Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35908b8c-b0cf-3194-be8e-1b66f8f072ae.roa
File: 35908b8c-b0cf-3194-be8e-1b66f8f072ae.roa (raw, json)
Hash identifier: LKJXmKgskFHyLOHEy1StWqdQOW4kXQuNhqBCFaB7b8U=
Subject key identifier: B2:EB:5F:B8:B8:2A:FA:68:C7:83:33:F0:1B:ED:B3:B5:CA:79:26:8D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844F0354FC127E74CAA44448400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35908b8c-b0cf-3194-be8e-1b66f8f072ae.roa
Signing time: Mon 19 Feb 2024 02:00:25 +0000
ROA not before: Mon 19 Feb 2024 02:00:25 +0000
ROA not after: Sun 19 May 2024 01:00:25 +0000
asID: 22781
IP address blocks: 108.165.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:f0:35:4f:c1:27:e7:4c:aa:44:44:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 19 02:00:25 2024 GMT
Not After : May 19 01:00:25 2024 GMT
Subject: CN=ba531f58-3d7e-4171-9ba3-2e86d6653ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:cb:03:5e:7d:f6:6d:aa:fa:2b:91:63:a7:
3e:af:04:fa:70:f9:6b:72:13:3c:b1:9c:91:0d:8d:
30:f9:81:10:8d:37:1b:21:bb:2f:4e:2b:6a:9f:7f:
81:52:3e:b4:08:7b:42:db:03:d7:1c:0d:13:2a:f2:
e7:25:c3:51:fb:90:68:e9:aa:98:af:b3:e7:ee:e8:
1c:6c:c5:ee:c9:92:53:c2:35:fd:00:cc:3d:62:84:
c5:9c:79:97:df:e3:c6:fc:54:4c:30:b3:c7:62:19:
90:4e:9e:ba:f8:df:af:5a:12:7c:47:6b:1d:36:db:
51:0d:dd:c0:60:22:ba:ad:bd:b2:de:8e:bf:fa:cf:
8b:53:fa:31:d2:46:17:d4:3d:8c:5e:c0:31:69:21:
de:1c:48:db:af:c3:8c:00:c2:b6:b5:07:f8:be:11:
37:ae:33:66:fa:ba:3f:1f:65:d7:4a:7b:e5:26:cc:
bf:eb:f4:4e:6f:cc:54:a3:ed:07:e2:43:77:05:88:
8c:cc:95:55:b6:28:93:97:20:bc:6b:fd:3a:c3:aa:
9a:49:42:1a:ea:96:83:f1:85:b5:9a:07:84:e8:ab:
19:ba:6b:ed:95:80:83:06:fc:44:76:0c:ed:ab:de:
05:eb:2e:4a:04:09:94:3d:b2:c4:97:3d:63:3e:9f:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EB:5F:B8:B8:2A:FA:68:C7:83:33:F0:1B:ED:B3:B5:CA:79:26:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35908b8c-b0cf-3194-be8e-1b66f8f072ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:bd:dc:99:2d:a3:58:7a:c0:06:e0:79:45:db:35:80:b5:59:
f0:76:41:16:cf:51:bd:12:bd:9d:7e:d0:0c:22:fb:3a:90:b6:
c5:71:97:85:56:97:b0:63:51:20:07:65:bf:91:21:1d:a7:71:
9d:5a:f7:52:dd:71:2c:c2:75:76:fa:b0:04:d2:e1:02:0d:11:
45:66:e9:17:ec:14:17:83:ea:31:75:51:4a:e4:fe:da:c5:cb:
4f:3d:b2:9d:2d:01:94:ca:b9:78:19:b7:64:8b:eb:d1:28:07:
d0:d9:df:e8:5b:c0:7c:31:63:8e:60:8c:1f:6d:7d:36:42:e7:
89:d5:f4:48:5b:29:9a:23:bf:3b:d2:17:1a:0c:5a:4f:5e:bf:
e1:bf:84:ce:17:3f:85:4e:83:d0:c1:6f:3f:7c:3c:67:d8:d6:
3e:89:73:7f:ee:fd:ec:dc:9e:c1:93:f3:f7:20:dd:2f:7d:bd:
9e:bf:64:e2:05:34:44:55:f3:e0:4d:d9:05:86:33:6e:99:a3:
c0:2b:09:56:eb:0a:a7:a8:b4:8a:e2:b4:2a:c9:10:8e:8d:75:
81:7d:a3:af:b4:7f:89:64:05:12:59:59:27:a2:fc:03:eb:27:
35:a8:d3:0d:09:a7:a3:07:2e:f0:48:29:aa:60:ce:0c:66:1e:
4b:18:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:57 2025 by rpki-client