Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c067f456-b33a-3d59-939d-52b954b4d2bd.roa
File: c067f456-b33a-3d59-939d-52b954b4d2bd.roa (raw, json)
Hash identifier: hF7cqJaSakB2Li+gpoupfkNfxd+GB9GvFDqymt+lBuc=
Subject key identifier: 37:88:68:9C:9A:D1:E1:3A:1A:3A:73:DF:22:6D:62:FD:54:CE:F2:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858488DFF8169EA14DA5078F85360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c067f456-b33a-3d59-939d-52b954b4d2bd.roa
Signing time: Wed 15 Jan 2025 16:50:41 +0000
ROA not before: Wed 15 Jan 2025 16:50:41 +0000
ROA not after: Tue 15 Apr 2025 15:50:41 +0000
asID: 834
IP address blocks: 108.165.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ff:81:69:ea:14:da:50:78:f8:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 15 16:50:41 2025 GMT
Not After : Apr 15 15:50:41 2025 GMT
Subject: CN=d1726f29-43c1-4e6e-a6ae-7ae67781c6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:4a:a1:50:dc:68:72:bc:ea:28:43:aa:03:
27:10:be:fc:3f:d9:14:0d:fb:df:69:61:99:0c:53:
8a:b8:ec:0f:8b:23:a6:86:2e:ab:01:fd:ec:e3:11:
3c:d1:1a:c4:b5:ff:9b:90:3e:26:c0:13:d9:19:79:
6d:c3:27:91:92:a8:35:a4:5f:8e:42:28:3b:2d:4c:
de:b4:92:48:55:3b:36:8b:5d:d8:50:97:7b:93:a8:
9f:d3:d3:82:f8:ac:d6:4c:5f:43:c4:40:cb:83:e6:
3c:07:83:56:cd:5b:ad:be:6f:7c:90:fd:28:1e:e0:
a0:fc:82:46:c8:3b:9f:d3:3d:4b:df:7e:a4:69:bf:
fe:bf:83:14:9c:6a:6f:8d:9d:f8:80:45:c0:b3:30:
32:3e:ca:d0:38:41:fd:3c:c1:24:e0:d0:17:77:13:
7a:04:15:19:62:0c:64:64:ff:43:6b:86:33:46:13:
14:37:68:01:ff:72:46:74:79:93:e6:27:fe:57:34:
02:85:fe:63:1e:16:c2:b7:fc:99:4f:61:26:1c:4b:
e5:54:4b:ef:fa:dc:50:ef:e5:aa:d1:2c:03:69:09:
26:ee:a6:ef:cc:58:8a:88:b7:ad:f2:fd:ef:cf:85:
1f:9f:eb:7c:19:35:64:99:80:ba:90:90:2c:52:c0:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:68:9C:9A:D1:E1:3A:1A:3A:73:DF:22:6D:62:FD:54:CE:F2:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c067f456-b33a-3d59-939d-52b954b4d2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:a4:b0:e7:2a:7a:03:71:be:dc:9d:8a:e4:2c:d0:b8:e7:4e:
28:81:c5:a7:f8:79:ae:fb:73:65:16:8d:a7:4d:50:f8:c1:f8:
63:a5:dd:90:3c:66:e5:36:3a:8b:ea:f9:7a:84:c1:97:b9:87:
f3:42:52:0c:8c:25:e7:26:a8:04:6e:ec:a8:03:ea:32:84:5e:
2d:47:42:2d:fd:58:d7:8a:7c:2c:4c:d6:66:21:38:43:2f:29:
3b:60:67:a1:1f:00:fe:97:ff:ce:06:46:66:a3:22:96:6c:8f:
67:f1:f6:58:6c:bf:86:06:d5:6a:2a:0e:e0:4a:6e:bd:bd:0b:
ce:73:91:9f:53:a9:50:f0:e1:46:a3:0f:ca:4a:c4:03:ec:cd:
7e:2e:f1:12:9b:dc:e1:89:73:0e:7c:b4:3f:d7:47:9a:ee:89:
ef:0e:02:0a:33:04:21:70:3d:31:e4:b5:c2:a0:57:6f:01:54:
23:a7:3b:e8:99:28:b7:4b:29:6a:b5:c6:86:8d:6f:d0:6e:d7:
b5:7e:7a:61:d3:33:bf:e4:cd:cf:0b:09:87:6c:d4:ab:5f:50:
79:d7:18:93:e1:dc:5f:52:d3:0a:ca:06:19:5f:df:e6:59:f4:
c1:a4:78:96:64:ae:0c:94:5d:a2:14:e8:8e:37:b7:69:f0:d5:
da:52:91:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:09 2025 by rpki-client