Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/685508c0-5e7f-3846-a4c3-0f33f616b45d.roa
File: 685508c0-5e7f-3846-a4c3-0f33f616b45d.roa (raw, json)
Hash identifier: 7Mu4xnXm2D4lX5voyvI5rJ42bRRn3igOpO85e3THsrw=
Subject key identifier: E7:65:E1:05:34:37:B0:B5:2E:75:75:B1:80:23:BF:BE:03:E1:01:F3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842AE33D402835AF0BBB2C9DE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/685508c0-5e7f-3846-a4c3-0f33f616b45d.roa
Signing time: Thu 27 Jul 2023 01:00:17 +0000
ROA not before: Thu 27 Jul 2023 01:00:17 +0000
ROA not after: Wed 25 Oct 2023 01:00:17 +0000
asID: 60721
IP address blocks: 108.165.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ae:33:d4:02:83:5a:f0:bb:b2:c9:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 27 01:00:17 2023 GMT
Not After : Oct 25 01:00:17 2023 GMT
Subject: CN=3871df7a-6e6d-4937-b3e2-63c862c799d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:91:0a:f8:de:8f:45:af:a5:33:7a:ce:f8:
9a:12:b8:3e:a7:09:3a:15:44:e8:94:29:ce:ab:24:
55:50:4f:ec:2f:ca:57:d3:3e:13:f0:8c:ac:1d:74:
ac:e0:9f:dd:34:1c:16:90:6d:16:fa:60:09:a3:71:
f2:af:c0:7a:8b:6f:69:a6:05:05:23:cc:98:e4:dc:
0a:d7:7e:b7:e7:66:77:7c:ad:78:35:1c:2b:c2:63:
0c:b4:2e:fe:c5:07:8b:82:92:99:04:f3:01:01:13:
87:ea:03:1f:62:f0:f8:9b:62:a3:ff:e1:18:75:78:
fa:93:f9:db:4d:54:d5:aa:4f:c2:6c:b0:55:56:4a:
15:8c:e4:5d:78:3a:f9:5f:f2:2c:8f:ea:2e:d8:1a:
82:f4:77:8a:3e:2c:bf:21:cc:07:cc:ca:86:e4:c0:
fc:70:a4:8f:83:0f:99:a3:ce:f1:f9:f7:9d:ec:6f:
4d:09:4d:17:67:75:3b:07:7e:ed:3b:51:59:16:1e:
9a:12:63:19:0b:d9:5a:76:c7:20:cf:bf:85:55:7b:
dd:aa:44:01:20:20:10:1a:e5:58:cd:c6:07:7e:76:
c9:74:fb:2d:cf:cf:0d:ff:e1:f5:8a:d6:a7:3d:f3:
0d:ee:1c:be:d5:40:c6:59:b3:d5:f8:11:5f:b6:46:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:E1:05:34:37:B0:B5:2E:75:75:B1:80:23:BF:BE:03:E1:01:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/685508c0-5e7f-3846-a4c3-0f33f616b45d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:2a:2e:40:53:15:9d:80:e1:f1:e1:96:10:12:b6:81:03:f3:
b2:fb:55:62:15:37:76:d8:43:a9:cf:37:fa:cb:99:7f:97:9b:
72:bd:0c:73:8d:a9:f4:8c:f2:db:27:32:f7:2d:6d:d3:0b:cd:
cf:29:19:10:3d:a7:1f:0f:83:5b:eb:ce:b7:63:d8:cc:89:3e:
eb:f5:ca:51:a5:c3:3e:8f:88:07:84:38:cb:fd:41:15:3b:4b:
d8:f1:84:f5:5d:a0:a3:39:0c:40:08:2f:0f:78:25:dc:93:47:
34:5b:1f:fe:37:b4:c4:fd:64:c4:c3:80:18:ef:90:5f:6a:65:
06:66:25:84:0e:26:93:0b:70:39:7e:7b:8c:41:6f:5e:fa:4b:
f2:a1:e0:23:ca:99:a9:ec:ef:b1:f8:4e:9d:ba:dd:96:db:1e:
3d:d4:35:03:b5:8c:30:07:51:67:65:a9:08:2e:11:ef:8a:fd:
51:0d:4f:08:19:a3:c3:cf:9d:05:04:50:52:e3:23:54:77:e2:
3c:af:9f:e1:70:e5:67:fb:35:f6:6a:e9:0e:b4:38:55:bd:51:
d7:7f:2e:9b:73:4a:9b:17:e0:a5:68:62:60:4b:3c:6f:e3:68:
b0:0c:ca:69:3c:b7:c8:c5:28:7b:80:21:34:4a:c2:36:dc:22:
b5:13:aa:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKuM9QCg1rwu7LJ3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcyNzAxMDAxN1oXDTIzMTAyNTAxMDAxN1owLzEtMCsGA1UEAxMk
Mzg3MWRmN2EtNmU2ZC00OTM3LWIzZTItNjNjODYyYzc5OWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0iRCvjej0WvpTN6zviaErg+pwk6FUTolCnO
qyRVUE/sL8pX0z4T8IysHXSs4J/dNBwWkG0W+mAJo3Hyr8B6i29ppgUFI8yY5NwK
136352Z3fK14NRwrwmMMtC7+xQeLgpKZBPMBAROH6gMfYvD4m2Kj/+EYdXj6k/nb
TVTVqk/CbLBVVkoVjORdeDr5X/Isj+ou2BqC9HeKPiy/IcwHzMqG5MD8cKSPgw+Z
o87x+fed7G9NCU0XZ3U7B37tO1FZFh6aEmMZC9ladscgz7+FVXvdqkQBICAQGuVY
zcYHfnbJdPstz88N/+H1itanPfMN7hy+1UDGWbPV+BFftkb6TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdl4QU0N7C1LnV1sYAjv74D4QHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjg1NTA4YzAtNWU3Zi0z
ODQ2LWE0YzMtMGYzM2Y2MTZiNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4qLkBTFZ2A4fHhlhAStoED87L7VWIVN3bYQ6nPN/rLmX+Xm3K9DHON
qfSM8tsnMvctbdMLzc8pGRA9px8Pg1vrzrdj2MyJPuv1ylGlwz6PiAeEOMv9QRU7
S9jxhPVdoKM5DEAILw94JdyTRzRbH/43tMT9ZMTDgBjvkF9qZQZmJYQOJpMLcDl+
e4xBb176S/Kh4CPKmans77H4Tp263ZbbHj3UNQO1jDAHUWdlqQguEe+K/VENTwgZ
o8PPnQUEUFLjI1R34jyvn+Fw5Wf7NfZq6Q60OFW9Udd/LptzSpsX4KVoYmBLPG/j
aLAMymk8t8jFKHuAITRKwjbcIrUTqjk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:16 2025 by rpki-client