Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73e92176-66c0-3492-8b70-b9b65d189752.roa
File: 73e92176-66c0-3492-8b70-b9b65d189752.roa (raw, json)
Hash identifier: ifNZLLE8hkBN81NtmpQkqYsysiO4N6xdVSKrhjFXiZU=
Subject key identifier: E4:87:32:05:97:EA:D9:21:68:11:54:20:1C:93:E8:20:3E:1D:41:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425F14E0AD2991FF3D64A5BE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73e92176-66c0-3492-8b70-b9b65d189752.roa
Signing time: Wed 28 Jun 2023 16:49:07 +0000
ROA not before: Wed 28 Jun 2023 16:49:07 +0000
ROA not after: Tue 26 Sep 2023 16:49:07 +0000
asID: 834
IP address blocks: 108.165.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:5f:14:e0:ad:29:91:ff:3d:64:a5:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 28 16:49:07 2023 GMT
Not After : Sep 26 16:49:07 2023 GMT
Subject: CN=680a6dd1-915c-4aec-9a1a-6a5bd68245ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:8c:fd:56:10:25:5e:02:1b:3d:7d:07:9e:
ca:d8:23:73:90:93:51:b0:e0:d5:63:a5:90:de:50:
3d:47:05:54:2e:e4:e4:90:46:cd:04:94:a2:ff:8a:
9d:ad:8b:2b:fe:c5:cc:97:03:6e:ab:a7:16:b9:cf:
63:e5:dd:6c:92:c5:73:c5:57:f8:86:33:95:eb:f9:
dd:77:1c:e1:92:7a:8b:44:3f:7d:0f:7c:40:9c:94:
d6:0b:02:ca:01:70:6d:84:e6:17:83:fe:2c:9e:14:
d4:7c:6b:7e:f2:51:81:05:ee:a2:c0:79:18:f2:0a:
9d:39:2f:00:24:5c:12:39:49:ae:99:64:7c:2d:d3:
fc:80:95:0e:1c:08:4b:4c:94:31:a1:89:96:ef:8e:
3f:2e:99:65:9e:26:ae:4c:70:ef:2e:bb:f8:1a:6d:
3a:12:87:4b:3b:2e:5b:63:af:32:47:b4:66:40:4d:
3b:9b:ca:30:a8:81:e0:6d:86:12:55:90:5e:c6:73:
2b:bd:98:f8:c9:c6:e5:26:0d:00:67:ed:ab:86:31:
95:21:b1:d7:8d:10:f5:51:66:6f:5c:73:48:de:e2:
d3:df:03:b6:36:32:18:4c:94:6b:72:1f:27:1f:1e:
68:98:81:46:cc:e1:b3:1b:cb:50:50:66:49:ac:07:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:32:05:97:EA:D9:21:68:11:54:20:1C:93:E8:20:3E:1D:41:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73e92176-66c0-3492-8b70-b9b65d189752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:73:ad:e2:c6:97:c8:5f:2b:1a:3a:9e:2f:5e:bc:6d:49:a9:
2b:76:1a:bd:e2:03:8e:2c:94:5d:6f:76:03:8d:bb:1a:c7:19:
2b:94:1c:8b:b9:ee:d4:f5:2b:90:ad:32:62:00:3c:5c:02:c4:
e1:9a:49:2d:09:8d:c1:8a:5c:e6:81:f8:ba:ff:63:e8:41:af:
12:8a:f4:20:3c:00:d0:7a:4f:ee:0e:ae:d0:1e:98:43:c7:c2:
88:82:df:a1:12:1b:11:87:8d:9f:f7:17:68:e5:e3:5a:e7:4c:
e9:9a:8a:80:2c:3e:7a:91:50:7f:1e:a1:9c:2e:c0:c5:62:c6:
d5:05:09:2e:22:17:03:44:be:bb:61:a0:f6:98:b0:cc:bd:61:
cd:53:20:c8:da:6b:93:54:ba:80:67:26:02:64:5a:e7:fe:1f:
31:cf:6c:b0:81:5a:70:6e:ce:64:0a:d8:c1:66:c5:a7:73:f2:
d9:1c:42:c9:d1:42:6b:bb:ae:9d:30:1c:8e:06:a1:40:be:06:
f6:7f:a3:53:ba:dd:45:0e:23:ff:7b:05:72:8e:89:7c:7a:03:
9f:7b:18:89:0c:da:ca:d1:c2:f9:c7:cd:8a:62:7d:79:d6:9f:
fb:4a:85:3c:4d:c9:e0:5a:2f:ab:03:3e:c7:93:33:f0:71:28:
3e:c6:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:03:31 2025 by rpki-client