Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/696db7d3-20e0-3caf-9f61-17904d3fcf4d.roa
File: 696db7d3-20e0-3caf-9f61-17904d3fcf4d.roa (raw, json)
Hash identifier: tZBbIi9RQ+I1O3NSOkSn20RNKbh3ISarIEbabWSLZ6M=
Subject key identifier: 46:16:73:A5:2F:F4:A9:45:FE:2D:67:3F:61:AF:76:78:08:E6:91:24
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF80F8A386F8C0C69A1960
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/696db7d3-20e0-3caf-9f61-17904d3fcf4d.roa
Signing time: Wed 05 Feb 2025 20:03:22 +0000
ROA not before: Wed 05 Feb 2025 20:03:22 +0000
ROA not after: Tue 06 May 2025 19:03:22 +0000
asID: 11798
IP address blocks: 108.165.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:80:f8:a3:86:f8:c0:c6:9a:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:22 2025 GMT
Not After : May 6 19:03:22 2025 GMT
Subject: CN=e07ba25a-fd34-48b5-87f9-03aa53d7eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:b7:d8:48:ab:20:cd:78:01:dd:ad:9e:80:
a0:f9:87:38:21:b5:60:98:ef:1e:21:03:6c:81:be:
d4:b6:4a:5f:5a:4b:57:06:bf:46:3b:60:c8:e4:5d:
35:3a:1a:6a:60:59:76:57:de:b2:66:83:3d:aa:7c:
bd:04:da:78:23:83:bf:14:d9:70:81:3f:56:62:57:
8b:48:cf:ee:9e:95:e0:12:5d:31:52:ec:98:ad:b2:
84:d0:46:c3:58:d1:06:88:2f:31:3c:21:7b:b9:67:
4d:e7:63:0e:69:cd:bb:61:8b:27:6a:46:84:fb:3c:
6b:5e:af:d9:3a:56:8e:59:0f:17:c7:7c:9b:5b:15:
78:e8:a2:e7:da:3b:0f:8a:6c:60:2e:7f:d5:86:fc:
03:ee:29:85:4c:c6:7a:b2:f4:af:91:33:4b:58:89:
e3:3c:fd:96:b5:f8:c3:d9:dc:e5:e0:41:d3:09:4a:
41:dc:76:f8:25:ac:25:97:9e:4a:f7:1c:3c:09:de:
11:2b:02:6f:88:1c:28:08:71:ef:c3:76:20:bf:53:
0f:16:77:c1:a0:5e:6f:90:45:2c:62:b8:a6:2f:10:
b8:fb:11:8d:04:6d:63:66:77:1b:68:8d:18:8e:57:
38:7c:0a:21:a6:2f:b3:2c:e0:c8:56:bd:67:68:8b:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:16:73:A5:2F:F4:A9:45:FE:2D:67:3F:61:AF:76:78:08:E6:91:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/696db7d3-20e0-3caf-9f61-17904d3fcf4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:6b:6a:60:5c:72:2c:b7:5f:ae:90:2f:8f:70:9b:aa:2e:69:
4b:e1:26:c8:ed:16:b6:62:e2:be:7f:b4:39:4f:15:a6:e5:bb:
82:1f:ac:a9:3d:40:30:a8:cd:41:3d:4a:f2:28:52:00:35:a0:
ac:51:2f:0e:42:11:aa:7c:fd:d8:c2:fb:dc:71:bd:f2:87:f1:
cf:d5:6d:b3:a7:db:13:70:41:27:6d:2c:15:85:d3:1e:03:44:
99:7d:bc:89:5d:5a:6f:06:fd:0e:df:1a:27:20:51:da:63:e0:
73:66:1a:5e:65:ad:e3:33:a0:a4:f5:64:79:a9:ac:95:7f:8e:
aa:d6:8b:36:b5:28:41:fd:14:fa:2c:e4:d7:b1:b2:88:ba:9e:
0a:88:01:98:91:8f:8d:60:51:bb:a7:c8:a9:e7:22:8c:08:b2:
eb:e4:f2:9a:ed:22:41:84:7f:23:45:8f:93:63:4c:a0:18:47:
9c:ca:91:fd:31:d3:96:d8:95:11:50:c2:e7:cf:0a:d1:b6:93:
83:61:27:83:8a:21:c7:b2:81:a2:fe:6a:6d:0a:fb:72:e0:a3:
91:3e:77:59:5c:68:64:89:9c:24:b2:cd:13:d0:07:d3:3d:d8:
6d:4e:6f:3f:a5:c2:18:29:89:34:95:bb:65:e4:f4:56:47:2b:
6a:dc:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:28:00 2025 by rpki-client