Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2a399f2-2563-37f8-95eb-38c72282e0d0.roa
File: f2a399f2-2563-37f8-95eb-38c72282e0d0.roa (raw, json)
Hash identifier: 1k0sLaH5i8kNjr0DG58zoMN3ab3TO/SNZEjKVniDXf8=
Subject key identifier: 7F:2C:9D:91:55:E1:93:E6:38:AC:54:FC:DC:0E:28:4E:C6:C7:B6:3B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D6BB598763A4F8A1AA8826C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2a399f2-2563-37f8-95eb-38c72282e0d0.roa
Signing time: Mon 10 Feb 2025 18:07:22 +0000
ROA not before: Mon 10 Feb 2025 18:07:22 +0000
ROA not after: Sun 11 May 2025 17:07:22 +0000
asID: 834
IP address blocks: 108.165.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:bb:59:87:63:a4:f8:a1:aa:88:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 18:07:22 2025 GMT
Not After : May 11 17:07:22 2025 GMT
Subject: CN=a6c088a1-edf2-4017-9efe-c490b9e14b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:2e:5d:52:68:7b:54:cb:c8:20:cf:ef:21:
c2:a5:4a:67:64:16:36:70:5b:6b:b1:df:af:94:9c:
95:77:fe:d9:d2:a8:bc:b8:16:4b:e6:a5:45:d3:f1:
77:12:85:43:ac:0a:91:e1:fe:23:7f:38:7f:df:86:
36:ff:fd:94:d6:67:24:54:6e:f6:22:ad:f9:8b:4a:
7c:f5:8f:df:e9:f4:b5:ec:ee:50:d4:f6:b0:76:d5:
2d:ec:1a:24:98:a0:af:4a:5b:01:45:df:9c:c2:78:
5a:a7:e2:39:f8:17:74:7c:9d:33:0a:de:13:15:91:
25:9e:6c:b1:8f:b5:89:6d:b9:11:59:e6:4e:76:a5:
48:38:e0:bc:5d:c4:e4:80:4a:cb:a6:f6:b4:3f:0e:
d4:70:c6:2c:2b:32:0c:6a:61:f4:35:69:02:8d:62:
16:22:fc:ab:15:bf:b5:dd:e7:af:e9:c0:e7:3f:fe:
37:b1:af:73:c1:5c:0c:1f:4e:a8:7a:5e:a5:70:61:
81:2b:f3:36:c9:ff:e3:4d:11:7c:35:15:43:59:4f:
d5:ef:2a:f2:95:5f:86:f7:68:0d:d6:5f:15:39:bb:
86:c1:a5:6a:0e:6b:54:3d:68:e6:c1:9a:52:ba:a0:
3b:a5:c7:c8:1b:38:0e:96:a6:c0:32:81:14:0d:4d:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:9D:91:55:E1:93:E6:38:AC:54:FC:DC:0E:28:4E:C6:C7:B6:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2a399f2-2563-37f8-95eb-38c72282e0d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:30:8a:2f:d4:f3:94:1e:92:1a:4a:fc:11:5d:c2:f1:95:c7:
10:5d:39:97:a2:ba:8e:63:61:bb:54:06:15:11:50:51:ef:84:
d7:12:b3:46:bb:f3:e1:79:1e:53:d9:ab:0b:4e:c4:8c:8c:90:
e2:48:a8:93:1f:1a:6b:e7:e8:47:5c:be:4c:e6:20:32:28:5b:
1e:f3:69:35:35:a9:0e:78:77:74:60:5b:5f:fa:c8:22:b8:d8:
c4:c9:44:4d:bd:53:78:97:9d:40:e0:58:e0:39:8a:fa:79:61:
a5:b2:4b:37:fc:99:18:ac:81:dc:f8:42:58:0d:e9:4e:9b:86:
37:aa:ee:24:2b:8d:37:28:4f:d0:87:93:75:c7:35:a2:b5:cd:
db:08:13:c5:90:df:dd:70:78:68:06:69:c3:5f:79:11:9a:39:
51:97:2a:89:9a:26:27:45:af:68:04:a2:96:57:d0:04:05:f0:
62:67:ee:90:fb:e6:30:38:b7:80:c7:cf:18:14:cc:97:18:a7:
15:a8:0f:77:fc:e7:53:3e:85:6d:0e:4f:fc:76:7f:e5:5c:dd:
2e:40:3c:86:fa:cb:f8:10:d5:de:5f:e0:79:8e:a8:ee:f2:e3:
1e:11:1c:f8:3c:83:da:6b:22:11:7d:71:39:bd:17:93:8e:25:
02:0d:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:52:37 2025 by rpki-client