Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8fde03e5-a983-3388-8841-aed21360ddbb.roa
File: 8fde03e5-a983-3388-8841-aed21360ddbb.roa (raw, json)
Hash identifier: gu5xf/J0ot+aSl3sHOaRwWr/Egt8EyHpvEPQB5NlXkY=
Subject key identifier: E3:83:27:CF:A1:D1:07:52:EA:90:57:84:D8:DA:E7:3D:CB:F6:AF:A9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BAC3E6D82CD73E8A80BF2C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8fde03e5-a983-3388-8841-aed21360ddbb.roa
Signing time: Mon 31 Jul 2023 13:00:18 +0000
ROA not before: Mon 31 Jul 2023 13:00:18 +0000
ROA not after: Sun 29 Oct 2023 13:00:18 +0000
asID: 399122
IP address blocks: 108.165.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ba:c3:e6:d8:2c:d7:3e:8a:80:bf:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 31 13:00:18 2023 GMT
Not After : Oct 29 13:00:18 2023 GMT
Subject: CN=f31bac96-efe2-441a-bcce-5126ad152b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:1b:65:39:1b:ad:0b:56:f1:99:b8:ce:e0:
1f:7e:e6:fc:4a:6c:4c:dd:f1:50:0d:2b:2c:b6:c1:
a6:c9:0d:e0:7a:79:10:e0:ec:81:03:86:67:d7:bb:
40:86:6c:c9:80:c7:b8:71:0a:be:16:02:2e:b7:7f:
00:da:d5:38:45:47:ab:04:e2:0c:ad:c0:42:cc:e6:
cf:32:6b:74:5e:d5:9e:90:17:01:b8:6c:90:18:be:
f5:49:2b:56:73:2d:5d:f3:64:0f:15:8b:bf:68:b8:
24:a7:8d:ea:66:c0:77:ec:97:df:79:a3:3c:49:22:
3e:5f:74:48:8d:5f:22:bc:e4:44:9b:03:a0:20:f3:
be:68:3f:ea:5c:de:bc:4c:97:59:16:b9:ce:f8:26:
f9:ec:0e:11:3f:ac:1c:c4:38:4c:a0:66:b3:81:cd:
12:4e:dc:6d:94:61:cc:77:76:1b:7b:90:bc:46:ec:
c2:c7:f1:4a:4b:c4:23:03:04:b9:1c:ac:89:9d:2c:
ba:cd:2f:5b:4a:97:42:39:c0:02:96:ae:39:9a:21:
de:18:09:78:55:e0:29:1f:f3:61:35:6f:86:95:8f:
a4:ad:37:d3:65:8f:62:f2:88:d9:98:5f:37:f8:53:
19:88:86:cb:eb:29:b6:42:07:5c:c2:fe:ca:9b:77:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:27:CF:A1:D1:07:52:EA:90:57:84:D8:DA:E7:3D:CB:F6:AF:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8fde03e5-a983-3388-8841-aed21360ddbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:96:41:9b:85:ae:57:b7:9b:92:86:1f:4b:09:ba:cc:d1:ee:
0b:0a:c1:4f:de:c0:9d:a3:1b:49:8b:b5:e4:18:cc:ec:e0:41:
c1:63:7f:03:35:36:9f:da:ec:28:0f:6f:c2:ce:6b:ea:66:70:
6f:04:7a:e6:db:a3:5b:cf:6f:1e:72:3b:f4:e0:76:3e:a3:08:
f8:ce:61:87:03:71:43:56:02:11:51:66:13:a0:2a:16:e5:9f:
55:b1:ca:de:78:aa:d5:df:2b:44:e8:e1:79:b4:4a:86:e2:e6:
62:84:e5:10:31:60:48:fb:ef:18:54:fc:40:1b:67:c6:35:a3:
40:41:85:d0:65:ef:78:87:2e:15:19:b8:cc:87:d4:1a:1b:58:
b8:bf:9f:a7:79:03:e8:0c:f4:5f:c3:72:d1:3d:dc:78:b9:9a:
cb:58:55:2b:27:8f:5a:ae:fd:c4:21:1b:a3:4e:cc:91:cc:dc:
c3:da:9a:12:b3:83:e6:82:f2:82:b1:ec:24:53:fe:d9:76:35:
7f:e7:af:46:1e:69:33:01:fd:5c:a7:b7:f4:6c:9b:3d:2b:d1:
05:95:34:94:5f:51:6d:51:5e:40:c8:49:9c:ce:70:e2:50:6b:
45:06:c4:6f:1c:fe:10:b6:89:38:d9:68:5b:9a:a9:84:09:88:
2b:0f:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:34:40 2025 by rpki-client