Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c826b78-3a2c-3e1f-b46e-9f23bdf2a992.roa
File: 0c826b78-3a2c-3e1f-b46e-9f23bdf2a992.roa (raw, json)
Hash identifier: YDXLkEjc962+Qat5+uRNMVOFVFspE+iRFzD0h45jn2c=
Subject key identifier: 70:83:B1:60:6E:D5:05:AD:93:42:7E:BE:BE:01:B5:4D:C2:AA:CA:7D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584362B5C1F5671F77C28F797B40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c826b78-3a2c-3e1f-b46e-9f23bdf2a992.roa
Signing time: Fri 29 Sep 2023 16:47:38 +0000
ROA not before: Fri 29 Sep 2023 16:47:38 +0000
ROA not after: Thu 28 Dec 2023 17:47:38 +0000
asID: 834
IP address blocks: 108.165.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:62:b5:c1:f5:67:1f:77:c2:8f:79:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 29 16:47:38 2023 GMT
Not After : Dec 28 17:47:38 2023 GMT
Subject: CN=48b3f829-9d9d-495d-9a62-9ee5d91e0208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:8e:3f:a7:1d:5c:52:9d:88:d1:89:4f:e0:
65:9b:f7:ce:bb:e4:f0:06:6b:09:c5:40:21:35:43:
96:01:c6:0d:33:12:4c:96:53:c2:50:70:21:9e:e0:
31:34:38:e9:2e:fc:6a:7f:90:0a:d8:2c:8d:f1:1d:
40:53:62:59:12:89:42:42:f9:d3:bc:93:20:e0:9e:
44:65:55:62:e5:58:f3:5a:ec:fc:53:64:e1:b8:e4:
13:8d:08:d1:a0:91:a9:3d:09:6d:7b:c1:9d:d7:e1:
6e:6b:f6:8a:d2:d8:d7:2e:07:e8:3a:7b:0a:b3:7a:
24:d1:56:e6:34:5c:db:0e:04:a3:55:9c:84:19:72:
b5:7f:57:03:ce:1b:a1:3f:7e:c9:98:0c:72:0f:93:
9d:08:48:52:49:8f:d1:f3:3f:d4:26:b1:8e:ac:f3:
25:30:59:31:67:f7:fd:d8:c9:42:35:6e:de:ff:10:
02:97:f7:78:50:5a:f0:e6:c5:58:db:2b:ed:f4:20:
a6:5d:b9:8c:c3:75:b9:5d:a0:e8:68:2a:cf:12:56:
96:02:1a:31:1f:90:b4:39:ca:bd:fc:72:3c:b3:ad:
b5:d2:3f:2d:10:95:b2:c1:bf:ca:ad:55:df:19:a8:
08:cc:f9:d3:b5:4c:00:9b:65:72:b4:14:29:b7:00:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:B1:60:6E:D5:05:AD:93:42:7E:BE:BE:01:B5:4D:C2:AA:CA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c826b78-3a2c-3e1f-b46e-9f23bdf2a992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:60:27:29:80:1d:b3:8a:0b:fb:48:ea:27:5e:f6:5a:24:90:
e2:45:ad:8f:c2:91:fe:37:83:c9:9e:41:ec:fc:24:a1:73:c3:
df:95:b9:3c:08:bd:ae:e5:7e:22:be:26:0c:a3:ee:1e:a0:9e:
45:c8:6d:e7:2c:d7:fb:7c:4b:68:41:e1:53:80:87:97:20:9d:
0a:ad:b9:9f:34:cc:14:59:c0:a1:ee:4b:f5:e6:3a:30:3a:32:
a3:69:1e:58:6c:22:91:32:90:a5:e8:18:7e:aa:e9:8e:c9:41:
e4:ed:11:36:85:d7:ba:41:44:b6:d8:54:fa:5f:b0:44:6b:a3:
6e:3f:f2:ec:22:0c:e0:ab:10:b8:3d:d9:fd:06:61:2a:27:94:
0e:45:94:5f:53:f4:5f:bc:55:e1:66:db:1a:8a:57:83:1b:97:
b6:b5:ac:e5:b6:b4:f0:96:4d:3d:a5:77:88:f6:67:a8:02:d2:
c3:9c:21:62:86:98:05:45:0a:9c:c5:ff:45:49:e1:59:bb:b3:
a6:d7:3f:cd:b6:af:26:87:79:ba:dc:5a:d3:d5:51:6a:74:5a:
93:e5:85:9f:29:7b:15:49:87:61:c5:19:8a:59:f7:51:72:e6:
32:b5:99:72:36:4d:ff:6b:b8:0d:9e:a0:0a:11:fb:a0:e5:b3:
eb:0f:df:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENitcH1Zx93wo95e0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkyOTE2NDczOFoXDTIzMTIyODE3NDczOFowLzEtMCsGA1UEAxMk
NDhiM2Y4MjktOWQ5ZC00OTVkLTlhNjItOWVlNWQ5MWUwMjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYKOP6cdXFKdiNGJT+Blm/fOu+TwBmsJxUAh
NUOWAcYNMxJMllPCUHAhnuAxNDjpLvxqf5AK2CyN8R1AU2JZEolCQvnTvJMg4J5E
ZVVi5VjzWuz8U2ThuOQTjQjRoJGpPQlte8Gd1+Fua/aK0tjXLgfoOnsKs3ok0Vbm
NFzbDgSjVZyEGXK1f1cDzhuhP37JmAxyD5OdCEhSSY/R8z/UJrGOrPMlMFkxZ/f9
2MlCNW7e/xACl/d4UFrw5sVY2yvt9CCmXbmMw3W5XaDoaCrPElaWAhoxH5C0Ocq9
/HI8s6210j8tEJWywb/KrVXfGagIzPnTtUwAm2VytBQptwCilQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCDsWBu1QWtk0J+vr4BtU3Cqsp9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGM4MjZiNzgtM2EyYy0z
ZTFmLWI0NmUtOWYyM2JkZjJhOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBgJymAHbOKC/tI6ide9lokkOJFrY/Ckf43g8meQez8JKFzw9+VuTwI
va7lfiK+Jgyj7h6gnkXIbecs1/t8S2hB4VOAh5cgnQqtuZ80zBRZwKHuS/XmOjA6
MqNpHlhsIpEykKXoGH6q6Y7JQeTtETaF17pBRLbYVPpfsERro24/8uwiDOCrELg9
2f0GYSonlA5FlF9T9F+8VeFm2xqKV4Mbl7a1rOW2tPCWTT2ld4j2Z6gC0sOcIWKG
mAVFCpzF/0VJ4Vm7s6bXP822ryaHebrcWtPVUWp0WpPlhZ8pexVJh2HFGYpZ91Fy
5jK1mXI2Tf9ruA2eoAoR+6Dls+sP37s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:34:09 2025 by rpki-client