Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2eb780e6-1eca-3b4f-b9ca-93c2c6e1558a.roa
File: 2eb780e6-1eca-3b4f-b9ca-93c2c6e1558a.roa (raw, json)
Hash identifier: Pdeq+mym1hXIw8H8uCWpZXLL+1FPuyuMZX7/ZJnpOZ4=
Subject key identifier: F0:14:26:3B:69:62:32:42:02:C0:32:BE:F0:71:9A:14:0E:E2:93:FA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843256F893A529838ACD3FB8940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2eb780e6-1eca-3b4f-b9ca-93c2c6e1558a.roa
Signing time: Thu 07 Sep 2023 18:01:50 +0000
ROA not before: Thu 07 Sep 2023 18:01:50 +0000
ROA not after: Wed 06 Dec 2023 19:01:50 +0000
asID: 834
IP address blocks: 108.165.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:25:6f:89:3a:52:98:38:ac:d3:fb:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 7 18:01:50 2023 GMT
Not After : Dec 6 19:01:50 2023 GMT
Subject: CN=a2824865-8637-4b20-9d96-a1f15e4538ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:e5:9d:de:47:b3:75:7b:50:10:9e:93:2b:
ec:0a:ae:be:e8:90:1a:3b:41:08:2f:33:0d:aa:38:
c5:b0:a5:e9:5c:ae:44:d5:38:92:4f:ef:0a:c0:c2:
b3:d7:3d:d8:4f:bc:a0:fd:37:b0:7f:ea:a8:3e:6e:
a9:c9:24:31:27:b6:c4:9c:71:12:ff:d4:98:84:bd:
f4:3d:85:63:41:f1:e6:bf:e3:d1:9a:e5:38:ec:fd:
da:bf:77:05:8e:e2:bd:1b:0f:d5:aa:bc:b5:05:62:
f3:15:ad:42:48:d2:b7:6b:85:d3:fb:ea:a1:5f:93:
ae:af:be:20:3b:56:a2:b2:d3:0d:56:06:ab:6c:ef:
c3:3d:8a:38:b2:ee:64:41:39:a7:f6:93:96:14:54:
40:c4:13:dc:a1:69:14:91:c5:26:45:35:4a:4f:31:
4a:11:22:5b:1d:16:95:51:58:36:be:22:5c:55:9b:
36:8e:89:d2:5f:1d:75:6d:ef:e1:ea:a4:5a:34:0c:
36:4f:18:74:2c:87:9e:39:1d:1d:f3:04:6f:da:d9:
a0:1e:be:95:93:8a:2d:0e:a8:fc:e8:7f:cc:db:c5:
fd:da:51:83:df:ce:1c:97:36:b0:3e:45:d9:f7:3c:
9c:9b:41:5c:5b:cf:b4:a8:52:d1:a5:df:97:f4:f8:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:26:3B:69:62:32:42:02:C0:32:BE:F0:71:9A:14:0E:E2:93:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2eb780e6-1eca-3b4f-b9ca-93c2c6e1558a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:4d:63:67:b4:3a:9f:00:d3:5a:d5:bb:5a:2b:a2:f0:ea:bb:
6c:bb:b0:ba:9a:da:88:63:50:b9:a2:a2:a2:2c:13:d8:eb:cf:
23:c0:fb:c3:74:1c:6f:56:af:04:7f:21:81:32:99:8c:2c:33:
b5:ae:38:f0:ae:d5:f4:85:0b:cb:3a:1a:32:72:4c:e7:ea:07:
a5:ce:89:9e:3d:98:f1:d5:4a:85:be:af:c3:66:cc:86:23:a2:
ea:45:d7:68:ac:78:c5:00:5b:2c:fa:f6:2f:e6:fd:fe:96:fe:
c7:02:21:6b:6d:02:a9:fb:00:39:16:1b:bf:5c:28:0f:ce:0c:
c2:4f:7b:91:d0:d4:5f:28:77:d1:23:6f:73:19:f2:c8:55:86:
d8:80:5f:34:ee:72:d6:d0:fe:47:03:bc:88:e3:d1:c7:87:5d:
a8:72:3e:21:ae:01:be:73:1a:ba:5a:8c:2e:79:e6:26:49:b1:
91:23:38:19:10:d7:da:d9:2e:49:b1:4b:26:e6:4e:92:ea:61:
82:82:f1:7e:6a:9f:b8:aa:78:c6:22:21:7a:8c:14:d8:2b:3b:
a1:ea:96:65:ba:42:ce:ff:cd:9e:e9:c1:8c:b1:73:60:fe:53:
29:eb:48:92:f4:5b:7b:6a:65:b6:ed:c6:40:78:44:85:e7:72:
78:30:16:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMlb4k6Upg4rNP7iUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkwNzE4MDE1MFoXDTIzMTIwNjE5MDE1MFowLzEtMCsGA1UEAxMk
YTI4MjQ4NjUtODYzNy00YjIwLTlkOTYtYTFmMTVlNDUzOGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk7lnd5Hs3V7UBCekyvsCq6+6JAaO0EILzMN
qjjFsKXpXK5E1TiST+8KwMKz1z3YT7yg/Tewf+qoPm6pySQxJ7bEnHES/9SYhL30
PYVjQfHmv+PRmuU47P3av3cFjuK9Gw/Vqry1BWLzFa1CSNK3a4XT++qhX5Our74g
O1aistMNVgarbO/DPYo4su5kQTmn9pOWFFRAxBPcoWkUkcUmRTVKTzFKESJbHRaV
UVg2viJcVZs2jonSXx11be/h6qRaNAw2Txh0LIeeOR0d8wRv2tmgHr6Vk4otDqj8
6H/M28X92lGD384clzawPkXZ9zycm0FcW8+0qFLRpd+X9PhSOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAUJjtpYjJCAsAyvvBxmhQO4pP6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmViNzgwZTYtMWVjYS0z
YjRmLWI5Y2EtOTNjMmM2ZTE1NThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5NY2e0Op8A01rVu1orovDqu2y7sLqa2ohjULmioqIsE9jrzyPA+8N0
HG9WrwR/IYEymYwsM7WuOPCu1fSFC8s6GjJyTOfqB6XOiZ49mPHVSoW+r8NmzIYj
oupF12iseMUAWyz69i/m/f6W/scCIWttAqn7ADkWG79cKA/ODMJPe5HQ1F8od9Ej
b3MZ8shVhtiAXzTuctbQ/kcDvIjj0ceHXahyPiGuAb5zGrpajC555iZJsZEjOBkQ
19rZLkmxSybmTpLqYYKC8X5qn7iqeMYiIXqMFNgrO6HqlmW6Qs7/zZ7pwYyxc2D+
UynrSJL0W3tqZbbtxkB4RIXncngwFpc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:25:18 2025 by rpki-client