Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/517b9dd1-94b6-359e-af08-d39c7a6388fc.roa
File: 517b9dd1-94b6-359e-af08-d39c7a6388fc.roa (raw, json)
Hash identifier: bJsEhaZ/CpGMJEKP4JLiYnbLFd5rSKBbWzh1JwBFm0I=
Subject key identifier: 8E:86:28:07:BC:BC:56:A1:C1:6C:92:B4:A5:42:14:5D:EE:79:2E:1B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583E5F37AF63EC4301E3B63B12E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/517b9dd1-94b6-359e-af08-d39c7a6388fc.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Sat 28 Sep 2024 04:00:00 +0000
asID: 207459
IP address blocks: 108.165.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:5f:37:af:63:ec:43:01:e3:b6:3b:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Sep 28 04:00:00 2024 GMT
Subject: CN=5c60ac62-b73c-458d-8f7b-18e1c59f7cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:a1:04:6c:5b:4e:82:58:88:43:b7:e0:c7:
1c:18:a4:fc:08:66:3f:04:d2:a6:26:43:cd:ee:bb:
f7:5f:41:9c:98:f9:9d:c8:cb:d4:bb:30:55:b2:a9:
33:be:02:56:55:b3:7f:b2:7e:2e:39:6c:44:55:e1:
8e:f5:d6:3e:77:5f:61:14:91:56:ce:7d:76:04:61:
3d:c0:dd:92:fc:2c:3b:0a:19:7d:57:97:69:e0:cb:
03:e5:68:92:1e:dc:1e:81:a0:c8:69:27:d4:db:8d:
57:4e:83:96:28:f6:06:85:c5:b3:84:50:d7:20:5c:
98:f3:b7:99:22:19:a9:c2:fa:04:c9:e3:1e:06:b9:
41:75:86:8a:4d:5c:59:85:f5:00:ee:0b:9a:a2:6b:
40:cd:73:bf:90:86:87:73:f6:c4:09:a9:dd:2f:cd:
80:59:3f:d4:c3:3f:4c:35:71:56:0f:5c:13:94:34:
09:04:9e:80:99:57:34:87:e9:1f:45:6c:25:88:bc:
9b:7c:88:f9:ba:c1:fc:04:04:c6:32:ee:fc:01:c1:
3e:b0:3d:bc:f7:09:32:d4:02:b6:df:0b:f3:cd:dd:
5c:9f:2c:68:c4:b9:4e:13:db:ae:75:7f:26:bb:a9:
78:26:f8:31:78:a5:64:87:09:47:cd:d9:b3:e7:f5:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:28:07:BC:BC:56:A1:C1:6C:92:B4:A5:42:14:5D:EE:79:2E:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/517b9dd1-94b6-359e-af08-d39c7a6388fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:dd:76:db:74:bf:5d:75:f6:2a:0c:3b:a5:af:1d:d8:a5:0e:
7a:f7:71:b5:69:c4:70:61:57:ee:ea:a7:e4:93:d1:39:e0:de:
c9:e3:7d:be:43:ee:1e:77:e3:50:12:b2:e6:86:a3:0e:85:c9:
a8:12:dd:8a:2c:43:1f:45:a8:f2:35:4a:ab:11:66:1e:cd:fa:
ce:a7:e2:fe:20:21:ea:42:ef:22:f2:24:1d:e5:1b:ac:9e:8d:
d4:23:f0:eb:3e:a7:06:ca:43:82:98:d4:4a:ff:a6:72:30:53:
92:cb:46:31:eb:42:61:53:72:64:39:44:55:b6:18:ea:44:19:
61:78:ad:09:38:80:3d:e1:10:c5:92:ad:7c:5c:9a:a2:9c:2c:
b8:72:99:12:80:36:8a:50:c6:44:b6:87:fa:3c:98:17:0d:fd:
70:9e:17:5d:17:7c:78:6f:59:c9:48:98:95:1e:3a:ca:5e:74:
8d:09:b6:c0:43:d9:f4:da:34:4f:94:2f:ac:e7:44:e6:41:b0:
aa:29:88:a8:83:0d:5c:9b:34:ef:e9:53:8b:7a:23:1e:7b:8e:
79:3e:9a:20:79:63:63:8d:6a:49:90:4d:fd:8f:66:b8:f2:9a:
31:93:ee:19:cf:cd:d4:58:a1:8e:b4:c9:fb:73:5e:f8:23:c6:
75:d9:9e:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5fN69j7EMB47Y7EuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MDkyODA0MDAwMFowLzEtMCsGA1UEAxMk
NWM2MGFjNjItYjczYy00NThkLThmN2ItMThlMWM1OWY3Y2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf6hBGxbToJYiEO34MccGKT8CGY/BNKmJkPN
7rv3X0GcmPmdyMvUuzBVsqkzvgJWVbN/sn4uOWxEVeGO9dY+d19hFJFWzn12BGE9
wN2S/Cw7Chl9V5dp4MsD5WiSHtwegaDIaSfU241XToOWKPYGhcWzhFDXIFyY87eZ
IhmpwvoEyeMeBrlBdYaKTVxZhfUA7guaomtAzXO/kIaHc/bECandL82AWT/Uwz9M
NXFWD1wTlDQJBJ6AmVc0h+kfRWwliLybfIj5usH8BATGMu78AcE+sD289wky1AK2
3wvzzd1cnyxoxLlOE9uudX8mu6l4JvgxeKVkhwlHzdmz5/WOnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6GKAe8vFahwWyStKVCFF3ueS4bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTE3YjlkZDEtOTRiNi0z
NTllLWFmMDgtZDM5YzdhNjM4OGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKX9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjddtt0v1119ioMO6WvHdilDnr3cbVpxHBhV+7qp+ST0Tng3snjfb5D
7h5341ASsuaGow6FyagS3YosQx9FqPI1SqsRZh7N+s6n4v4gIepC7yLyJB3lG6ye
jdQj8Os+pwbKQ4KY1Er/pnIwU5LLRjHrQmFTcmQ5RFW2GOpEGWF4rQk4gD3hEMWS
rXxcmqKcLLhymRKANopQxkS2h/o8mBcN/XCeF10XfHhvWclImJUeOspedI0JtsBD
2fTaNE+UL6znROZBsKopiKiDDVybNO/pU4t6Ix57jnk+miB5Y2ONakmQTf2PZrjy
mjGT7hnPzdRYoY60yftzXvgjxnXZnv0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:41:10 2025 by rpki-client