Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab36d1cf-ba13-3871-9763-8775a1313fd7.roa
File: ab36d1cf-ba13-3871-9763-8775a1313fd7.roa (raw, json)
Hash identifier: x3z1b9v0588yfYLEpwT1/yH4oJ91M82w3LP6pYuIHXg=
Subject key identifier: 5C:44:13:31:D4:87:36:A2:8C:62:2E:34:A2:42:6F:E5:90:F3:4D:87
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858463CAC8967A4A3593C18AAD3A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab36d1cf-ba13-3871-9763-8775a1313fd7.roa
Signing time: Mon 17 Jun 2024 04:09:09 +0000
ROA not before: Mon 17 Jun 2024 04:09:09 +0000
ROA not after: Sun 15 Sep 2024 04:09:09 +0000
asID: 834
IP address blocks: 108.165.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:3c:ac:89:67:a4:a3:59:3c:18:aa:d3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 17 04:09:09 2024 GMT
Not After : Sep 15 04:09:09 2024 GMT
Subject: CN=b57884da-40a8-4c9b-972d-d0bcb37499fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:68:a1:c2:14:f2:78:d0:40:18:4b:ec:3e:
bb:61:99:0c:42:23:f1:7c:ad:a1:03:a7:15:82:04:
4c:e7:49:d8:53:55:be:9c:a2:3f:d6:fb:4c:88:55:
13:da:2d:84:98:0f:cd:85:90:95:5f:fb:19:6a:20:
25:ba:61:24:02:67:94:0b:25:63:b0:e6:9a:b4:a8:
2d:38:1c:dc:d7:6e:d6:41:48:fc:a7:2c:07:12:7b:
98:01:85:5f:4c:2a:a1:36:05:ec:53:4a:dd:19:22:
c9:52:a5:5a:a8:9d:03:8f:4b:36:8f:32:0b:f9:dd:
14:65:c9:eb:7d:a0:8d:8c:88:36:f5:5b:52:00:6c:
d5:1b:12:17:4f:7d:9c:67:31:03:fd:4d:fd:e7:c5:
20:9f:6b:77:14:54:9f:fa:33:bc:fd:68:2d:c4:6d:
35:1b:04:c2:3f:c9:d4:3d:71:e8:fe:db:fa:61:ef:
49:25:48:45:dd:a8:6f:30:bd:b3:22:66:68:69:3f:
54:6f:6d:37:f7:d9:30:6f:e9:21:e8:c8:16:83:e2:
6f:70:d2:cf:92:b1:41:40:45:53:74:d1:68:79:d8:
b3:8e:d8:6a:17:ec:52:74:4b:03:6d:9a:d5:bd:e7:
23:41:12:37:24:fd:d1:74:11:79:f3:4a:6f:88:cd:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:13:31:D4:87:36:A2:8C:62:2E:34:A2:42:6F:E5:90:F3:4D:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ab36d1cf-ba13-3871-9763-8775a1313fd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:28:53:99:3c:dd:ee:28:ec:05:88:da:74:b0:a0:b0:f2:bc:
2e:95:e4:62:4b:8e:b5:0a:1c:ad:5d:25:41:d3:72:98:b0:7d:
03:3b:22:2a:67:46:33:c3:03:05:f2:a4:a8:4d:eb:fd:02:4f:
93:3f:f5:0c:fc:00:a9:ce:04:bd:b4:77:92:c1:78:39:89:59:
a1:f6:12:8b:f8:ea:74:41:1b:e8:e5:65:b4:9b:14:cd:fc:aa:
ec:6e:3c:ac:18:30:4a:0d:a9:24:76:40:70:07:58:aa:e0:de:
46:8c:ed:bd:21:85:99:ca:3b:4d:b6:ab:6d:10:20:59:ae:7a:
3f:51:57:33:ba:60:85:10:8e:9c:06:9c:3d:ec:29:a4:16:13:
b5:ed:28:8f:f6:6e:22:c2:e5:66:e1:8f:eb:0e:3f:c3:9f:1b:
6d:95:5c:85:ef:6b:d2:a5:45:41:6e:3a:8c:0e:e4:b7:55:e2:
5b:86:05:1a:85:67:d2:13:e2:37:8e:96:c1:73:b9:f3:fc:e3:
2c:db:73:ba:71:2e:d5:37:68:9a:cd:5d:0a:54:e3:40:33:a3:
b7:fa:98:5d:cc:1d:cb:00:6d:b3:38:4e:a3:3d:cc:9f:88:13:
6b:d8:e8:42:1a:c2:55:f9:f1:e0:12:e4:5d:91:55:25:eb:10:
53:6d:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:12:19 2025 by rpki-client