Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f5e4899-f4a0-385f-ae2f-9c2141389ad0.roa
File: 0f5e4899-f4a0-385f-ae2f-9c2141389ad0.roa (raw, json)
Hash identifier: t6bdgBMzBk5w0CMnU0nBThBXC2nj2LGa9d51abYIyEI=
Subject key identifier: FE:9D:A3:F7:90:AC:96:9B:01:A3:CE:85:49:67:E3:69:9D:DA:5E:B1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858424B8B5F6D20627A4D6D0861C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f5e4899-f4a0-385f-ae2f-9c2141389ad0.roa
Signing time: Wed 21 Jun 2023 16:51:42 +0000
ROA not before: Wed 21 Jun 2023 16:51:42 +0000
ROA not after: Tue 19 Sep 2023 16:51:42 +0000
asID: 834
IP address blocks: 108.165.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4b:8b:5f:6d:20:62:7a:4d:6d:08:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 21 16:51:42 2023 GMT
Not After : Sep 19 16:51:42 2023 GMT
Subject: CN=21cbd503-623a-4d69-9370-ad247ff277f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:c8:b0:e5:c0:67:1e:fd:d7:37:da:25:e6:
68:a4:c3:29:07:87:78:70:5e:63:81:cc:35:24:45:
49:c6:1a:75:25:47:8c:45:99:a5:e2:ff:99:ce:d4:
be:47:61:bb:54:11:c9:e1:5c:af:09:f5:b3:4b:fe:
aa:8a:cf:ba:d5:69:58:ed:70:1b:e3:60:1b:b1:10:
32:f5:b9:44:1e:33:04:20:75:58:b8:86:c9:73:5a:
4d:1f:31:4a:d4:53:24:06:ab:df:fc:86:7c:4b:3c:
15:8e:3b:03:9e:59:d0:2a:8d:fb:af:08:52:e3:12:
07:38:cc:64:84:c8:82:92:1c:14:27:f8:50:a3:f2:
e8:1e:b0:5c:d7:ca:76:60:b1:a7:f6:d9:18:6d:5c:
03:31:45:27:bd:b0:8e:5a:8d:0e:7f:e7:03:2e:e7:
93:8e:11:3e:64:fb:91:f1:dc:e6:78:ea:79:bc:75:
1b:95:cd:62:ff:20:59:7c:fc:71:e6:4b:b5:2c:89:
ef:84:6d:2d:69:55:d8:65:d9:23:fc:9b:8e:8f:06:
5c:fd:06:e8:7c:4c:f2:d7:27:0c:ad:93:9e:d7:db:
1f:50:fc:c7:74:7a:f7:1a:14:c9:37:0a:01:37:70:
e8:25:85:83:9d:eb:96:d8:8f:46:98:3e:fb:9a:31:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:A3:F7:90:AC:96:9B:01:A3:CE:85:49:67:E3:69:9D:DA:5E:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f5e4899-f4a0-385f-ae2f-9c2141389ad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:50:1c:de:4a:a9:d2:f9:a3:79:ab:3e:21:26:a8:4b:ea:3a:
a3:4a:18:36:ce:1a:65:73:09:93:23:3e:aa:db:36:bf:33:20:
6f:ee:d1:a3:f3:42:b4:c1:08:d4:02:42:77:b9:28:ca:25:b0:
e4:00:e8:73:7e:e4:53:1e:85:5e:23:6c:92:54:25:4e:00:7a:
13:f1:66:f9:05:91:6d:00:cf:d1:89:5c:06:be:71:77:51:b5:
63:89:8c:85:b2:5f:4b:ec:b8:de:65:47:83:46:33:d6:38:fb:
0c:15:21:f9:5e:4b:f5:fe:15:68:30:f2:f9:e2:81:b4:12:85:
d2:32:e2:83:f9:fd:69:41:87:43:1f:2d:70:42:25:7d:6b:10:
ca:ad:58:6b:3e:9d:5a:67:b2:38:75:5d:b3:f3:2a:a2:be:67:
fe:26:f9:02:48:57:4c:74:84:fb:d3:f0:bf:9a:d0:5b:ab:f5:
6a:8f:ec:b6:d7:f4:c7:36:55:d8:31:da:56:bf:db:ec:2b:14:
ac:58:4e:81:1d:b8:4e:b3:ef:0e:0a:b7:08:1f:c7:7f:68:14:
39:fe:b7:f2:bf:ce:34:41:6a:86:da:54:df:f0:a8:c5:98:d3:
82:e5:9f:61:9f:68:a1:3a:72:6c:ee:3c:83:4c:e3:b8:af:bc:
92:63:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:57 2025 by rpki-client