Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c6b9292-5e54-3ce8-a108-2f7a988aaeae.roa
File: 3c6b9292-5e54-3ce8-a108-2f7a988aaeae.roa (raw, json)
Hash identifier: a9RzyNA4504ar5tM0Vmk4W2U079GE8ViTEbJmUEEs4A=
Subject key identifier: 2A:DB:37:F5:15:37:80:D0:EC:51:29:B7:E9:61:37:20:0C:BC:CA:0B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858410C12238FD04C798E85D55B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c6b9292-5e54-3ce8-a108-2f7a988aaeae.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Sat 31 May 2025 04:00:00 +0000
asID: 6939
IP address blocks: 108.165.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:0c:12:23:8f:d0:4c:79:8e:85:d5:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : May 31 04:00:00 2025 GMT
Subject: CN=c65d15de-226c-4c30-8ea4-d757a2f0a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:5d:dd:94:41:36:17:61:4e:98:9c:1e:ed:
d8:b5:9d:1d:ff:89:0c:86:7a:3b:ea:6c:17:9a:b6:
3b:fd:3e:1d:27:31:55:a6:37:e0:a1:a9:51:7d:2a:
62:34:2b:20:71:5b:34:47:04:fe:39:87:dc:3f:65:
dd:62:ae:6f:ad:ab:fe:d7:68:65:c1:9c:e9:23:ff:
cb:e6:ca:9c:b1:16:4c:4b:f1:73:1d:31:53:6a:3e:
dd:fb:89:66:b8:e4:d9:06:bd:77:bb:12:bc:f2:f3:
15:e5:94:23:38:79:a1:3b:64:84:b6:99:8c:c3:aa:
66:2a:17:35:c0:30:ae:02:12:f7:70:be:32:b2:2b:
1e:06:a1:ac:fa:8c:98:48:ef:44:a4:5b:66:10:5f:
65:cb:b1:4c:26:5a:c9:0b:84:63:d5:e3:1f:25:89:
1c:ec:35:30:db:75:9f:f7:7b:e0:06:c3:5d:53:9f:
12:61:51:db:70:d4:ee:b2:6b:a1:f4:a8:5c:e9:6c:
d4:ec:fd:c1:0a:19:2d:33:a9:48:1d:96:7f:6d:c3:
47:ab:2c:50:e3:25:9b:4c:2a:8a:0b:46:02:09:d1:
d4:67:4c:95:2c:2f:d3:c0:96:48:53:c7:09:8a:0a:
53:1a:00:ca:3e:93:88:e9:13:79:94:09:f4:c2:f2:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DB:37:F5:15:37:80:D0:EC:51:29:B7:E9:61:37:20:0C:BC:CA:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3c6b9292-5e54-3ce8-a108-2f7a988aaeae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:08:ec:4e:f6:7c:48:41:55:0b:15:d8:50:88:aa:09:b3:f3:
93:46:45:34:13:fa:49:09:23:e2:ad:53:66:ec:e1:74:18:6c:
59:e8:74:b0:97:f2:82:64:f6:15:8a:84:1f:1b:ca:33:e9:fb:
9c:63:33:ca:b0:fc:7f:66:bd:9a:0e:5e:5c:76:56:89:5f:ee:
6a:19:41:6b:ea:95:62:82:d7:f3:ee:0b:8f:31:d3:00:e5:e5:
0d:b2:dd:80:ab:d3:a7:01:0d:ce:d4:59:f6:64:0b:a5:01:61:
6d:54:53:5f:25:b6:22:47:53:1a:8c:61:f1:68:39:11:5f:f8:
75:47:92:1b:2a:55:f2:da:81:6e:c0:97:ce:1e:62:ba:ee:f4:
56:cc:ec:d4:39:13:6a:da:7f:6f:06:17:66:f0:62:ae:87:8f:
30:73:0a:38:de:40:53:57:f2:31:b1:ad:87:91:c9:7a:93:a1:
af:d5:04:3b:8a:c2:d6:b4:4c:3e:ea:40:2b:62:74:87:8d:7a:
2b:da:9f:e3:e1:4a:03:5d:3a:bd:f2:1c:09:f3:e1:79:34:92:
d5:c4:b2:e3:e8:36:23:d6:e5:8b:d7:4d:35:f6:0e:07:27:fe:
ee:cd:4b:3b:57:1a:fa:fc:f5:fb:4e:80:63:e4:5b:a5:bd:24:
c5:02:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:07:07 2025 by rpki-client