Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/627d2a40-addf-35d0-a576-b1d2edf329d6.roa
File: 627d2a40-addf-35d0-a576-b1d2edf329d6.roa (raw, json)
Hash identifier: BvBbAxnN31ef6V2a3Ms7J4IiWIP6ELLNWvja6jieoB0=
Subject key identifier: BE:29:97:22:3B:4D:84:95:D1:81:C7:19:1D:73:E0:0C:48:EC:81:AE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858480B26FD53815B27F23FDDB580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/627d2a40-addf-35d0-a576-b1d2edf329d6.roa
Signing time: Fri 29 Nov 2024 19:59:20 +0000
ROA not before: Fri 29 Nov 2024 19:59:20 +0000
ROA not after: Thu 27 Feb 2025 19:59:20 +0000
asID: 9009
IP address blocks: 108.165.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:26:fd:53:81:5b:27:f2:3f:dd:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 29 19:59:20 2024 GMT
Not After : Feb 27 19:59:20 2025 GMT
Subject: CN=a8a24c31-a0f8-4922-990b-d61b466d153a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:d4:02:c4:eb:03:c8:08:eb:08:1d:03:8c:
e5:ee:10:2f:ee:80:dd:92:10:60:16:c7:52:17:b9:
6a:1e:ea:e9:a6:98:e9:e5:58:8d:2c:55:19:3e:2b:
2e:c9:c7:ec:a1:8a:26:4e:92:42:a8:7c:71:4e:de:
eb:c7:6b:5f:33:ed:2e:a7:ba:a6:f4:d5:e4:fa:93:
95:b2:65:ff:34:a8:9d:b8:5a:56:79:c5:b1:ad:02:
15:84:b6:c1:2f:84:4a:3c:1f:46:65:df:2a:08:d5:
91:85:a1:ea:c2:6c:cf:41:cc:e6:99:7a:71:28:5d:
8a:95:e8:56:52:e5:24:2a:e5:8e:36:ca:ae:49:ec:
ee:50:c9:cd:2f:eb:12:9e:f9:18:cf:5b:8f:0a:52:
20:25:a0:3c:40:59:d0:9c:31:1d:d3:30:5c:0d:d6:
b0:90:04:97:fc:96:c9:e1:6b:4a:f4:e5:80:d1:73:
d0:0b:e6:89:66:a8:ed:83:58:12:0a:1a:58:a3:42:
24:f8:d0:f1:b5:ed:9a:f3:de:94:7e:1d:d0:d0:9d:
b6:1a:43:6f:91:47:fa:e7:e5:c7:64:9f:41:61:d1:
48:b1:7a:8a:f4:94:75:10:d7:76:b9:a7:c5:38:57:
5f:96:85:74:f4:15:fe:e6:7d:4f:62:64:8f:68:0f:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:97:22:3B:4D:84:95:D1:81:C7:19:1D:73:E0:0C:48:EC:81:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/627d2a40-addf-35d0-a576-b1d2edf329d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:de:da:7e:ae:27:c1:6b:a3:56:24:2a:22:d9:cc:14:51:d1:
27:ba:7d:52:69:30:1d:c3:f3:3b:18:5c:d8:6f:c4:0d:c4:cc:
8b:12:ff:c0:d9:6b:f8:c6:3f:ad:ba:ad:d7:8a:90:ac:ec:ba:
2a:fa:4c:cc:22:dc:db:5b:45:4b:8b:ac:1a:56:a7:e4:a1:7c:
ee:8a:d6:e3:06:95:f3:6d:8d:c7:2e:0a:9d:27:10:4a:b2:ff:
b1:3b:14:73:5b:e4:d4:73:bb:9f:7b:02:f3:f8:95:f0:9a:0c:
d4:6a:dc:aa:79:ad:24:e9:3e:be:d3:56:10:65:b2:6f:de:42:
89:e7:3b:21:f8:50:c1:4e:f9:75:3f:7c:0f:98:3f:98:8d:71:
c1:2b:03:15:52:7a:11:9c:54:1d:b4:26:e3:29:6b:d0:5f:e7:
86:24:84:60:f1:f2:de:8d:14:3c:70:b4:5e:8d:c6:68:f9:ef:
9f:9a:eb:0e:9f:cc:01:c5:e9:84:7e:03:9c:6d:29:f5:7f:ed:
0e:1e:5f:b4:78:64:9e:7c:b8:2b:4d:68:f7:2e:7b:f3:20:a0:
10:7a:0d:ff:b6:5f:30:59:f7:68:58:2d:74:a2:6d:cc:50:48:
e7:59:42:79:de:76:11:bd:20:fa:e8:17:44:52:85:57:a0:df:
4c:c4:9c:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgLJv1TgVsn8j/dtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEyOTE5NTkyMFoXDTI1MDIyNzE5NTkyMFowLzEtMCsGA1UEAxMk
YThhMjRjMzEtYTBmOC00OTIyLTk5MGItZDYxYjQ2NmQxNTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS7UAsTrA8gI6wgdA4zl7hAv7oDdkhBgFsdS
F7lqHurpppjp5ViNLFUZPisuycfsoYomTpJCqHxxTt7rx2tfM+0up7qm9NXk+pOV
smX/NKiduFpWecWxrQIVhLbBL4RKPB9GZd8qCNWRhaHqwmzPQczmmXpxKF2KlehW
UuUkKuWONsquSezuUMnNL+sSnvkYz1uPClIgJaA8QFnQnDEd0zBcDdawkASX/JbJ
4WtK9OWA0XPQC+aJZqjtg1gSChpYo0Ik+NDxte2a896Ufh3Q0J22GkNvkUf65+XH
ZJ9BYdFIsXqK9JR1ENd2uafFOFdfloV09BX+5n1PYmSPaA/rRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4plyI7TYSV0YHHGR1z4AxI7IGuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjI3ZDJhNDAtYWRkZi0z
NWQwLWE1NzYtYjFkMmVkZjMyOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKW2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbe2n6uJ8Fro1YkKiLZzBRR0Se6fVJpMB3D8zsYXNhvxA3EzIsS/8DZ
a/jGP626rdeKkKzsuir6TMwi3NtbRUuLrBpWp+ShfO6K1uMGlfNtjccuCp0nEEqy
/7E7FHNb5NRzu597AvP4lfCaDNRq3Kp5rSTpPr7TVhBlsm/eQonnOyH4UMFO+XU/
fA+YP5iNccErAxVSehGcVB20JuMpa9Bf54YkhGDx8t6NFDxwtF6Nxmj575+a6w6f
zAHF6YR+A5xtKfV/7Q4eX7R4ZJ58uCtNaPcue/MgoBB6Df+2XzBZ92hYLXSibcxQ
SOdZQnnedhG9IProF0RShVeg30zEnO4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:23 2025 by rpki-client