Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63596763-fb87-3a58-8b0f-22875507e619.roa
File: 63596763-fb87-3a58-8b0f-22875507e619.roa (raw, json)
Hash identifier: xmSakkmK7/pWsoI0YzNycznm+zObPvASGDjDwyQNjYw=
Subject key identifier: 2D:49:49:27:35:24:8A:FD:CF:B6:EE:33:48:C7:BA:F8:74:AA:11:36
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584296FC2A19BE2BEDC53F290080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63596763-fb87-3a58-8b0f-22875507e619.roa
Signing time: Tue 18 Jul 2023 17:24:36 +0000
ROA not before: Tue 18 Jul 2023 17:24:36 +0000
ROA not after: Mon 16 Oct 2023 17:24:36 +0000
asID: 834
IP address blocks: 108.165.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:96:fc:2a:19:be:2b:ed:c5:3f:29:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 18 17:24:36 2023 GMT
Not After : Oct 16 17:24:36 2023 GMT
Subject: CN=a54828c3-4850-454a-a2fd-0ede3c3e1133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:e7:8b:89:05:7d:17:f6:e8:6b:36:a1:73:
e2:96:b5:d4:4a:0b:d8:a3:ba:c7:ce:31:d3:c5:8f:
df:2a:b5:4f:e5:4e:b7:f2:70:af:43:f4:71:6a:93:
9f:7d:50:45:d9:a4:d0:4e:33:04:56:27:4e:c0:0f:
97:f3:11:14:dc:9c:b3:c1:f7:f2:32:bc:05:f0:4f:
03:c6:52:ac:b6:fe:84:b0:df:e7:8d:74:55:75:5e:
73:f3:e0:ba:df:6b:75:9c:9e:60:82:1e:70:76:b8:
88:fb:06:df:20:50:dc:4d:f5:90:7e:19:d2:45:1d:
4e:03:a6:21:ed:b9:57:7d:c1:02:b7:a1:78:a2:18:
b8:aa:5b:09:a0:6a:98:f2:97:71:de:c6:68:04:31:
b0:f4:2d:65:d4:cd:3c:d4:ed:b0:0c:5c:05:4b:a9:
99:ac:f0:c0:b8:00:ab:85:7e:31:f3:58:4f:89:03:
f3:e0:d6:0f:ec:20:8d:d0:f8:32:75:65:5e:8f:76:
a0:a7:c1:d1:7c:fc:a6:b3:aa:3a:86:62:43:63:d8:
65:64:8a:9f:9b:39:32:41:1e:68:08:73:fd:5a:cc:
1f:a0:d3:8c:36:b6:42:03:c8:e0:fa:fd:75:6f:8f:
d7:ee:a8:f5:3d:81:7d:48:c4:d6:b0:9a:05:41:9e:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:49:27:35:24:8A:FD:CF:B6:EE:33:48:C7:BA:F8:74:AA:11:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/63596763-fb87-3a58-8b0f-22875507e619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:89:4e:b1:16:5d:22:a7:6c:ae:a0:6c:d9:86:1e:26:2a:ca:
9a:9b:06:4a:79:91:28:e7:a1:10:3e:29:74:74:1f:84:77:17:
80:86:15:4b:4f:84:a8:94:e9:f6:e9:db:6a:f2:e5:0c:f6:e0:
e4:eb:1c:15:34:cf:c5:1f:00:89:b9:6b:f3:da:ed:9e:68:7a:
ae:de:64:c3:6a:ad:2d:e9:bb:6e:38:7f:34:6c:84:fa:2d:49:
78:21:5a:59:f2:a4:8e:28:21:26:7d:4e:fb:6b:e4:67:c5:aa:
f7:ed:f5:f1:b9:0c:a0:1c:f8:36:ab:3f:c9:a6:6d:bf:c6:cb:
7b:ff:94:00:0c:38:67:a2:3b:d2:ee:4b:c7:90:93:0a:c2:2a:
33:b5:dd:b8:2b:73:76:e3:06:09:23:94:34:c9:fa:f6:1a:37:
a6:31:e8:25:e1:31:18:94:63:b7:7f:bc:e4:55:8d:51:c7:9c:
8f:f1:20:27:14:5d:f0:b2:9d:4f:6d:73:20:05:eb:e9:f4:b9:
03:d5:44:76:d6:21:b3:d5:ea:a3:36:bc:27:e8:33:ab:c0:20:
1c:bd:b0:c4:b0:f8:50:3c:0d:81:bb:5f:f5:60:3e:79:c8:ad:
da:a6:5b:de:37:0f:5a:38:c3:5f:7b:c7:af:09:4a:b7:d2:cf:
79:3b:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:05:14 2025 by rpki-client