Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dc9bc1c-ec70-31ab-9d69-de75438490c3.roa
File: 4dc9bc1c-ec70-31ab-9d69-de75438490c3.roa (raw, json)
Hash identifier: J3DuFrf/zvrUvwy34Azzjb4UEuvY2nc07n6KXTwjCQM=
Subject key identifier: E4:3B:C8:C7:EC:37:B7:D3:57:CC:47:4C:3F:C2:B9:73:64:1C:7F:88
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583BC032E796BA60B656F2333300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dc9bc1c-ec70-31ab-9d69-de75438490c3.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 01 Feb 2024 05:00:00 +0000
asID: 19437
IP address blocks: 108.165.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:c0:32:e7:96:ba:60:b6:56:f2:33:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Feb 1 05:00:00 2024 GMT
Subject: CN=7c782c27-c77d-4f5e-a670-5dd4bd3beb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:f1:45:23:84:44:fb:31:39:62:60:03:d8:
ed:2f:39:87:d8:a5:a8:e2:d5:6a:f5:48:fd:bf:58:
c1:0d:b2:aa:aa:7f:2b:8b:09:92:42:b0:c3:f1:30:
bc:44:52:b2:77:4c:ad:be:c9:b3:b3:5d:07:95:1c:
15:09:4b:64:7c:fb:bd:7d:91:5e:9f:7a:39:73:70:
1a:71:18:6a:5e:ca:4b:39:61:39:6d:ef:59:d3:5c:
5b:97:f0:9f:67:71:b4:d4:24:48:03:de:de:81:90:
7f:8a:a5:3d:bc:25:e9:54:7d:04:3e:c3:6f:cd:e9:
ad:40:d1:69:c3:d0:25:69:e8:04:b3:38:e9:1c:0d:
7e:95:aa:2d:8a:db:ad:b2:81:b0:84:be:13:94:c9:
08:0c:65:b7:10:bb:af:54:a5:f3:73:10:e8:49:59:
48:58:5d:c9:cd:62:ce:35:5f:2a:d7:c7:0a:4f:60:
42:c0:f0:12:70:52:b2:b2:6e:5d:89:27:f7:99:00:
a8:28:7b:d0:c6:87:d5:e8:94:5e:c7:75:14:c0:09:
88:e4:8d:31:fb:3d:1d:40:94:23:10:5b:6c:ae:69:
e7:a6:14:fd:4c:d3:7c:55:40:72:d2:39:0e:47:10:
80:5a:33:d5:98:f4:c4:1b:4d:6b:98:84:ab:12:db:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:C8:C7:EC:37:B7:D3:57:CC:47:4C:3F:C2:B9:73:64:1C:7F:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4dc9bc1c-ec70-31ab-9d69-de75438490c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:01:69:ce:9e:cb:4b:79:6f:69:ac:20:a7:4a:36:ca:99:93:
a9:8e:01:cc:44:0e:04:f2:a9:8f:c2:94:c5:8a:09:53:6d:67:
e5:01:c3:da:a2:c3:75:7b:73:04:d1:92:48:12:fc:b3:9e:b2:
97:db:1c:61:a0:67:ad:6f:d5:8b:48:5f:83:93:a2:29:71:d9:
0e:bd:10:37:25:6b:f6:91:79:e5:f4:94:79:09:1c:90:67:fb:
27:70:80:88:82:fa:0e:4d:97:95:c4:2a:16:24:e4:4c:f4:22:
75:95:e8:54:6f:6a:77:26:85:49:e8:0c:f0:e3:df:9e:ed:50:
3b:d5:51:25:b8:3f:f1:e7:a7:de:e9:bc:13:6c:24:89:63:1c:
ee:b1:fe:ce:3d:0f:b7:76:a9:f9:82:eb:01:50:47:65:84:fb:
ef:fb:f6:1b:c0:27:d7:56:d6:37:75:8b:65:86:fc:f2:cc:d7:
b5:68:ee:8e:26:0f:2c:44:b9:10:37:ac:8e:7d:24:a0:e2:81:
87:7d:71:e7:d8:c2:85:33:2f:ed:5a:fd:7f:31:78:d1:aa:3a:
e6:91:1c:bf:18:d0:d9:a4:b1:f1:3f:3e:b9:fe:7c:5b:2b:8d:
0a:95:85:8a:27:69:3e:32:13:33:2b:4d:76:50:bc:a0:dc:fc:
36:99:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:52 2025 by rpki-client