Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a212980-46fe-3403-8a1d-555b80e6ca32.roa
File: 8a212980-46fe-3403-8a1d-555b80e6ca32.roa (raw, json)
Hash identifier: m0mKAIiEda/EWDtMe0C2waQiGdKdDntxP/6aXflOZa0=
Subject key identifier: C2:70:2D:45:5B:86:A6:70:54:67:94:4C:3F:2D:BD:05:E2:19:6D:99
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844675120A413135FF127F9C800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a212980-46fe-3403-8a1d-555b80e6ca32.roa
Signing time: Mon 01 Jan 2024 01:10:52 +0000
ROA not before: Mon 01 Jan 2024 01:10:52 +0000
ROA not after: Sun 31 Mar 2024 00:10:52 +0000
asID: 14618
IP address blocks: 108.165.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:67:51:20:a4:13:13:5f:f1:27:f9:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 1 01:10:52 2024 GMT
Not After : Mar 31 00:10:52 2024 GMT
Subject: CN=c5072260-e43b-4df2-8cf6-1591a07d0572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:d0:6d:92:bf:c0:63:9f:98:d3:6a:f5:c8:
75:e0:f1:d4:98:d7:c7:bf:98:ef:de:e9:7b:74:97:
53:d9:80:79:a7:4b:14:95:05:fe:4d:fd:b6:43:ae:
06:76:47:72:2b:65:d3:78:8f:ce:11:7c:d0:e6:84:
f7:21:42:80:74:63:dc:43:ef:04:2e:b5:47:56:1f:
36:52:a3:d0:d1:d4:6b:87:36:71:96:ac:9f:45:89:
d3:ac:de:77:4d:3b:7f:aa:f9:ad:aa:f7:c2:b6:38:
83:b6:35:4c:1a:55:80:c5:13:70:45:6e:fe:dc:84:
73:b5:09:1c:2f:69:3a:39:f9:81:14:7a:11:85:4e:
79:14:db:d8:3b:6d:51:88:98:5e:8d:33:5a:0b:b3:
e3:7d:10:a3:c6:9f:8a:c1:7b:c6:04:31:f6:72:af:
c4:d2:8a:51:e5:c3:66:20:66:4e:ea:5c:20:49:ee:
3f:56:4c:29:d1:3f:a7:92:55:69:23:22:4d:b7:9a:
b0:97:11:d9:c1:12:c2:28:61:0c:f7:af:cb:11:67:
8a:e3:14:d0:45:d0:66:72:af:23:07:34:2e:99:b2:
0f:46:f2:b2:f1:47:ab:c2:3c:73:7d:e3:48:17:1c:
01:61:37:2b:1d:f8:f2:45:b0:cd:e6:6f:b3:86:6e:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:2D:45:5B:86:A6:70:54:67:94:4C:3F:2D:BD:05:E2:19:6D:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8a212980-46fe-3403-8a1d-555b80e6ca32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:6e:03:4a:7a:8f:49:27:c4:28:6a:aa:86:dc:33:f3:86:7e:
18:10:28:85:bc:5d:ae:5c:20:e3:ed:be:94:08:12:c7:59:cc:
1b:7c:2f:3b:e0:f5:39:44:2d:50:18:0c:21:3a:8c:6f:d4:78:
9a:54:f6:63:a3:58:2c:85:4a:cb:c2:2a:cc:9f:9d:7e:ba:63:
3d:59:a5:75:fe:9e:78:17:73:79:3d:ec:4d:83:dc:13:0a:13:
21:a1:be:5c:90:cb:d1:8d:fa:28:4e:1e:cf:34:1b:0c:f5:c6:
4c:77:5a:21:c7:95:7a:68:3e:82:5a:a1:74:03:0b:96:9d:4a:
54:cf:6c:8c:72:db:a8:6d:3f:23:50:60:f2:c7:ef:7d:10:81:
cb:12:f6:60:55:28:93:04:9e:f0:92:fe:e0:00:f9:77:c8:59:
dd:36:4d:5a:53:80:72:3d:e0:fb:22:71:cd:ee:2f:a2:c9:cb:
71:23:49:46:d4:93:ba:93:cf:00:9c:e2:2f:94:ad:08:fc:63:
e8:eb:21:a8:db:07:ef:92:a2:7d:a1:07:e4:1f:71:3a:19:93:
18:85:03:a3:da:a9:1c:80:6c:70:eb:92:54:ce:89:0b:18:b6:
6a:87:8c:0a:0c:7c:c2:fc:89:56:7d:fd:51:2f:5b:16:09:88:
9e:27:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:47:17 2025 by rpki-client