Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/214b2cbe-02c2-3167-96f7-3e00db5ef8ec.roa
File: 214b2cbe-02c2-3167-96f7-3e00db5ef8ec.roa (raw, json)
Hash identifier: bjya7AzK9+9tOKI8MeqVphZAJbY+/rZbEd0k8kbn5pU=
Subject key identifier: B9:24:C1:E8:EC:A2:56:7C:5D:7F:7B:99:A7:02:5F:DF:BD:70:67:6E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446DF6A6D5BA112B5F00100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/214b2cbe-02c2-3167-96f7-3e00db5ef8ec.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Thu 03 Aug 2023 23:32:54 +0000
asID: 135752
IP address blocks: 108.165.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:df:6a:6d:5b:a1:12:b5:f0:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 3 23:32:54 2023 GMT
Subject: CN=8b1104b8-268a-4ece-9a67-7433cc8d3b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:82:f2:13:4e:83:35:67:1f:15:2e:8b:ad:
f5:97:6a:39:3b:95:9b:f8:89:31:58:62:37:e7:df:
eb:ef:8e:65:dd:17:2b:db:dc:3e:b2:d2:02:16:51:
ea:20:88:d7:9e:7d:2f:16:fb:1c:b6:ed:b0:a2:02:
6a:58:22:35:ba:d5:5c:fd:cc:4e:ba:0c:58:81:a8:
44:14:03:2a:c5:3a:ef:b5:e8:ba:f6:b7:1a:56:0a:
c7:6c:b2:d0:88:1f:06:17:89:0b:0f:7c:e2:2c:5f:
20:20:a6:2c:ce:71:ee:a0:72:f8:96:e4:6a:a2:2b:
70:09:4e:e4:b4:c5:53:d6:16:ea:a0:ea:00:4d:df:
c3:b6:82:2d:ea:a6:e8:e3:15:54:ae:92:d4:67:c5:
59:7d:ff:ca:49:8a:ba:fc:77:7a:22:a0:81:5d:68:
42:ff:6a:00:c9:e0:f1:77:f5:27:2f:3e:bd:97:31:
d6:ec:49:b3:8c:8e:d9:4e:de:66:b1:21:ad:46:07:
cd:b2:19:7a:7e:23:8b:f7:77:5f:17:f6:2e:07:00:
25:89:24:32:50:70:d5:a2:bb:0b:07:9c:d3:7f:af:
70:39:10:6c:c0:05:3a:f5:33:07:8a:2d:ac:7b:81:
bd:2e:8b:bb:aa:78:bd:c2:ad:9b:79:05:09:7a:a7:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:C1:E8:EC:A2:56:7C:5D:7F:7B:99:A7:02:5F:DF:BD:70:67:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/214b2cbe-02c2-3167-96f7-3e00db5ef8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:f9:2d:9d:c7:01:58:05:a7:4e:8f:39:d5:3e:52:68:b6:f5:
3b:db:b8:f5:ac:a1:ba:95:28:e5:5c:9f:cb:a6:aa:34:46:40:
50:aa:a4:18:e8:f0:83:57:65:ed:06:07:d8:70:13:15:80:6a:
f3:a8:2d:67:dc:c3:81:60:9c:56:e1:16:c9:16:b5:9c:4d:7f:
f7:31:96:de:aa:4a:1b:cc:d2:c9:ef:46:90:ca:7a:f2:f6:b8:
7f:f3:92:ff:64:fe:48:35:88:0a:75:33:0f:1f:75:3e:a8:60:
21:d4:9c:14:63:25:21:3e:cd:5e:9d:08:a8:98:33:f1:50:8f:
c6:24:61:ad:e8:c3:6d:18:c5:0f:db:7f:03:ac:a2:a6:16:77:
59:9c:78:3c:d5:b4:24:d6:8d:e1:4c:31:71:fc:34:3e:71:17:
0d:07:b9:95:6f:e2:69:b6:8d:2c:a3:3c:1b:5f:bf:a6:ef:32:
d1:8f:7d:11:46:92:f1:53:e3:1f:f4:7e:4b:7d:8c:e3:60:a7:
05:73:f6:b7:d8:76:77:7b:d6:36:ea:ff:29:a7:5a:ab:10:88:
a8:d5:71:8d:6b:03:11:99:db:f7:ce:47:39:2a:04:3c:41:a1:
be:f7:94:fd:a7:04:82:8d:d3:4e:77:ca:4b:f4:11:fa:f6:27:
30:d4:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:04 2025 by rpki-client