Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/74f84fff-318e-3326-8daf-ac5faacf4921.roa
File: 74f84fff-318e-3326-8daf-ac5faacf4921.roa (raw, json)
Hash identifier: sgNzKZxvKuiRA0MIWbffNDDtxeyg22+VRp0B/55nqUA=
Subject key identifier: E5:6B:8A:24:F3:C9:62:67:EB:8D:AF:11:C5:B3:2B:2A:8B:09:75:11
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848B06ABAC1AF51C3FDC3F7F700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/74f84fff-318e-3326-8daf-ac5faacf4921.roa
Signing time: Tue 28 Jan 2025 00:44:12 +0000
ROA not before: Tue 28 Jan 2025 00:44:12 +0000
ROA not after: Sun 27 Apr 2025 23:44:12 +0000
asID: 834
IP address blocks: 108.165.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:6a:ba:c1:af:51:c3:fd:c3:f7:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 28 00:44:12 2025 GMT
Not After : Apr 27 23:44:12 2025 GMT
Subject: CN=b2467daa-dd67-436a-a986-6b25939587c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:d1:dc:3e:ed:61:be:f2:a0:fb:90:c3:36:
5c:84:7b:41:00:22:84:d4:cd:fb:06:97:cf:23:5d:
1d:4a:2e:86:31:cb:09:30:ac:2d:2e:09:80:a2:07:
72:5a:1a:e7:c8:67:49:19:b4:0a:1b:53:88:1d:e7:
17:c3:d6:5f:03:88:26:a3:36:ca:8c:77:30:24:77:
e2:48:8e:6a:89:b5:93:c4:07:15:a9:f8:e0:f6:6f:
0f:26:6f:f4:bc:f8:05:c5:f3:05:8b:86:ed:bc:c2:
7a:96:34:ed:fc:60:d5:d8:e2:f5:75:ff:30:89:95:
49:cd:4c:2d:c4:26:25:22:5f:6f:41:0a:44:cb:42:
52:8d:3d:64:e0:e5:48:93:20:f2:8a:3b:bc:9e:db:
e6:fa:c9:29:bc:47:e3:9c:c7:68:47:47:20:85:59:
ba:6c:f6:43:1b:a3:93:55:4c:25:85:b1:7b:14:d2:
44:3f:0f:4d:f8:21:d6:6e:31:f2:f5:66:30:5d:ce:
3f:1b:3d:5d:5c:35:46:5a:68:27:03:8d:32:ec:e9:
ec:7c:a0:a1:e9:52:f3:31:68:fe:2f:e9:55:e6:60:
fb:39:58:3b:70:e0:4f:5c:52:6f:6b:c3:5a:98:b5:
7c:ba:29:5c:1e:58:07:5a:67:06:fe:6d:f7:b3:57:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:8A:24:F3:C9:62:67:EB:8D:AF:11:C5:B3:2B:2A:8B:09:75:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/74f84fff-318e-3326-8daf-ac5faacf4921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:42:55:3a:07:65:25:e8:a2:c6:82:88:1a:6a:9f:86:09:c5:
37:12:61:86:08:40:ed:c8:01:3b:ff:d4:0d:e7:c4:bf:55:21:
81:03:34:70:50:64:31:a5:2c:67:10:ea:40:6d:c9:ca:a8:d0:
bc:2d:66:1c:7f:a0:60:be:3c:22:b2:65:00:e0:24:65:ac:59:
c5:e9:53:5b:71:a6:f8:c4:c3:ee:f2:fe:b2:1f:3f:30:88:ca:
31:b5:84:2a:88:43:ee:78:6f:e9:93:d8:a2:9c:b3:bb:0d:47:
24:3f:de:c1:de:ba:b6:a9:35:d9:dd:ec:ca:08:26:4a:59:da:
a8:45:5e:eb:ea:89:18:7c:73:0b:30:18:01:f2:81:73:1f:69:
a8:22:e8:55:79:91:99:80:eb:2a:40:38:f5:73:64:b6:02:7a:
90:91:82:50:5d:ca:14:03:e4:03:19:30:6c:97:af:25:df:07:
74:8a:2f:f0:4f:b8:f5:be:bc:4c:c9:1d:45:dd:2f:6e:34:73:
94:10:3e:7e:a1:6b:3d:4c:81:6e:11:a0:3a:01:0b:17:62:f0:
71:29:b0:b0:f4:d5:7d:97:5d:d1:b1:1f:7b:d4:39:1a:cd:6d:
fd:f5:16:e2:61:c8:32:8a:e4:ac:8f:a0:aa:71:e4:71:de:00:
de:ec:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:58:37 2025 by rpki-client