Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf5da21a-fbb7-3828-9825-710f2c50f492.roa
File: bf5da21a-fbb7-3828-9825-710f2c50f492.roa (raw, json)
Hash identifier: Hxtze4EVZT6kRutxZbFSDX0b8ZeHaOUgIJ75Yt5HcaI=
Subject key identifier: 8F:A8:6E:48:8D:D0:4B:B4:BD:2B:67:5C:0D:A9:36:0E:A5:14:D8:C3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848EA7DCA6961049410BB4911DF
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf5da21a-fbb7-3828-9825-710f2c50f492.roa
Signing time: Mon 17 Feb 2025 19:59:30 +0000
ROA not before: Mon 17 Feb 2025 19:59:30 +0000
ROA not after: Sun 18 May 2025 18:59:30 +0000
asID: 834
IP address blocks: 108.165.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ea:7d:ca:69:61:04:94:10:bb:49:11:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 17 19:59:30 2025 GMT
Not After : May 18 18:59:30 2025 GMT
Subject: CN=298dfdde-270f-4db9-b17b-ac63666202f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:ff:fb:1c:3f:d3:d7:0e:9e:40:c9:9b:83:
7c:cd:81:5c:2a:93:04:c1:64:eb:42:ff:1d:ec:ff:
bb:25:b7:ed:75:24:64:4d:f1:c3:26:15:17:62:fd:
d2:20:cb:e7:b2:5d:fa:b4:13:fd:37:b7:cc:c9:78:
bd:d2:93:ae:10:bc:1b:8f:70:b3:42:b9:98:ad:8f:
93:20:1f:2f:c6:a6:63:16:48:3c:3b:e5:c1:b0:75:
bd:35:72:67:3f:b2:17:d9:54:05:74:df:b4:dc:00:
75:1e:21:83:ff:cc:74:6b:d8:4f:c9:5a:4e:81:e9:
9c:60:0b:dc:7a:5e:2e:d1:7c:f4:61:ff:58:8f:c0:
4f:34:05:95:75:1a:8e:d5:a0:74:93:c2:f5:06:55:
22:b9:82:4a:4a:69:6b:63:dd:30:46:9b:da:cc:21:
ee:29:4d:c4:60:2e:a2:49:73:9b:d3:5e:6f:0e:6c:
59:05:44:17:bc:67:92:51:98:07:d8:1f:e0:e9:82:
4b:af:af:8f:74:31:1e:d2:ae:ca:94:6c:6f:6d:13:
cb:a0:47:3b:7b:3e:4e:c5:86:d4:ee:cc:cb:2f:89:
2d:3c:53:4a:0c:b6:34:fb:5b:a4:9c:6f:56:7e:2a:
df:7a:f5:0d:0f:27:d5:b5:a7:c0:e0:81:65:a4:21:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A8:6E:48:8D:D0:4B:B4:BD:2B:67:5C:0D:A9:36:0E:A5:14:D8:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf5da21a-fbb7-3828-9825-710f2c50f492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f0:a7:f2:fe:4a:34:c0:6d:27:b3:23:3c:ac:f2:4e:08:5b:
5f:2f:ba:fb:02:a5:35:1e:21:48:83:fc:29:64:3e:74:20:93:
20:03:a9:64:bb:d4:df:c4:59:01:f3:40:3f:d9:19:7f:0e:8d:
50:79:de:8f:1b:02:8d:8a:b7:91:2a:5f:fd:ec:52:b4:11:83:
82:1b:05:26:b3:9c:c3:0f:5f:8b:03:b5:7f:b2:a1:41:c9:89:
d1:2a:9d:7f:af:6e:41:d3:68:21:bd:62:2a:bd:8d:83:25:90:
84:b2:04:cc:88:12:db:aa:73:86:2b:f6:77:17:63:6a:5b:88:
11:ad:78:ef:88:df:c6:98:94:86:38:c2:2a:20:64:6d:96:c5:
f7:8d:c0:00:79:d7:de:9f:75:1b:3f:01:fa:40:20:e4:3c:da:
69:3e:a0:f5:68:9b:58:e8:52:55:76:f1:e3:6b:fc:da:c1:69:
80:ee:83:83:2f:13:40:b1:5f:4f:64:0a:ca:ab:df:d3:ef:0f:
c8:d6:90:dc:77:dc:9c:08:b6:ac:b2:c8:5c:3b:c6:3e:3d:15:
ad:3c:3b:b5:ce:41:cf:80:06:ec:0d:2d:8e:5b:6e:3b:3e:f8:
e3:0a:f0:4c:b6:77:5e:f6:20:6d:94:71:22:60:0c:7f:45:42:
12:9b:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:59:26 2025 by rpki-client