Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02a1ab2-67c0-3e8d-8535-54cf7c0a5abc.roa
File: c02a1ab2-67c0-3e8d-8535-54cf7c0a5abc.roa (raw, json)
Hash identifier: nv6ex73sMbaBOQc4lx4xm/GNsyjsKRqhx1lAEVBHl6I=
Subject key identifier: A6:3D:8D:E1:E1:9C:26:F6:78:57:61:22:A6:46:CA:1B:8E:52:E3:2B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848801DCBAF300B381C55718EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02a1ab2-67c0-3e8d-8535-54cf7c0a5abc.roa
Signing time: Fri 10 Jan 2025 17:30:23 +0000
ROA not before: Fri 10 Jan 2025 17:30:23 +0000
ROA not after: Thu 10 Apr 2025 16:30:23 +0000
asID: 834
IP address blocks: 108.165.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:1d:cb:af:30:0b:38:1c:55:71:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 10 17:30:23 2025 GMT
Not After : Apr 10 16:30:23 2025 GMT
Subject: CN=e05c02eb-7836-48f1-9283-094e7968a418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:49:ef:74:f8:f0:e4:c6:d3:ce:3f:64:6e:
fb:ca:ac:4d:d8:7b:8c:dc:83:43:90:91:ca:43:72:
75:22:25:f4:a2:b9:35:20:5c:2d:6b:e5:7f:97:69:
13:ed:59:2f:31:07:0f:de:c5:5f:36:13:2c:11:81:
23:4d:75:7e:1b:a5:d0:7f:cb:f7:70:32:66:87:ee:
c5:07:7a:b5:90:33:3f:90:39:cd:da:c4:2b:76:0c:
85:60:56:46:67:63:ca:75:10:40:af:8b:88:e3:f1:
bb:60:78:84:e2:24:17:72:46:0c:77:b4:dd:cd:ae:
df:43:c9:f7:46:d3:1b:de:ba:5a:5f:93:b0:36:4f:
ea:07:56:f0:f5:a2:a2:aa:35:8f:e3:85:cd:b8:01:
58:60:fe:e9:5d:6b:29:61:a2:0b:81:be:3a:f2:15:
73:b6:ae:31:83:bd:81:94:cf:c5:c7:2a:b9:9c:54:
74:47:84:37:87:00:cb:8d:ea:3d:da:5f:6d:93:52:
6c:8e:6c:a1:a1:01:ac:84:b8:d7:81:d2:c3:ed:12:
46:c8:4c:7c:3e:47:9a:fa:47:05:68:56:90:da:9b:
ad:94:b8:e5:38:d5:a7:3e:80:c7:c3:b0:b8:9b:11:
19:58:43:b2:63:6d:2c:4c:69:2f:5c:4c:d2:87:02:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:8D:E1:E1:9C:26:F6:78:57:61:22:A6:46:CA:1B:8E:52:E3:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02a1ab2-67c0-3e8d-8535-54cf7c0a5abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:75:89:8e:f1:75:83:d1:b9:82:5e:ae:1a:3e:e2:f7:57:6f:
61:c2:ee:fd:67:75:55:bf:83:97:25:69:ad:4b:b5:d6:5e:f9:
51:93:cd:e1:62:fc:d1:0f:15:77:73:4c:83:12:77:8e:22:ca:
c0:8a:7f:f3:5e:6a:0c:7c:67:4f:20:a7:4f:c9:ac:ca:68:33:
72:50:51:ab:02:fd:99:a9:30:ee:07:1f:72:cc:2f:ea:aa:d2:
d8:42:12:ec:81:53:c1:3b:79:69:0c:81:d0:ee:16:a7:c7:fa:
7d:c5:24:b9:db:9d:dd:14:54:5f:b2:71:83:43:9d:a9:64:17:
7a:c5:d9:31:eb:c8:3b:f4:c6:d6:d4:bd:de:30:97:4c:f8:67:
b2:f1:0c:ab:3d:24:94:00:eb:1e:53:2e:4d:5e:4d:91:a2:92:
69:b8:da:15:71:30:b3:a1:91:77:77:2e:be:f5:a5:5b:77:d9:
be:05:c3:31:ca:85:88:a1:a0:f1:48:1f:0d:b3:b8:aa:6a:ed:
ac:b3:a4:92:14:4e:ba:3f:fc:9a:c2:8d:e0:d6:da:11:4b:41:
cb:f8:79:8c:46:9c:83:32:80:91:11:0a:82:42:c2:a7:f3:40:
e9:fb:a7:7b:32:9a:06:8a:7b:18:ed:20:3c:f3:27:71:64:94:
6c:52:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:33 2025 by rpki-client