Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2fa89c90-850c-3f60-965e-9fd47ef128cc.roa
File: 2fa89c90-850c-3f60-965e-9fd47ef128cc.roa (raw, json)
Hash identifier: i12nNHcXqgBm5uvrGjzfL5LcWojZHqyQ+q8FDeCSo1o=
Subject key identifier: DD:CB:AF:6E:08:64:C4:D5:DA:33:98:FA:67:54:1C:43:59:7E:78:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E265295AEC91DA7AF910
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2fa89c90-850c-3f60-965e-9fd47ef128cc.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 05 Aug 2023 22:54:00 +0000
asID: 135752
IP address blocks: 108.165.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e2:65:29:5a:ec:91:da:7a:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 5 22:54:00 2023 GMT
Subject: CN=012c6f32-9b34-4549-8e1b-1889cce06e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:54:49:80:8a:12:d2:a1:15:95:f3:b2:d1:
cd:f5:97:4c:08:e3:87:aa:5a:a3:34:f0:42:dc:ee:
59:5e:ea:f1:88:84:fc:9a:18:2f:3e:7c:28:33:be:
3d:bd:d1:63:08:e2:2e:34:ec:28:66:47:46:2d:bd:
3e:1c:1c:ac:b8:c1:04:08:20:1b:89:10:17:9d:73:
df:15:1c:82:ba:47:79:ed:29:9b:ed:15:8e:ac:c3:
eb:23:81:bf:0d:8e:1e:50:5c:82:a0:07:db:90:9c:
3b:c3:5d:dc:08:61:43:75:d1:c0:c4:3f:d4:f1:19:
5e:63:40:3a:67:dc:f0:53:91:67:57:01:df:a5:95:
86:50:75:a4:94:12:1a:8c:09:29:79:9f:91:05:03:
91:43:c2:8a:ea:72:25:f2:da:af:ea:35:15:75:14:
39:ea:34:86:ef:ae:02:d8:cf:b7:e8:77:95:d6:07:
c5:ec:54:66:c0:cf:44:f1:33:05:f0:51:6a:7d:89:
e2:30:b1:25:6a:bd:67:79:db:3f:82:52:c5:13:c4:
9a:8e:bf:10:7b:45:e3:e2:07:11:19:d9:05:97:43:
30:28:1f:ff:b8:3b:5d:5a:bf:94:1a:69:9a:46:11:
19:0c:e9:70:69:aa:a8:e9:1e:60:3a:07:50:9a:ec:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:AF:6E:08:64:C4:D5:DA:33:98:FA:67:54:1C:43:59:7E:78:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2fa89c90-850c-3f60-965e-9fd47ef128cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:36:0f:68:11:cf:00:69:2b:7c:39:bc:f5:cf:41:4d:ba:50:
d1:7b:60:54:5a:32:0b:30:cf:d8:24:7f:e8:3e:4a:9b:44:4f:
e0:e4:b6:ee:61:49:31:54:ed:bf:18:68:8c:1b:83:cc:33:74:
b0:c9:d8:56:f7:3f:30:2d:3d:b7:70:d7:4d:7a:b8:7f:8f:62:
cd:da:ac:79:4b:73:68:54:0a:f7:4c:6e:57:7f:7d:b5:02:45:
a1:0b:7b:1e:4f:9d:e1:31:7b:f5:02:7a:8e:59:7c:ed:cd:24:
03:9a:84:03:51:4e:22:13:e0:db:a8:0e:cb:6e:1a:aa:89:d1:
9c:b4:0b:af:b6:11:29:49:8f:ec:0a:4d:43:ca:cf:20:00:77:
43:cd:5f:69:47:42:59:f6:2f:6f:bf:03:c0:b1:49:c3:07:61:
03:bc:98:fa:9b:e4:8f:42:b2:ff:fd:e8:99:4c:0e:73:d8:0c:
8b:fc:20:a4:d0:ee:ca:c9:8e:05:95:e1:01:cd:ba:2a:b0:b1:
3e:c6:d6:c9:e9:92:d3:71:e6:35:a0:c3:ee:69:29:e4:b1:35:
10:76:a6:b0:7c:ed:cb:90:10:6d:3f:c1:d7:50:5d:64:62:a0:
15:b0:01:40:5b:9f:b1:73:9e:31:17:75:7f:42:3d:dc:6c:2d:
6d:bb:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:55 2025 by rpki-client