Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82314f54-96c0-304f-84c2-d8b24d4b99fb.roa
File: 82314f54-96c0-304f-84c2-d8b24d4b99fb.roa (raw, json)
Hash identifier: FDVrNEIDcdW2yig/6vdvA+XcUBrASCM+syA8+mm62Cc=
Subject key identifier: 4F:47:FD:79:81:58:B8:EF:FC:67:4E:B7:A6:B4:E2:DD:1F:D0:69:7D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843764F8463AA71517C1F67DE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82314f54-96c0-304f-84c2-d8b24d4b99fb.roa
Signing time: Fri 06 Oct 2023 17:17:48 +0000
ROA not before: Fri 06 Oct 2023 17:17:48 +0000
ROA not after: Thu 04 Jan 2024 18:17:48 +0000
asID: 834
IP address blocks: 108.165.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:76:4f:84:63:aa:71:51:7c:1f:67:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 6 17:17:48 2023 GMT
Not After : Jan 4 18:17:48 2024 GMT
Subject: CN=fb1d1ba9-ae69-48e4-800f-86677b8a1907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:9d:3f:c0:10:f6:9f:e3:85:1a:3c:43:c1:
6b:fd:89:a4:5d:ce:60:d7:fd:bd:d0:59:75:0b:32:
89:17:e7:04:03:ee:d5:af:bb:42:3c:ca:6f:c2:a0:
d1:1d:e6:71:ef:86:86:87:12:1a:2a:c5:61:06:0c:
c4:f2:38:60:01:e0:eb:3c:d1:84:ec:1b:34:3f:b3:
9c:2d:ea:db:ae:59:63:a9:16:a0:7c:e1:78:4d:db:
50:79:19:bd:12:d2:ce:7f:82:3c:9f:f0:f5:75:27:
e4:9b:30:b9:ea:e5:06:bb:87:b1:19:45:ce:4a:0e:
5c:5e:58:e6:4a:f2:79:df:af:51:91:9e:37:41:4b:
97:6b:1c:d9:f7:dd:de:a2:ff:b8:6e:66:7f:cc:d2:
54:21:38:b0:76:0a:59:33:e5:95:bb:8b:a1:7e:f9:
18:8c:f5:15:04:f0:a2:ef:15:e4:b8:3d:4c:98:cf:
df:38:b0:84:83:ca:1d:f9:1e:20:5e:18:3e:6f:4f:
ae:1b:ed:e2:c2:8c:8f:d7:77:f9:fe:00:60:7f:c1:
be:4f:ee:a0:71:17:51:a2:c1:af:79:bc:7e:1c:9a:
a0:85:05:b2:33:f8:f4:dc:d9:e1:b5:cf:c8:2f:49:
0d:fc:49:bf:26:d7:df:80:4c:59:67:73:94:82:33:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:FD:79:81:58:B8:EF:FC:67:4E:B7:A6:B4:E2:DD:1F:D0:69:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82314f54-96c0-304f-84c2-d8b24d4b99fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:35:1a:ac:11:c3:3d:31:d9:bc:f2:49:af:48:23:1c:9d:67:
ed:38:a5:31:b8:5a:69:0e:41:14:3b:95:15:9a:8d:3f:58:de:
05:fe:49:29:a6:e9:46:39:1b:79:1b:57:5d:dc:23:70:11:c2:
5d:22:eb:22:a8:e0:f7:6b:ab:9c:f4:11:9f:63:cf:9c:b2:96:
1b:f7:3c:e1:89:c1:0e:f4:e7:73:a7:2a:94:fa:57:ca:f1:ce:
f9:14:43:1c:02:06:65:df:34:2a:34:d3:5e:91:b7:35:6c:65:
16:b5:cd:26:15:e2:8c:f7:b4:f2:cd:0e:ca:94:42:34:db:59:
24:fc:6b:d2:d2:11:18:d4:02:f4:85:c6:3b:98:80:ab:00:e2:
db:74:5e:69:8a:79:c0:74:e4:35:54:87:c5:da:38:ef:2d:dc:
1a:4e:92:fd:93:36:85:e9:78:30:dd:ea:c6:8f:20:f4:09:e6:
b8:10:5f:fc:db:21:df:26:bb:de:9a:07:fe:40:44:07:1b:60:
9c:63:7f:13:03:00:48:55:43:1d:53:8f:d7:27:a3:cb:3b:36:
cb:94:da:7e:a0:4b:c8:64:d7:a9:3b:c8:1d:ed:41:f5:75:e1:
14:90:1c:c1:31:51:e3:cb:4b:25:14:e5:b8:87:81:12:17:53:
22:33:f0:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEN2T4RjqnFRfB9n3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTAwNjE3MTc0OFoXDTI0MDEwNDE4MTc0OFowLzEtMCsGA1UEAxMk
ZmIxZDFiYTktYWU2OS00OGU0LTgwMGYtODY2NzdiOGExOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobWdP8AQ9p/jhRo8Q8Fr/YmkXc5g1/290Fl1
CzKJF+cEA+7Vr7tCPMpvwqDRHeZx74aGhxIaKsVhBgzE8jhgAeDrPNGE7Bs0P7Oc
LerbrlljqRagfOF4TdtQeRm9EtLOf4I8n/D1dSfkmzC56uUGu4exGUXOSg5cXljm
SvJ5369RkZ43QUuXaxzZ993eov+4bmZ/zNJUITiwdgpZM+WVu4uhfvkYjPUVBPCi
7xXkuD1MmM/fOLCEg8od+R4gXhg+b0+uG+3iwoyP13f5/gBgf8G+T+6gcRdRosGv
ebx+HJqghQWyM/j03Nnhtc/IL0kN/Em/JtffgExZZ3OUgjO9GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9H/XmBWLjv/GdOt6a04t0f0Gl9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODIzMTRmNTQtOTZjMC0z
MDRmLTg0YzItZDhiMjRkNGI5OWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEU1GqwRwz0x2bzySa9IIxydZ+04pTG4WmkOQRQ7lRWajT9Y3gX+SSmm
6UY5G3kbV13cI3ARwl0i6yKo4Pdrq5z0EZ9jz5yylhv3POGJwQ7053OnKpT6V8rx
zvkUQxwCBmXfNCo0016RtzVsZRa1zSYV4oz3tPLNDsqUQjTbWST8a9LSERjUAvSF
xjuYgKsA4tt0XmmKecB05DVUh8XaOO8t3BpOkv2TNoXpeDDd6saPIPQJ5rgQX/zb
Id8mu96aB/5ARAcbYJxjfxMDAEhVQx1Tj9cno8s7NsuU2n6gS8hk16k7yB3tQfV1
4RSQHMExUePLSyUU5biHgRIXUyIz8D8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:47 2025 by rpki-client