Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b248b129-ad3d-352a-958d-3b2a87ba0163.roa
File: b248b129-ad3d-352a-958d-3b2a87ba0163.roa (raw, json)
Hash identifier: TJiA9/TF5VwZS2UsHQigaujUluLrtP/+ZJziAzYtLMw=
Subject key identifier: 4D:F9:34:1C:D9:7B:7E:00:C6:F6:B4:35:47:DD:77:3F:78:82:EA:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846102E93977390E88785766340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b248b129-ad3d-352a-958d-3b2a87ba0163.roa
Signing time: Sat 01 Jun 2024 05:39:47 +0000
ROA not before: Sat 01 Jun 2024 05:39:47 +0000
ROA not after: Fri 30 Aug 2024 05:39:47 +0000
asID: 834
IP address blocks: 108.165.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:10:2e:93:97:73:90:e8:87:85:76:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 1 05:39:47 2024 GMT
Not After : Aug 30 05:39:47 2024 GMT
Subject: CN=3a68f632-3e0d-44ac-ac82-927da653b4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:3f:b0:87:0c:64:15:f6:3d:bc:6e:6e:5c:
42:2a:5f:11:0a:8e:a2:b9:57:43:a0:15:1b:55:ce:
07:53:c5:06:ff:17:52:99:cb:37:40:da:93:9f:17:
df:72:9d:f5:09:04:bc:59:c5:81:ce:5e:de:fa:06:
b7:5c:bd:ee:d7:b7:1a:6d:4f:4a:8e:98:a1:41:fe:
5a:02:29:24:51:7d:12:c6:85:d2:c5:76:25:6b:b5:
1e:ad:70:2d:a5:01:ce:08:c2:8f:c0:cf:fa:37:55:
56:68:cd:c3:8e:7f:6e:58:4b:b7:31:93:98:d0:1a:
48:15:5e:f0:6f:86:2b:e2:1d:02:69:39:bc:0e:e3:
a5:21:b8:43:f4:07:44:99:d2:9e:25:7b:a6:25:16:
47:a3:55:a6:36:53:92:b7:01:e8:c3:22:a1:02:8d:
8f:e7:a4:e6:80:65:40:5a:b3:1f:44:a1:60:62:b2:
f8:6c:06:b4:1d:25:83:36:86:0b:ac:93:42:ac:ed:
cd:a7:52:14:70:e4:b4:c1:4b:96:25:4a:76:3b:a9:
dd:a7:b0:e6:aa:27:24:6a:b1:11:a6:9c:5d:ea:96:
f0:01:cc:b1:97:7d:44:8f:98:f6:f5:3f:57:7a:37:
bb:20:9e:8e:ee:40:e3:a5:6f:9c:53:86:39:ae:ea:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:34:1C:D9:7B:7E:00:C6:F6:B4:35:47:DD:77:3F:78:82:EA:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b248b129-ad3d-352a-958d-3b2a87ba0163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a8:a2:1d:42:3a:8a:b7:d5:a8:5f:dc:53:a4:79:04:d0:ee:
89:51:60:27:6a:c5:48:d6:cd:52:82:26:bf:75:e4:d7:4e:dd:
e9:a6:02:9c:91:b2:84:a8:4e:fe:9f:9d:ac:9e:3b:91:3a:15:
d9:0f:fe:45:6a:0b:4b:86:fc:a4:2d:0a:d6:ff:13:0b:b3:e4:
85:4a:3b:41:92:ee:a9:57:e8:48:47:41:fa:0e:0f:a2:84:7f:
b9:45:26:d4:52:17:8e:90:08:a6:f1:91:04:ea:6e:c7:35:0b:
db:7c:0f:bd:4b:1d:4d:e4:d5:42:fb:d1:66:38:ce:67:0b:fb:
66:b1:bf:be:78:ba:7d:a2:a3:48:8d:d2:9e:15:8b:4a:ff:1b:
c5:6e:7d:8c:dd:ff:aa:e8:d7:19:84:75:9d:ed:f0:71:5a:76:
0a:9f:ca:40:24:f0:49:13:23:8d:78:9b:9a:79:57:21:67:4e:
6d:56:99:b5:dd:cf:49:a1:7c:e5:39:c7:fa:1a:15:cf:09:0c:
df:74:fd:81:82:01:d4:d8:1c:82:79:67:55:3b:f5:a6:3c:ee:
cd:33:a6:5e:3c:e2:12:76:04:b4:e0:54:5f:dc:cf:ab:c1:c0:
47:dd:a8:be:c3:f4:39:0c:4f:0d:46:80:a7:08:26:0d:03:48:
76:b5:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:14 2025 by rpki-client