Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53f3d9fc-f1b5-3d01-960f-5caf68184368.roa
File: 53f3d9fc-f1b5-3d01-960f-5caf68184368.roa (raw, json)
Hash identifier: vDW+h1Y/dzyr+YptGheLtFSca42CQdOgAp/puAzO0P0=
Subject key identifier: D9:61:3F:7D:80:80:89:3C:D9:EA:F3:07:38:00:7C:76:98:DD:24:98
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584617526264E49BA0BE51CC2BA8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53f3d9fc-f1b5-3d01-960f-5caf68184368.roa
Signing time: Mon 03 Jun 2024 19:02:36 +0000
ROA not before: Mon 03 Jun 2024 19:02:36 +0000
ROA not after: Sun 01 Sep 2024 19:02:36 +0000
asID: 212238
IP address blocks: 108.165.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:17:52:62:64:e4:9b:a0:be:51:cc:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 3 19:02:36 2024 GMT
Not After : Sep 1 19:02:36 2024 GMT
Subject: CN=f03465ae-3c34-4301-a54e-e1d6f5ef80e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:2b:5e:fb:6f:af:17:86:8b:cf:64:00:9f:
74:15:8e:07:46:b9:58:17:5e:f2:7f:b3:4d:99:96:
46:04:bd:b6:f4:e8:4c:97:84:f2:f3:7e:e7:dc:96:
84:d3:50:be:49:fa:34:f1:f7:55:e3:3a:7c:3f:b6:
a6:3a:f3:83:ff:29:4a:d9:85:77:17:e2:20:33:6c:
eb:a1:6d:c9:31:bc:ae:93:3c:12:3a:1c:9b:1c:e7:
51:ba:56:76:b7:67:f7:81:db:94:13:cf:c8:60:66:
3f:5e:5f:02:84:67:5e:e4:3b:1a:62:fc:05:87:ff:
64:2f:77:9f:93:d2:55:ad:b3:de:28:93:06:ce:8e:
0c:3b:a3:9d:40:e7:e7:34:df:fc:56:49:1c:85:d7:
b1:cb:04:38:b3:ac:cb:c1:fc:e2:cc:b8:1d:08:dc:
1d:ac:4b:24:37:d8:2d:f2:61:08:ef:a7:11:49:57:
00:3e:9f:58:59:43:58:87:3b:17:ca:0b:4a:94:8b:
f8:ef:b9:6a:e1:0e:f2:13:9a:e4:ee:6d:d5:f2:bf:
87:b8:04:00:7f:af:80:58:89:41:21:68:57:68:ee:
a0:33:9f:3b:1f:f2:ea:3b:99:1d:00:11:1f:c6:5a:
62:ad:2c:d4:66:c0:c7:7f:b7:91:31:c9:b9:59:3d:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:3F:7D:80:80:89:3C:D9:EA:F3:07:38:00:7C:76:98:DD:24:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/53f3d9fc-f1b5-3d01-960f-5caf68184368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:75:3d:4c:d3:31:4e:16:17:c3:94:30:0f:49:ef:b2:13:44:
27:92:fc:64:34:43:5f:c7:eb:55:8f:fe:ea:3a:a4:93:24:5c:
78:3a:a8:c3:c2:9b:6c:b2:80:6b:e3:02:7c:b4:ff:a5:5d:24:
cf:6e:70:f3:e9:bf:c9:7e:c9:d7:7f:c2:74:10:c8:ae:e6:09:
62:c9:6f:31:77:08:4e:d1:0b:10:25:d1:60:2b:88:ac:88:a0:
0c:c4:15:df:e2:28:f7:d8:3a:e5:91:ea:63:0c:8c:f1:9e:2e:
2e:8d:64:ea:e7:0d:8f:cd:a3:fc:f9:a7:f6:47:5d:10:08:d9:
50:d5:d3:bf:88:9f:ec:14:d8:b3:14:20:fc:b6:8f:32:ad:dd:
03:16:20:0a:78:4c:c9:68:29:0b:d1:12:cd:94:b3:c3:7e:27:
a5:9e:89:8e:68:94:c2:b9:e8:8f:19:60:4d:6c:4c:12:d3:80:
03:12:06:63:aa:cf:da:6d:72:e1:f3:17:89:40:90:19:c3:c2:
bd:7d:75:27:82:12:04:da:fc:62:c9:08:cc:e3:f6:10:40:1c:
47:be:c7:12:8f:e9:72:83:03:37:19:22:22:20:e2:6c:a3:86:
ae:d1:80:37:31:1d:39:b5:f0:fc:77:a4:c6:6b:b1:1c:ea:00:
1b:96:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:21:21 2025 by rpki-client