Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a06d644-93d5-3548-b9d5-912c20088ab8.roa
File: 7a06d644-93d5-3548-b9d5-912c20088ab8.roa (raw, json)
Hash identifier: cKHPPhCJs/vNeFoLv/zb1xe1c84rZKxiuq73qCL3H0A=
Subject key identifier: 87:05:2C:0A:DB:D0:FE:EE:34:01:0B:38:B5:55:68:6D:DC:19:86:6D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858420B8306CCD7ABF1AD19EAADE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a06d644-93d5-3548-b9d5-912c20088ab8.roa
Signing time: Mon 29 May 2023 18:23:09 +0000
ROA not before: Mon 29 May 2023 18:23:09 +0000
ROA not after: Sun 27 Aug 2023 18:23:09 +0000
asID: 140155
IP address blocks: 108.165.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:0b:83:06:cc:d7:ab:f1:ad:19:ea:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 29 18:23:09 2023 GMT
Not After : Aug 27 18:23:09 2023 GMT
Subject: CN=30756670-2fca-4f24-955e-ee7b365055dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:48:e2:15:74:65:38:87:8c:91:dd:43:2c:
c2:0e:3d:33:1a:7d:7a:78:f1:ff:ef:17:77:e2:da:
0e:84:bc:f0:e5:1f:7f:0f:e2:11:0b:70:0d:a4:66:
b6:dd:e5:68:91:97:23:6e:29:2c:27:a8:66:38:69:
46:e2:45:a3:68:60:d3:79:49:d8:bb:40:36:9c:b3:
fc:fe:35:9a:1a:08:9d:03:32:81:ac:56:5c:61:1c:
a4:42:55:2e:53:f2:5e:be:d0:0c:64:d2:7f:0c:47:
1e:ab:d6:b4:8c:38:b8:ff:5a:7f:c0:7e:c0:4f:0b:
c3:49:84:d1:e0:32:3a:59:a2:73:ed:c1:60:31:76:
05:ee:76:6f:d1:eb:13:27:dc:ca:25:ac:10:28:ef:
df:4d:7c:68:de:2d:4d:23:9b:a3:b2:b7:c1:fe:21:
0c:17:fd:61:a8:4d:32:29:08:16:10:38:ce:54:f9:
53:85:0d:3f:cb:a1:c1:66:a5:48:8f:02:61:fc:9c:
1c:ae:9d:b7:92:90:36:6c:32:5f:30:fc:89:25:18:
1a:d0:8c:15:63:cd:2b:a4:c6:65:f8:86:93:44:2a:
df:94:94:37:ad:ee:a1:1b:ef:da:4b:98:ba:99:0d:
0e:06:87:ac:77:b3:ee:fc:62:ef:cf:24:29:eb:26:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:05:2C:0A:DB:D0:FE:EE:34:01:0B:38:B5:55:68:6D:DC:19:86:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a06d644-93d5-3548-b9d5-912c20088ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:dd:25:6f:cc:d8:22:20:d0:25:4c:56:98:e1:52:e9:f9:4b:
d1:8f:49:53:28:88:7f:19:33:9e:56:0a:c7:58:6d:11:a8:83:
78:7e:42:24:cf:94:de:27:7d:63:8c:da:db:c8:90:e8:3c:dd:
5d:c6:9f:98:02:4d:4d:db:30:fb:9f:6a:68:c1:8e:82:54:b5:
bf:15:34:c4:4b:37:b8:d2:1f:13:19:d9:a8:7d:50:68:ff:72:
6f:6e:15:38:bb:06:44:21:bc:47:a5:b2:39:5d:9b:16:dc:08:
a5:91:da:c8:60:41:84:b5:5f:ee:1b:81:27:51:da:0a:86:7f:
8c:ef:78:20:03:4f:98:ec:52:e1:4b:fc:97:66:08:57:5f:07:
f7:fb:21:c9:05:99:03:62:84:25:43:b6:6d:40:e3:98:3e:a5:
d5:45:e1:90:be:e8:77:c4:7c:12:68:9a:66:e1:ba:f1:bb:bb:
c8:bb:e6:6a:72:7f:49:4b:3c:da:f4:25:45:83:21:0b:1c:6a:
b4:60:f8:4b:50:4d:0d:58:18:d0:ee:9a:a5:4a:70:2f:09:fe:
1c:81:a5:e5:95:e0:ed:1b:2c:96:54:e6:f0:06:b0:c3:cf:44:
e6:9e:d0:df:2f:27:bf:d4:32:dd:8d:5f:c4:39:04:37:f4:dc:
8e:78:57:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEILgwbM16vxrRnqreAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUyOTE4MjMwOVoXDTIzMDgyNzE4MjMwOVowLzEtMCsGA1UEAxMk
MzA3NTY2NzAtMmZjYS00ZjI0LTk1NWUtZWU3YjM2NTA1NWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu5I4hV0ZTiHjJHdQyzCDj0zGn16ePH/7xd3
4toOhLzw5R9/D+IRC3ANpGa23eVokZcjbiksJ6hmOGlG4kWjaGDTeUnYu0A2nLP8
/jWaGgidAzKBrFZcYRykQlUuU/JevtAMZNJ/DEceq9a0jDi4/1p/wH7ATwvDSYTR
4DI6WaJz7cFgMXYF7nZv0esTJ9zKJawQKO/fTXxo3i1NI5ujsrfB/iEMF/1hqE0y
KQgWEDjOVPlThQ0/y6HBZqVIjwJh/Jwcrp23kpA2bDJfMPyJJRga0IwVY80rpMZl
+IaTRCrflJQ3re6hG+/aS5i6mQ0OBoesd7Pu/GLvzyQp6yaqqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIcFLArb0P7uNAELOLVVaG3cGYZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2EwNmQ2NDQtOTNkNS0z
NTQ4LWI5ZDUtOTEyYzIwMDg4YWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/dJW/M2CIg0CVMVpjhUun5S9GPSVMoiH8ZM55WCsdYbRGog3h+QiTP
lN4nfWOM2tvIkOg83V3Gn5gCTU3bMPufamjBjoJUtb8VNMRLN7jSHxMZ2ah9UGj/
cm9uFTi7BkQhvEelsjldmxbcCKWR2shgQYS1X+4bgSdR2gqGf4zveCADT5jsUuFL
/JdmCFdfB/f7IckFmQNihCVDtm1A45g+pdVF4ZC+6HfEfBJommbhuvG7u8i75mpy
f0lLPNr0JUWDIQscarRg+EtQTQ1YGNDumqVKcC8J/hyBpeWV4O0bLJZU5vAGsMPP
ROae0N8vJ7/UMt2NX8Q5BDf03I54V6A=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:44:54 2025 by rpki-client