Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c9e1d91-fcf5-3a19-b7d2-a04e8e45d219.roa
File: 6c9e1d91-fcf5-3a19-b7d2-a04e8e45d219.roa (raw, json)
Hash identifier: xp46WsMI4hPYY6055gF+qd25l1VCbbJs9lKLWcGlwVY=
Subject key identifier: 8E:E6:6D:D4:34:A4:88:D1:3C:40:C7:9F:50:84:CC:CD:77:BC:4E:E9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583DCC0808CBA1A46519208BBD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c9e1d91-fcf5-3a19-b7d2-a04e8e45d219.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Tue 06 Aug 2024 04:00:00 +0000
asID: 269931
IP address blocks: 108.165.248.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:08:08:cb:a1:a4:65:19:20:8b:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Aug 6 04:00:00 2024 GMT
Subject: CN=bbe584f4-9c07-43d6-99d5-fa6dcba243ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:2a:21:38:da:48:6e:b1:53:72:17:db:81:
43:aa:af:95:11:b5:83:f5:0e:b1:09:af:3d:e8:19:
1b:2a:c8:52:89:50:52:7e:71:4d:4e:b8:e3:7f:8d:
bd:af:65:8b:a8:3f:8d:35:63:df:43:28:09:63:f8:
7f:bc:43:50:da:bf:e0:22:1c:5f:7d:73:23:39:e4:
76:33:bc:92:31:8e:8d:e8:82:82:62:37:a7:70:fc:
19:de:e0:32:36:bb:f1:7a:b1:da:d2:58:05:22:f4:
74:48:4a:72:6f:45:85:f8:08:20:35:a2:2d:19:83:
6d:0b:03:7f:20:68:7a:98:7b:68:58:51:c9:50:a0:
6a:7e:06:7e:fb:35:4c:1e:88:0d:10:b8:96:e2:c7:
1c:59:bc:67:6a:c4:06:d6:0b:85:f7:12:58:bc:38:
29:d7:0a:6b:32:71:2f:31:ff:8c:7b:df:62:fd:c7:
e5:54:00:f0:a8:e0:71:51:7c:44:4a:b2:06:61:b3:
df:f7:6b:c8:36:e2:95:6d:0a:63:8a:2f:eb:4a:57:
89:79:cb:5d:83:fe:ea:a8:fa:85:a9:91:8b:00:82:
17:26:5a:c7:b2:6c:55:3b:6b:5b:99:94:32:7d:b7:
a9:9f:89:d7:84:ad:4e:d3:db:43:97:b6:c2:f1:92:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:6D:D4:34:A4:88:D1:3C:40:C7:9F:50:84:CC:CD:77:BC:4E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c9e1d91-fcf5-3a19-b7d2-a04e8e45d219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:55:f5:5a:c0:07:e9:3b:5e:36:61:4d:65:24:f1:b4:e6:cd:
2e:b3:f1:3c:fd:4e:f8:a8:dd:ce:c6:76:bc:1a:4e:8a:be:7f:
a7:25:8c:88:d3:dc:da:8d:f3:6a:99:ac:9e:85:1c:b1:ed:b9:
6f:18:f4:b7:17:4c:18:5e:c6:50:0a:f9:8d:69:97:b1:e0:55:
94:e5:88:48:9d:60:67:25:af:65:4b:1e:15:9b:1b:f4:1a:83:
57:0d:2f:9d:f2:a5:af:0b:0d:d2:ce:f6:49:23:84:2b:7c:bc:
7d:49:cf:b4:12:6b:da:ff:5f:c0:93:1c:29:6e:19:55:75:1b:
b2:93:79:e2:3b:de:4a:cd:b6:d5:28:67:b6:24:88:f1:66:ed:
29:4c:88:e1:41:0a:d5:f5:1c:36:4b:23:c4:47:d6:b8:55:59:
cc:55:bb:98:cf:15:0e:c3:5a:c3:73:c4:fd:c5:48:12:8d:e6:
dc:b6:01:fb:2d:07:80:28:a7:c0:56:6c:c4:38:fe:7d:e9:5e:
72:a0:55:f6:30:fa:a6:a1:ce:ba:74:e2:65:e9:cf:61:18:89:
68:82:94:99:82:7f:04:1a:9a:bd:d3:e1:3c:1e:83:06:f8:09:
3b:c7:19:9d:16:ee:87:7d:e3:c7:11:13:b9:ca:12:da:1e:e8:
d4:be:5f:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3MCAjLoaRlGSCLvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
YmJlNTg0ZjQtOWMwNy00M2Q2LTk5ZDUtZmE2ZGNiYTI0M2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt4qITjaSG6xU3IX24FDqq+VEbWD9Q6xCa89
6BkbKshSiVBSfnFNTrjjf429r2WLqD+NNWPfQygJY/h/vENQ2r/gIhxffXMjOeR2
M7ySMY6N6IKCYjencPwZ3uAyNrvxerHa0lgFIvR0SEpyb0WF+AggNaItGYNtCwN/
IGh6mHtoWFHJUKBqfgZ++zVMHogNELiW4sccWbxnasQG1guF9xJYvDgp1wprMnEv
Mf+Me99i/cflVADwqOBxUXxESrIGYbPf92vINuKVbQpjii/rSleJectdg/7qqPqF
qZGLAIIXJlrHsmxVO2tbmZQyfbepn4nXhK1O09tDl7bC8ZKUyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7mbdQ0pIjRPEDHn1CEzM13vE7pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmM5ZTFkOTEtZmNmNS0z
YTE5LWI3ZDItYTA0ZThlNDVkMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdV9VrAB+k7XjZhTWUk8bTmzS6z8Tz9Tvio3c7GdrwaToq+f6cljIjT
3NqN82qZrJ6FHLHtuW8Y9LcXTBhexlAK+Y1pl7HgVZTliEidYGclr2VLHhWbG/Qa
g1cNL53ypa8LDdLO9kkjhCt8vH1Jz7QSa9r/X8CTHCluGVV1G7KTeeI73krNttUo
Z7YkiPFm7SlMiOFBCtX1HDZLI8RH1rhVWcxVu5jPFQ7DWsNzxP3FSBKN5ty2Afst
B4Aop8BWbMQ4/n3pXnKgVfYw+qahzrp04mXpz2EYiWiClJmCfwQamr3T4Twegwb4
CTvHGZ0W7od948cRE7nKEtoe6NS+XwA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:18 2025 by rpki-client