Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a25ba521-093c-3744-bd5a-6408bd588051.roa
File: a25ba521-093c-3744-bd5a-6408bd588051.roa (raw, json)
Hash identifier: cTJTO1F62wDrgytmqcdWDc5IiwNMl7fjlFQ3OXI4fks=
Subject key identifier: 2C:F7:B4:49:1E:3F:96:5B:5F:D5:A8:1C:73:60:E8:1F:F0:CD:B7:1A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843EEB0F1560CA8684CD6A04A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a25ba521-093c-3744-bd5a-6408bd588051.roa
Signing time: Sat 18 Nov 2023 20:11:06 +0000
ROA not before: Sat 18 Nov 2023 20:11:06 +0000
ROA not after: Fri 16 Feb 2024 20:11:06 +0000
asID: 59895
IP address blocks: 108.165.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ee:b0:f1:56:0c:a8:68:4c:d6:a0:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 18 20:11:06 2023 GMT
Not After : Feb 16 20:11:06 2024 GMT
Subject: CN=7885009a-6a72-4e36-85e1-cc2d0def5963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:3f:c2:d5:8c:9c:7b:99:04:f4:e6:69:50:
8b:10:8e:e7:9f:0f:28:3a:8b:f1:26:4b:29:2d:45:
1a:29:08:8e:60:c7:43:aa:b5:e8:32:a0:6a:73:b5:
7f:fc:96:4a:81:9e:5a:28:cc:2d:c1:52:37:21:6c:
b5:6b:4f:a8:66:4b:05:e9:e7:5b:01:df:11:35:9c:
ce:ab:e5:13:41:71:00:55:f8:27:9e:b1:30:3f:cc:
62:20:ce:8b:b2:bb:f3:07:86:a8:da:4b:5f:f9:cd:
f7:e5:0d:c6:45:75:2c:28:f9:bd:82:6c:c9:50:dc:
2a:fd:31:b0:d0:27:ee:ef:0b:3c:c6:75:e6:78:b9:
49:3b:c6:f0:0e:03:74:4a:ff:84:0a:db:e0:a2:c1:
28:cf:84:e3:6b:01:73:11:4d:07:be:5d:63:31:a0:
0e:e4:21:5f:05:a5:74:c5:56:8e:13:e3:e4:7c:6d:
5f:51:63:79:e4:ea:e3:c1:27:88:73:75:90:78:8d:
16:c3:b1:53:b4:35:60:fa:9e:1b:9a:59:4a:42:08:
91:2b:ba:d7:60:f8:85:c3:fa:ed:84:de:07:0c:40:
e8:c1:1e:6e:ac:51:aa:5f:d0:ed:40:91:28:4f:43:
46:a6:39:19:82:f5:7a:39:ee:e6:12:f6:f5:a3:4a:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:B4:49:1E:3F:96:5B:5F:D5:A8:1C:73:60:E8:1F:F0:CD:B7:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a25ba521-093c-3744-bd5a-6408bd588051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:92:6d:7b:a7:e5:70:2c:e5:68:ba:e5:49:a0:67:5c:5d:21:
84:06:37:07:34:5b:70:be:82:79:82:bb:d4:16:8c:4a:94:f2:
8f:fc:ff:fb:cc:3f:97:53:a1:71:dd:d5:11:e4:04:9f:f5:10:
a6:93:43:34:4d:b9:4e:b6:00:1f:80:95:5d:bc:39:e2:c1:e6:
73:bf:57:6a:ce:0f:d6:bb:eb:84:ed:db:51:53:01:4d:83:7a:
bb:34:c4:b5:f6:84:7f:9a:aa:7e:74:7b:1b:47:14:c3:89:ff:
40:af:c9:90:87:1e:8c:e6:44:73:af:dd:7d:67:b9:e4:9a:32:
bd:a5:51:44:30:2d:8d:41:8c:9e:fe:3b:c0:5a:54:20:de:fc:
4c:77:32:9b:33:9f:94:d1:3a:a0:92:c1:dd:27:44:a7:1f:dc:
89:bc:93:28:c3:df:6e:b6:99:bd:3d:1c:00:17:6c:ad:72:ae:
44:5d:32:8a:ff:23:b5:ef:57:68:60:72:3b:b4:bd:96:86:07:
a4:7d:d0:a2:82:9a:7a:71:91:cb:1d:6f:a1:8c:d0:5c:af:78:
15:ad:15:6b:0b:34:bd:88:c0:44:17:ea:0f:4b:26:5e:7e:51:
c2:09:d6:2a:39:45:20:f6:26:a4:a6:69:de:bf:e8:2e:e5:95:
08:e0:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:30 2025 by rpki-client