Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a767496-3eee-3733-a117-c39dc33c7b52.roa
File: 1a767496-3eee-3733-a117-c39dc33c7b52.roa (raw, json)
Hash identifier: X8plbUZ/tuB6eRlTVNZqg6HAhf06GQreV87U0A3QA6g=
Subject key identifier: 0B:D2:CE:A6:00:A0:7E:8A:9B:24:EC:F0:AF:96:9A:5B:9C:D9:1C:43
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843B964A1F2CFBA2AA739AFDE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a767496-3eee-3733-a117-c39dc33c7b52.roa
Signing time: Mon 30 Oct 2023 17:59:30 +0000
ROA not before: Mon 30 Oct 2023 17:59:30 +0000
ROA not after: Sun 28 Jan 2024 18:59:30 +0000
asID: 7203
IP address blocks: 108.165.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:b9:64:a1:f2:cf:ba:2a:a7:39:af:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 30 17:59:30 2023 GMT
Not After : Jan 28 18:59:30 2024 GMT
Subject: CN=29804dc0-27a1-4220-88dd-38a1283361f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:f3:7e:79:31:d5:19:e8:94:fd:f4:10:b0:
aa:fb:ba:bb:1b:9f:26:de:7b:8c:c1:ac:0a:cd:fd:
f1:85:20:a6:2b:1c:af:75:d9:ba:35:d0:14:e0:28:
1a:fb:2e:d6:83:5d:46:79:9b:e5:70:e1:d2:3f:66:
00:7f:5e:7a:8c:3f:f9:b4:dc:63:e7:c2:b5:ce:0c:
9a:85:08:9f:05:9f:b9:6d:1d:65:59:84:cf:80:18:
77:15:68:7c:a0:c0:71:24:6c:53:ce:68:6f:4c:79:
48:44:4e:c1:b4:36:57:4d:07:ab:2d:17:9a:dd:d3:
8c:ef:61:37:2f:1f:88:a9:1a:76:c6:63:8e:72:6c:
f4:ae:35:98:b5:92:ac:a5:f9:6c:df:fa:0a:9d:aa:
85:d3:e4:93:a7:94:6f:7e:10:24:66:c7:ea:73:14:
e6:b7:1c:10:09:c2:25:48:24:34:3e:38:63:23:08:
d0:de:16:6e:ee:1b:7b:08:c1:e9:c7:9f:ae:a8:cb:
76:d3:0b:74:58:41:a1:e2:cb:70:8a:0c:49:94:1f:
64:a0:8c:36:d4:8b:29:73:aa:e0:59:a4:99:e4:18:
99:56:e0:75:68:69:72:e6:94:1e:50:2a:f0:36:ec:
e9:4a:0b:c2:88:fa:26:4d:c0:ad:47:4d:82:bd:75:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:CE:A6:00:A0:7E:8A:9B:24:EC:F0:AF:96:9A:5B:9C:D9:1C:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a767496-3eee-3733-a117-c39dc33c7b52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b5:60:ab:c8:6e:39:e0:7c:61:b1:3d:18:3b:53:6f:c0:65:
8c:31:e5:1d:fc:6a:3f:7e:d5:69:9d:b4:e4:a3:1b:1a:5d:94:
69:5d:44:6e:49:02:81:04:ff:d0:c3:23:ca:fc:9f:c0:04:b3:
ea:cf:67:86:a8:40:d8:65:a3:85:5e:80:92:40:e6:78:0e:da:
a0:3a:45:df:62:f6:fc:6a:6b:ce:75:55:33:50:da:14:34:fd:
fe:ba:9e:e2:2f:be:87:14:a9:95:ed:71:1c:31:6e:31:03:35:
34:01:6c:8d:87:00:c8:92:80:45:28:48:8a:b0:b1:32:27:58:
20:af:62:41:09:92:b4:9e:53:b9:d5:c3:4a:d6:5b:6d:96:12:
b3:b4:33:0a:14:c7:41:d5:be:b2:af:32:47:61:4a:80:2c:9d:
df:c9:7f:4d:1b:bc:41:73:36:0a:50:83:31:ba:88:48:a4:3d:
c3:0c:9d:ae:ac:b7:75:00:a3:ad:66:40:24:aa:31:58:3d:af:
02:19:1b:3b:a0:b6:8e:57:b7:95:7a:f8:c7:b3:bc:cb:c7:16:
20:6e:35:34:dc:09:c1:4b:7a:dd:b1:94:58:10:77:e8:ef:11:
e2:90:d1:6d:52:30:9e:00:18:8f:b6:fe:fb:d5:c6:39:d5:52:
54:8f:fa:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEO5ZKHyz7oqpzmv3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTAzMDE3NTkzMFoXDTI0MDEyODE4NTkzMFowLzEtMCsGA1UEAxMk
Mjk4MDRkYzAtMjdhMS00MjIwLTg4ZGQtMzhhMTI4MzM2MWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu/zfnkx1RnolP30ELCq+7q7G58m3nuMwawK
zf3xhSCmKxyvddm6NdAU4Cga+y7Wg11GeZvlcOHSP2YAf156jD/5tNxj58K1zgya
hQifBZ+5bR1lWYTPgBh3FWh8oMBxJGxTzmhvTHlIRE7BtDZXTQerLRea3dOM72E3
Lx+IqRp2xmOOcmz0rjWYtZKspfls3/oKnaqF0+STp5RvfhAkZsfqcxTmtxwQCcIl
SCQ0PjhjIwjQ3hZu7ht7CMHpx5+uqMt20wt0WEGh4stwigxJlB9koIw21Ispc6rg
WaSZ5BiZVuB1aGly5pQeUCrwNuzpSgvCiPomTcCtR02CvXWIPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvSzqYAoH6KmyTs8K+Wmluc2RxDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWE3Njc0OTYtM2VlZS0z
NzMzLWExMTctYzM5ZGMzM2M3YjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+1YKvIbjngfGGxPRg7U2/AZYwx5R38aj9+1WmdtOSjGxpdlGldRG5J
AoEE/9DDI8r8n8AEs+rPZ4aoQNhlo4VegJJA5ngO2qA6Rd9i9vxqa851VTNQ2hQ0
/f66nuIvvocUqZXtcRwxbjEDNTQBbI2HAMiSgEUoSIqwsTInWCCvYkEJkrSeU7nV
w0rWW22WErO0MwoUx0HVvrKvMkdhSoAsnd/Jf00bvEFzNgpQgzG6iEikPcMMna6s
t3UAo61mQCSqMVg9rwIZGzugto5Xt5V6+MezvMvHFiBuNTTcCcFLet2xlFgQd+jv
EeKQ0W1SMJ4AGI+2/vvVxjnVUlSP+tU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:19:29 2025 by rpki-client