Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80e7d48c-c547-37f8-9dd5-17d626a83b63.roa
File: 80e7d48c-c547-37f8-9dd5-17d626a83b63.roa (raw, json)
Hash identifier: jiTRdr0T4wcNtEPjg9O0MeA6TUS/FsTVRMxQGHmKNXQ=
Subject key identifier: B7:A0:E2:1A:BF:62:89:F3:4A:5D:CC:FB:A4:EB:67:9B:64:47:41:60
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480282833E77036BA742C13900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80e7d48c-c547-37f8-9dd5-17d626a83b63.roa
Signing time: Tue 26 Nov 2024 17:41:28 +0000
ROA not before: Tue 26 Nov 2024 17:41:28 +0000
ROA not after: Mon 24 Feb 2025 17:41:28 +0000
asID: 834
IP address blocks: 108.165.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:82:83:3e:77:03:6b:a7:42:c1:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 26 17:41:28 2024 GMT
Not After : Feb 24 17:41:28 2025 GMT
Subject: CN=a4024e5c-e841-4b67-9a6b-acae14c69197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6d:91:9a:a4:70:ae:cd:2e:00:90:c5:47:e9:
e2:85:41:2c:80:cd:3e:00:bd:a8:92:e4:89:83:89:
87:38:2d:0b:e8:f8:b6:af:04:15:10:67:ba:e5:b3:
7f:5e:f1:68:95:f6:27:c8:c6:1c:90:f9:45:7f:ac:
f6:73:08:5a:57:ec:07:57:86:ec:51:63:00:06:71:
6a:ef:d4:ba:40:d5:e1:f9:c6:c9:11:d8:27:dd:4e:
24:4f:3a:48:5c:3f:10:9f:00:9b:1f:31:8d:0d:74:
f3:e1:a0:89:fa:58:27:11:0e:3c:33:03:ab:50:7a:
71:1d:37:62:8c:c9:18:49:79:ac:bb:23:62:2a:66:
d9:8b:c7:b5:e3:3d:c9:b2:27:1f:22:2b:43:a0:75:
43:ea:da:00:c3:63:4d:a7:85:6c:6c:2a:b0:4c:cc:
30:10:a7:aa:fb:34:8b:a6:ae:ad:00:70:42:a5:57:
52:3d:4a:99:d4:5f:be:a1:2c:61:4a:96:57:b0:dd:
b4:b4:2e:62:a6:63:b8:da:66:a3:1d:00:76:ed:6d:
c4:77:c6:6c:40:9e:1e:e6:9b:ef:88:26:85:a0:28:
14:08:57:f1:bf:00:94:67:2d:38:7e:0c:c3:aa:cb:
57:0d:0d:f9:f1:02:9d:c8:be:29:2c:10:31:44:c1:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:E2:1A:BF:62:89:F3:4A:5D:CC:FB:A4:EB:67:9B:64:47:41:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/80e7d48c-c547-37f8-9dd5-17d626a83b63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:d0:31:d9:7e:27:32:90:bb:a6:02:67:06:e2:01:e6:26:93:
99:a4:78:1d:38:98:78:fb:51:1a:ee:d4:12:98:21:6e:df:f0:
02:96:d5:50:27:4d:27:57:23:5e:56:1b:15:fe:7e:b1:c4:00:
4a:c9:f8:80:cb:30:ec:a0:71:60:1e:64:1f:9a:67:8a:73:a9:
29:bb:40:ee:f4:39:c0:76:53:b0:fa:83:bf:03:a1:6b:17:d4:
7c:c6:e4:fe:28:ef:36:c8:7f:6a:15:60:ae:25:50:27:b4:5b:
f5:41:f5:b6:44:c7:8f:86:ad:ad:8d:af:f5:ce:91:a3:25:4b:
19:8f:d9:d0:5b:0d:47:0d:6a:ce:17:f6:52:a7:ac:28:55:27:
63:8e:9a:fc:00:10:cb:1e:43:1c:f4:d7:f2:4f:db:1d:24:c9:
b0:94:0a:67:76:81:87:f4:9c:07:21:a7:20:e1:88:a1:be:b3:
02:9a:28:50:d3:2b:d3:28:05:7c:04:78:91:69:a5:1d:16:8b:
da:de:e3:da:76:5a:ad:a7:c6:f0:b6:a1:3a:ce:2d:2d:ec:28:
7a:cc:08:b5:c5:57:0c:59:23:ef:a7:ab:7c:f8:78:37:15:25:
06:72:07:91:b3:c0:4c:2b:73:1b:4c:2b:6d:1b:80:5f:ac:c0:
99:9a:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:47 2025 by rpki-client