Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afc7bd10-e824-3d0c-add0-32e710ceca6d.roa
File: afc7bd10-e824-3d0c-add0-32e710ceca6d.roa (raw, json)
Hash identifier: uUWdSD29QiLbOPBdqq8cCL50eSpFpICxKE1pk5Kdeo0=
Subject key identifier: B5:1A:AB:8F:68:67:3F:F6:79:8A:DA:0A:0C:F9:14:14:BB:70:30:79
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858461F4C3FEB53E98D51757DA380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afc7bd10-e824-3d0c-add0-32e710ceca6d.roa
Signing time: Thu 06 Jun 2024 15:36:42 +0000
ROA not before: Thu 06 Jun 2024 15:36:42 +0000
ROA not after: Wed 04 Sep 2024 15:36:42 +0000
asID: 834
IP address blocks: 108.165.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:1f:4c:3f:eb:53:e9:8d:51:75:7d:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 6 15:36:42 2024 GMT
Not After : Sep 4 15:36:42 2024 GMT
Subject: CN=dcfaed21-27a7-45b7-9d92-490c74000e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:57:82:c9:d0:6c:da:16:52:a2:d2:8e:98:
c4:26:d7:dd:21:b6:0c:cd:60:00:ac:a8:9f:50:20:
3a:cb:95:cb:d2:7f:c1:35:de:b8:62:1f:93:4f:d8:
be:98:4a:fc:45:d4:f5:55:91:75:e7:9a:ad:c3:d0:
79:1e:d9:52:df:b9:20:81:af:9e:85:d0:a1:2d:1d:
3f:17:bc:72:25:46:ad:39:f0:86:9e:f4:f5:07:0a:
fe:9a:0a:21:3c:12:e4:1a:4e:5d:db:1c:57:67:3c:
2b:9f:b6:1f:ec:05:8a:14:ef:8a:1f:5e:43:57:6d:
c3:d9:37:db:d6:8a:72:25:8b:90:04:74:9c:63:ea:
6d:d7:bb:28:d5:24:a9:2f:4b:ce:7f:ed:fc:15:ab:
2a:c7:b4:76:50:ca:e0:36:b8:80:46:0b:34:ee:4c:
97:4a:85:52:42:a9:16:4b:87:9b:b9:02:76:d6:c6:
00:b1:15:e5:2a:c1:59:70:85:11:15:dd:a2:ca:7f:
d4:81:4d:6c:c6:23:65:35:95:0e:25:36:3c:5f:0a:
c4:be:05:00:94:10:30:c0:7f:f6:e3:0f:83:2b:29:
d0:1b:36:de:fa:d7:41:70:13:74:cc:f8:80:56:1b:
87:54:41:1a:37:96:e9:33:99:5f:2d:e0:fa:41:a3:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:AB:8F:68:67:3F:F6:79:8A:DA:0A:0C:F9:14:14:BB:70:30:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/afc7bd10-e824-3d0c-add0-32e710ceca6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:9a:97:b7:93:93:c7:12:04:9e:2b:f7:d6:b8:22:04:55:53:
f4:23:a9:23:bc:f2:03:6c:61:95:6a:48:e6:67:79:67:2a:dc:
a5:a8:81:fe:4d:69:a6:4c:72:74:74:36:90:9d:d9:95:cb:42:
75:d9:90:3d:89:d5:30:9e:52:1a:45:7e:07:f7:d3:7b:0a:92:
07:7e:06:a9:1f:be:83:c4:5f:7e:2a:80:9a:c5:46:24:28:28:
e5:51:e0:45:ba:a1:93:72:58:79:e2:4e:8e:c6:a3:1e:43:1f:
be:27:a2:bb:7c:72:c4:e3:9d:98:7f:f9:1c:8c:ae:99:8d:df:
b9:ea:83:a9:1e:ad:91:ed:da:c3:2b:5e:a8:a7:20:b6:07:a0:
a8:c4:4d:5a:e4:d5:59:84:31:03:26:1d:a6:b3:79:a6:5f:dd:
c4:2a:85:d4:45:d9:7c:32:56:8d:c1:f8:ef:8a:39:1d:a5:cf:
38:6f:14:bb:5e:61:0e:3f:88:30:89:c7:8d:c5:c2:15:ee:87:
2b:2c:34:f3:b4:bb:0f:84:ed:97:11:cd:73:ca:1f:06:83:77:
bb:b0:0e:8d:ae:91:5f:62:00:5e:f2:53:1c:2c:11:f4:02:da:
b4:42:00:5b:8a:e1:36:e8:ff:99:a2:f7:2e:59:76:80:2b:48:
35:63:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:26:36 2025 by rpki-client