Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06e09dc5-34f7-3b16-973e-fbd0576b5c5c.roa
File: 06e09dc5-34f7-3b16-973e-fbd0576b5c5c.roa (raw, json)
Hash identifier: 9wH15gHlqddW6NEMabeqNABTuJ7XohYShHwEPo5J680=
Subject key identifier: EC:C7:21:75:B4:0E:AD:5E:0F:B4:44:43:D6:C1:45:29:1B:C8:BD:C6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285840AE7A987063F0F994056FA200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06e09dc5-34f7-3b16-973e-fbd0576b5c5c.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Mon 28 Apr 2025 04:00:00 +0000
asID: 203758
IP address blocks: 108.165.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ae:7a:98:70:63:f0:f9:94:05:6f:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Apr 28 04:00:00 2025 GMT
Subject: CN=56b555fe-3f38-4a03-963d-3077ddc4209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:26:cf:0e:d5:42:2f:6e:f6:5f:76:67:0b:
e1:f5:54:7c:4c:8b:88:18:48:d9:d1:d3:4d:bf:5c:
3a:e6:39:87:98:47:4b:76:77:b3:44:a6:80:18:2c:
d6:52:02:36:61:7a:5a:8d:7d:1e:ca:b3:90:7c:51:
c2:3d:d4:b5:16:6a:7d:90:fb:f4:45:5e:ab:81:af:
d1:43:56:b9:3b:37:bc:b6:53:f9:36:50:c3:5f:2a:
f3:d1:fd:57:a3:07:7b:ba:71:41:5f:95:80:fe:7b:
89:39:55:e3:4e:dc:27:55:4e:76:32:59:2f:15:7e:
37:58:2b:ff:6d:5b:72:c2:7d:7d:23:fc:3e:43:51:
02:09:69:99:48:0a:39:49:bb:d3:d3:d2:8c:1a:97:
93:a6:db:cb:6f:8e:1b:da:21:cd:fa:ca:e6:c1:cc:
fe:4f:f7:ef:cb:9c:17:3e:cb:56:fb:3a:75:9b:c4:
b5:44:d0:c0:e6:4f:d2:ca:54:20:f5:d1:f9:de:64:
5c:6d:02:29:d7:b2:52:d9:d9:37:10:4c:cc:a9:af:
64:c0:08:c3:5b:cf:aa:0d:8a:95:7a:bf:b0:04:6c:
d2:04:5d:a9:ac:58:0c:a4:a6:b6:11:23:8f:d8:92:
d6:97:38:d5:12:78:c8:6c:ed:b4:10:24:c8:f0:4c:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:21:75:B4:0E:AD:5E:0F:B4:44:43:D6:C1:45:29:1B:C8:BD:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06e09dc5-34f7-3b16-973e-fbd0576b5c5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:98:c4:66:57:56:7c:9e:96:1e:af:7a:b1:18:c6:aa:e0:04:
34:fa:06:a4:69:dd:f5:8e:d3:4b:4f:da:ed:95:32:9f:d5:b1:
3c:ac:af:42:f7:1f:68:a7:b6:38:53:5c:b9:bf:86:26:43:60:
09:84:a5:be:32:90:98:6e:95:a4:4d:83:4a:ff:b6:65:49:24:
12:25:27:98:00:be:e6:2e:79:c0:47:03:2f:00:5c:30:82:07:
ee:60:81:89:36:f8:f9:6f:51:17:09:b8:6b:a1:a4:f7:1d:b6:
2d:eb:e8:07:95:ea:85:57:75:57:3b:19:8d:fe:90:a6:f6:de:
17:14:7a:19:ea:c0:e1:19:0a:9f:da:e8:65:16:10:7c:07:b0:
8c:51:8d:8e:84:04:05:1a:7e:75:0f:9a:d8:ae:c1:3d:7f:0e:
1f:c9:79:f2:91:97:29:2e:43:7d:8c:59:3a:b2:29:45:6e:e1:
88:fd:39:5d:4a:b4:5b:0b:45:8c:f7:89:de:f0:a8:2e:26:2a:
47:9d:d0:8d:f7:2a:72:cd:a6:f5:5d:7d:46:28:ad:a7:97:a9:
4e:44:84:64:4b:f6:00:8d:f1:55:ee:1d:58:b9:8b:aa:22:4e:
ec:42:13:54:6a:93:9f:a9:50:7e:9f:77:1c:05:b6:2f:01:e9:
91:67:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:59 2025 by rpki-client