Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14060dc2-6cc3-33f4-8896-3c2209a1cd1e.roa
File: 14060dc2-6cc3-33f4-8896-3c2209a1cd1e.roa (raw, json)
Hash identifier: oBzsmaWOgxTTG7eNqq8lL8Io8h6Z0JtYxFdf50Big5E=
Subject key identifier: 71:A9:F5:3F:F7:3A:E5:00:81:0E:53:7F:76:35:FF:58:B5:64:AE:38
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858408D4DA129A8790D151C183180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14060dc2-6cc3-33f4-8896-3c2209a1cd1e.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Wed 16 Apr 2025 04:00:00 +0000
asID: 200482
IP address blocks: 108.165.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8d:4d:a1:29:a8:79:0d:15:1c:18:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Apr 16 04:00:00 2025 GMT
Subject: CN=c2bded4a-c116-459c-86f6-9f40fef50a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:b6:bf:06:fc:e7:b8:6d:20:6e:35:cf:a3:
ea:51:d2:1b:4f:f7:9f:75:20:86:0b:4e:9b:0a:16:
a7:ff:c0:77:3a:43:b4:a7:7b:6c:25:c7:55:72:f8:
0e:a5:10:0c:7a:cd:41:3e:a2:5e:be:dd:c2:04:e1:
79:ab:92:46:22:9f:30:4c:57:ae:56:06:f3:83:b6:
85:cf:cb:dc:8f:b0:c7:1f:5c:40:ae:5f:2e:65:b2:
0e:c2:27:cf:92:9e:e7:dc:95:8c:b9:60:0e:3b:c8:
3c:38:27:b5:85:61:ab:43:0d:75:50:2e:a9:c3:33:
2a:03:c3:aa:12:98:a9:ce:0a:db:8b:fc:c0:c7:ba:
aa:d5:65:41:8b:41:a4:0f:c9:4f:e3:cf:52:75:55:
2d:b6:34:af:a1:f3:4d:3a:d4:a4:50:fb:92:04:1c:
54:9d:19:ae:60:0e:64:49:58:58:f4:9f:f7:da:08:
be:9c:3b:83:b3:4b:e9:be:24:1a:68:5d:17:04:a4:
43:c2:5d:c1:91:bc:ef:86:89:f0:bc:b8:51:ea:1a:
93:7e:0d:88:5e:f9:84:63:6e:08:45:49:b9:22:e0:
7b:b6:83:85:39:1f:1f:18:09:54:6e:db:91:35:9b:
b0:df:ef:e2:8a:c6:8b:5e:72:9c:ff:87:20:7d:06:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A9:F5:3F:F7:3A:E5:00:81:0E:53:7F:76:35:FF:58:B5:64:AE:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/14060dc2-6cc3-33f4-8896-3c2209a1cd1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:26:91:49:dc:2e:18:36:2e:59:e2:e7:32:b4:11:20:33:2e:
6a:aa:62:01:a0:66:25:f0:e4:42:b6:b4:34:3e:78:4f:b3:9f:
5f:0c:d8:16:1a:28:5b:35:3f:84:9e:c6:57:a1:83:48:e9:70:
10:09:5d:a6:96:8c:d7:72:d1:73:63:f0:a0:b7:de:70:2e:5e:
23:31:3b:8d:74:14:1b:fb:5b:ac:d6:91:51:eb:f9:aa:18:d5:
69:f8:9d:7f:66:61:24:bb:42:41:9e:ed:49:9d:7e:37:b6:aa:
96:ba:06:2b:03:d7:05:3d:56:65:70:10:9c:15:af:5b:70:6d:
b6:ef:f1:82:d4:b1:15:95:22:81:a3:cd:85:8f:ae:29:5c:c2:
b5:70:ac:18:b0:a7:93:5d:e7:b1:6d:ba:77:1a:21:8c:a0:30:
c3:04:88:a5:92:dd:18:87:17:6c:04:70:84:f9:49:d1:f1:92:
69:c4:ca:34:40:99:58:26:7e:df:d0:9d:67:3f:10:e0:df:56:
9a:c9:00:92:7c:d3:80:e8:35:db:ae:4d:ff:d6:a3:02:29:73:
58:29:37:82:af:1c:3f:c9:91:df:11:1b:90:6c:b4:7b:c7:0e:
41:d2:78:4d:ea:33:73:73:09:e3:c7:3a:f5:f2:fe:72:cc:ff:
d7:fc:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:21:05 2025 by rpki-client