Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87e13735-a77c-392c-9346-6b59dc540065.roa
File: 87e13735-a77c-392c-9346-6b59dc540065.roa (raw, json)
Hash identifier: EvWE9evV/S7ijJ2y8fhEvwnNl/vgmnqzIoe7cKtGBhk=
Subject key identifier: DA:9B:C5:D9:3D:8A:3E:64:E4:EA:6A:69:2C:CE:78:A1:38:27:3E:6A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425112DE569B3514D9DF596CB0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87e13735-a77c-392c-9346-6b59dc540065.roa
Signing time: Fri 23 Jun 2023 16:23:45 +0000
ROA not before: Fri 23 Jun 2023 16:23:45 +0000
ROA not after: Thu 21 Sep 2023 16:23:45 +0000
asID: 834
IP address blocks: 108.165.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:51:12:de:56:9b:35:14:d9:df:59:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 23 16:23:45 2023 GMT
Not After : Sep 21 16:23:45 2023 GMT
Subject: CN=4bb54e1e-f5a2-4230-abb4-ba5aed30a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:ab:59:37:8e:a6:06:3b:d1:51:14:44:bb:
c6:a2:e4:d4:7d:ce:b6:ee:a5:d0:bf:3b:32:83:48:
e4:63:db:fa:8e:5f:c1:8a:c6:91:2f:47:c3:9f:7b:
10:7b:f2:9e:a0:2e:e3:0a:19:bf:de:ea:35:a7:33:
9d:b7:21:e2:6f:6e:6b:cd:c4:e9:1f:bf:04:ce:83:
c6:33:b4:cb:f8:65:68:47:77:ea:fc:19:67:c7:9b:
63:4a:ba:b2:ba:4a:18:35:83:2f:50:34:9a:2b:0b:
7f:84:1f:11:e4:f7:ea:74:e2:66:17:d6:29:52:86:
6c:1c:1b:93:d0:1d:57:3b:e0:f4:60:cd:94:90:ed:
70:99:2c:c7:1d:20:2b:54:fa:9b:ae:1a:e5:9c:a9:
52:d2:ac:2d:f2:92:6a:07:67:8c:3e:5d:4f:63:d1:
a5:f5:d7:2f:12:3b:88:4f:90:04:82:c2:71:65:f9:
3b:bd:78:ee:e1:f2:3a:2f:21:b9:f6:98:cc:87:0e:
db:a4:18:1d:f9:06:bd:f0:02:fe:b1:6e:4b:e1:c6:
2c:b4:47:c6:d0:96:04:05:c6:fa:0f:b7:07:b4:a1:
d6:aa:ee:4b:e3:ad:a8:a0:b5:35:b0:0a:43:54:be:
fe:bd:d5:a0:b2:bb:42:32:c8:94:bc:14:90:a1:3d:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:C5:D9:3D:8A:3E:64:E4:EA:6A:69:2C:CE:78:A1:38:27:3E:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87e13735-a77c-392c-9346-6b59dc540065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:95:dc:8b:5c:64:47:33:98:36:b2:7a:b9:2d:8a:89:46:24:
b5:67:b1:ff:fb:46:13:88:de:1b:a1:43:ee:59:ef:bc:cc:66:
41:92:14:d8:b0:2f:5c:7c:16:6c:d6:c3:e1:54:76:13:39:d5:
14:3b:33:c4:92:1f:8a:e4:a7:ef:1d:25:5d:5a:29:4e:fc:f5:
05:28:2a:09:29:d7:72:b5:4f:c8:ac:e5:e9:c1:87:c2:5c:a7:
1d:0e:75:1a:24:5e:83:92:53:2a:df:c5:82:1a:02:83:60:2d:
18:73:7c:80:86:ef:e0:73:2f:73:2c:e7:b0:a2:13:c0:09:bb:
03:b7:fc:9c:42:cc:eb:dc:83:17:40:55:3c:e0:42:31:02:d2:
d9:9b:98:be:31:70:26:7e:a0:12:0a:90:68:d2:e9:13:64:2e:
48:e2:fc:2e:1b:48:c2:54:ce:d2:60:3f:1e:59:60:79:d3:c6:
fa:f0:b5:46:30:a9:68:b5:b4:68:fe:09:42:97:38:98:2d:ab:
92:6a:f6:29:ab:8c:b4:b2:a3:e0:29:ff:3a:0f:f1:d6:90:47:
68:3e:7b:0d:5b:95:f5:79:8d:9a:c6:25:b7:13:23:49:60:06:
e2:4f:08:5b:1a:ab:dd:8e:5a:e5:e3:b1:8b:1f:41:db:6c:92:
2a:5e:7e:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJREt5WmzUU2d9ZbLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYyMzE2MjM0NVoXDTIzMDkyMTE2MjM0NVowLzEtMCsGA1UEAxMk
NGJiNTRlMWUtZjVhMi00MjMwLWFiYjQtYmE1YWVkMzBhNzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdyrWTeOpgY70VEURLvGouTUfc627qXQvzsy
g0jkY9v6jl/BisaRL0fDn3sQe/KeoC7jChm/3uo1pzOdtyHib25rzcTpH78EzoPG
M7TL+GVoR3fq/Blnx5tjSrqyukoYNYMvUDSaKwt/hB8R5PfqdOJmF9YpUoZsHBuT
0B1XO+D0YM2UkO1wmSzHHSArVPqbrhrlnKlS0qwt8pJqB2eMPl1PY9Gl9dcvEjuI
T5AEgsJxZfk7vXju4fI6LyG59pjMhw7bpBgd+Qa98AL+sW5L4cYstEfG0JYEBcb6
D7cHtKHWqu5L462ooLU1sApDVL7+vdWgsrtCMsiUvBSQoT3kPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqbxdk9ij5k5OpqaSzOeKE4Jz5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODdlMTM3MzUtYTc3Yy0z
OTJjLTkzNDYtNmI1OWRjNTQwMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaV3ItcZEczmDayerktiolGJLVnsf/7RhOI3huhQ+5Z77zMZkGSFNiw
L1x8FmzWw+FUdhM51RQ7M8SSH4rkp+8dJV1aKU789QUoKgkp13K1T8is5enBh8Jc
px0OdRokXoOSUyrfxYIaAoNgLRhzfICG7+BzL3Ms57CiE8AJuwO3/JxCzOvcgxdA
VTzgQjEC0tmbmL4xcCZ+oBIKkGjS6RNkLkji/C4bSMJUztJgPx5ZYHnTxvrwtUYw
qWi1tGj+CUKXOJgtq5Jq9imrjLSyo+Ap/zoP8daQR2g+ew1blfV5jZrGJbcTI0lg
BuJPCFsaq92OWuXjsYsfQdtskipefsw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:49:59 2025 by rpki-client