Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2027a76b-9e9b-344e-b397-e1549a2d6e05.roa
File: 2027a76b-9e9b-344e-b397-e1549a2d6e05.roa (raw, json)
Hash identifier: fBDvttfc6/Ee8PUd4c0Elms1bwC/9moMlY1akeuJwLQ=
Subject key identifier: 86:B1:5B:41:7A:31:E8:81:B7:E0:93:0F:F0:C7:91:54:53:F7:DA:7D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858426B9259916BBBFB05D222A1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2027a76b-9e9b-344e-b397-e1549a2d6e05.roa
Signing time: Mon 03 Jul 2023 04:11:38 +0000
ROA not before: Mon 03 Jul 2023 04:11:38 +0000
ROA not after: Sun 01 Oct 2023 04:11:38 +0000
asID: 834
IP address blocks: 108.165.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:6b:92:59:91:6b:bb:fb:05:d2:22:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 3 04:11:38 2023 GMT
Not After : Oct 1 04:11:38 2023 GMT
Subject: CN=55803400-5418-428f-9b67-1eba302bb4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cb:40:99:89:5e:73:0b:e4:4e:49:25:43:6d:
93:7f:4a:53:d5:a8:a6:0d:08:3f:bc:ef:58:21:66:
38:bf:91:e3:59:34:2b:fe:b9:d5:48:63:75:45:60:
23:61:53:8e:ff:ac:1f:d8:b0:bf:c3:5e:b8:de:d6:
c3:9b:00:c0:09:fe:ad:76:c7:e0:f2:09:84:47:ff:
23:47:cd:56:90:62:88:fa:cb:db:21:ca:96:6d:57:
f1:17:45:5e:e1:2c:47:e4:4d:42:e2:3b:49:5a:11:
5a:69:8b:e4:c9:14:00:95:e2:af:09:83:38:ee:72:
24:af:5a:87:c7:e6:19:db:b0:9c:ff:ba:8c:df:7a:
28:e9:b9:b0:d7:b8:ac:e3:6c:64:07:b6:2e:11:e9:
10:68:44:4b:21:b7:4b:f4:07:ee:85:09:30:75:91:
aa:bf:ea:fa:77:53:b9:71:7e:a6:01:ca:19:43:73:
09:15:9c:44:7e:d4:8d:eb:b4:3b:9b:d6:77:42:7f:
f5:b7:3d:fa:41:54:2f:72:18:40:e0:d6:35:2d:7d:
56:ae:4d:a3:4a:93:f4:97:5b:90:7f:59:14:3b:7d:
9b:47:38:2e:cc:ae:76:71:91:75:ef:d5:fc:fe:ae:
35:ed:71:36:be:13:7b:0f:5a:11:e5:ec:bf:cf:98:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B1:5B:41:7A:31:E8:81:B7:E0:93:0F:F0:C7:91:54:53:F7:DA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2027a76b-9e9b-344e-b397-e1549a2d6e05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:33:52:a3:52:69:ad:4d:b1:99:aa:bc:f4:18:d9:b1:29:52:
c0:ad:92:3d:3b:6c:ee:1c:bc:64:fa:bb:00:0d:aa:02:00:1b:
67:bf:2f:5c:ec:41:ce:a8:c5:86:d2:e8:88:47:09:b5:17:2f:
53:a1:f5:f9:15:5b:e7:25:f7:a7:ae:ea:1a:ad:11:0e:2e:91:
c5:76:6c:09:fe:af:4f:ce:36:56:14:dc:2f:b3:b1:16:49:aa:
17:60:61:d4:3f:d4:2e:c0:02:1c:b4:3a:fa:91:61:1f:1a:b7:
c3:96:88:17:f2:18:1b:ce:9a:29:ed:80:22:70:fa:68:dc:50:
ff:6e:44:ca:04:da:1b:e9:9b:bd:95:4b:be:ab:e1:77:7f:37:
b7:5e:05:37:df:ce:c0:0e:a5:8b:41:a0:06:f2:be:bf:11:2a:
5f:47:e3:6c:ed:f7:41:e4:a7:42:5b:17:59:a5:94:f2:1d:7a:
be:da:a8:b0:46:70:52:72:c4:6d:28:ac:42:13:06:1b:d8:e9:
c2:e9:9b:ba:07:68:d7:07:06:f9:47:d6:df:60:3a:09:74:fe:
76:d7:f7:13:50:6c:bd:ee:53:21:60:b5:dc:13:75:17:1c:b1:
4c:ce:70:c2:4c:12:6e:af:00:b9:31:40:27:d7:66:55:93:88:
79:40:4a:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJrklmRa7v7BdIiocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcwMzA0MTEzOFoXDTIzMTAwMTA0MTEzOFowLzEtMCsGA1UEAxMk
NTU4MDM0MDAtNTQxOC00MjhmLTliNjctMWViYTMwMmJiNGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgctAmYlecwvkTkklQ22Tf0pT1aimDQg/vO9Y
IWY4v5HjWTQr/rnVSGN1RWAjYVOO/6wf2LC/w1643tbDmwDACf6tdsfg8gmER/8j
R81WkGKI+svbIcqWbVfxF0Ve4SxH5E1C4jtJWhFaaYvkyRQAleKvCYM47nIkr1qH
x+YZ27Cc/7qM33oo6bmw17is42xkB7YuEekQaERLIbdL9AfuhQkwdZGqv+r6d1O5
cX6mAcoZQ3MJFZxEftSN67Q7m9Z3Qn/1tz36QVQvchhA4NY1LX1Wrk2jSpP0l1uQ
f1kUO32bRzguzK52cZF179X8/q417XE2vhN7D1oR5ey/z5gnOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaxW0F6MeiBt+CTD/DHkVRT99p9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjAyN2E3NmItOWU5Yi0z
NDRlLWIzOTctZTE1NDlhMmQ2ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKViMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8zUqNSaa1NsZmqvPQY2bEpUsCtkj07bO4cvGT6uwANqgIAG2e/L1zs
Qc6oxYbS6IhHCbUXL1Oh9fkVW+cl96eu6hqtEQ4ukcV2bAn+r0/ONlYU3C+zsRZJ
qhdgYdQ/1C7AAhy0OvqRYR8at8OWiBfyGBvOmintgCJw+mjcUP9uRMoE2hvpm72V
S76r4Xd/N7deBTffzsAOpYtBoAbyvr8RKl9H42zt90Hkp0JbF1mllPIder7aqLBG
cFJyxG0orEITBhvY6cLpm7oHaNcHBvlH1t9gOgl0/nbX9xNQbL3uUyFgtdwTdRcc
sUzOcMJMEm6vALkxQCfXZlWTiHlASkY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:47 2025 by rpki-client