b:f5:3c:d3:e0:56:23:a5:f2:47:fd:3d:da:03:c4:ff:61:a4:
69:c8:32:7a:8b:98:78:d4:b1:c2:24:7d:44:4c:54:a0:d2:26:
3b:74:7d:6b:68:c8:fe:b1:cf:85:de:e4:49:bd:b0:d9:6b:78:
bb:d8:2c:b0:9f:63:a4:07:c8:1a:5a:d7:ef:45:09:2f:9c:2b:
ea:22:49:30:8c:79:82:43:f4:3e:17:e8:75:33:2b:83:8a:49:
5f:44:f9:d2:cc:9f:78:c5:84:bf:fc:81:eb:fa:7e:7e:57:81:
09:fd:ac:07:8f:ec:11:84:95:c1:29:77:b4:5f:1f:b5:4d:7f:
3c:46:73:59:ed:bd:70:94:90:72:d8:b0:97:1f:2e:57:7e:b1:
36:6a:1e:6d:f0:32:d0:a4:40:50:4c:ff:2b:8f:99:b1:d3:27:
7a:2b:eb:98:1e:3b:29:2c:4e:15:51:7d:ae:41:47:26:d6:b1:
0b:46:48:ad:05:2d:89:c4:9c:ac:cd:14:cb:4d:10:2d:b0:52:
77:47:5b:b9:42:b9:69:e4:dd:36:c3:a4:6d:ef:1e:ca:75:e1:
1b:6e:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:49 2025 by rpki-client