Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f121331-c639-3606-8fa9-3e7af469cec0.roa
File: 7f121331-c639-3606-8fa9-3e7af469cec0.roa (raw, json)
Hash identifier: vdmgqw7SxYL3ZptNLUn5xuEdO/Bv7KbyYM/3N/LH2jA=
Subject key identifier: 21:50:BF:B1:4A:A2:A3:96:53:C9:04:83:2B:BE:DE:D4:C0:F0:6E:78
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285838B36C1611C86AAB27E6E61F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f121331-c639-3606-8fa9-3e7af469cec0.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 27 Apr 2023 04:00:00 +0000
asID: 13768
IP address blocks: 108.165.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:b3:6c:16:11:c8:6a:ab:27:e6:e6:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Apr 27 04:00:00 2023 GMT
Subject: CN=b0578ece-0338-4414-8adf-92edc817bdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:02:44:56:59:55:c0:77:fd:7d:eb:6e:a4:5b:
4d:3b:0e:1e:c5:df:93:c9:e8:d1:0e:89:63:a9:84:
28:37:a3:3d:fe:ef:ee:54:a5:17:52:84:71:8c:ba:
e5:2a:d7:95:32:46:f7:68:87:60:fa:79:4a:29:88:
ae:55:b3:b5:38:02:b6:2d:73:cf:4a:f6:a9:56:28:
d4:58:38:00:ef:64:40:18:fc:10:0d:01:e1:13:c4:
38:87:c5:75:88:cb:a3:fb:a4:bf:a4:9e:f5:59:b5:
66:7e:c6:bd:e7:53:80:a9:45:3d:db:5e:e7:f2:33:
65:c6:a3:a8:b4:f6:8c:b5:19:b8:a4:6a:c4:ce:1f:
dc:60:05:b9:c4:d1:3e:f4:ab:39:61:f6:85:37:bf:
a6:4d:d3:bb:c8:f4:bd:94:d5:29:9d:83:05:94:9a:
d1:04:a1:67:f6:e6:8e:3c:93:6b:e6:67:58:22:da:
bf:cf:a0:72:e7:da:89:3b:a5:da:7e:49:37:6b:b2:
31:70:1e:31:e4:ae:a6:c1:ae:74:61:84:60:37:4d:
72:8e:da:33:12:19:51:1b:e7:81:d1:09:03:0e:d8:
08:0a:78:0e:51:a9:ff:26:07:11:bd:c5:11:0f:9e:
c4:1e:e1:49:18:7c:d2:59:5a:49:64:8a:de:01:43:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:BF:B1:4A:A2:A3:96:53:C9:04:83:2B:BE:DE:D4:C0:F0:6E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7f121331-c639-3606-8fa9-3e7af469cec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d1:2c:f2:c6:ca:7f:0c:4e:1d:90:a9:81:be:bf:5f:b3:20:
45:4b:34:75:05:41:88:26:4e:6a:58:33:aa:24:9d:f9:fb:cb:
14:2c:23:91:80:79:ec:1b:9e:12:5e:98:a6:ad:92:26:6b:48:
13:d1:96:e1:c5:cd:5a:7c:ad:57:44:6e:0b:94:d7:9b:46:bb:
c8:23:0f:8c:63:6f:41:86:1e:d6:cd:93:97:56:2e:11:cc:94:
7f:97:ee:cc:fa:e8:a6:88:ae:16:cf:35:1d:94:20:e8:a4:a6:
32:a3:a2:4e:ea:11:2f:d1:25:74:8b:49:d2:d6:6f:8d:fd:c0:
2c:14:6b:c4:71:a7:3e:1c:7b:5e:87:6d:18:9c:6f:5e:33:a5:
37:09:6f:5f:f9:9d:44:a4:0c:31:91:98:bc:a4:5b:9f:5a:c3:
a3:19:10:62:56:fa:0e:57:e3:de:32:4b:8f:6f:af:97:86:8a:
ec:26:12:eb:7e:a3:22:06:34:78:fc:6a:73:fe:e7:5c:25:18:
89:03:dd:cd:ae:78:c7:24:42:4d:6d:bf:ec:b4:35:d1:d1:8c:
e8:dd:d2:a5:ce:9e:f1:bd:1d:d8:ca:f3:d6:af:69:71:3b:6b:
ee:65:5b:d0:e1:1b:74:cf:19:7b:ee:80:5f:a0:ee:a6:e5:37:
25:dc:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:32 2025 by rpki-client