Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9249e51e-1138-3e3b-a4b6-02c57b1a0108.roa
File: 9249e51e-1138-3e3b-a4b6-02c57b1a0108.roa (raw, json)
Hash identifier: qchZsmEIWW1uDumBiiwQlAPByCZVJYay50p2/dR1xxs=
Subject key identifier: F3:A1:37:0D:87:50:56:DF:4D:EB:52:20:DB:C8:C2:88:31:7A:DC:05
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584230E8E1F3F3AA8F0BCA3CC100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9249e51e-1138-3e3b-a4b6-02c57b1a0108.roa
Signing time: Mon 12 Jun 2023 03:53:18 +0000
ROA not before: Mon 12 Jun 2023 03:53:18 +0000
ROA not after: Sun 10 Sep 2023 03:53:18 +0000
asID: 1239
IP address blocks: 108.165.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:30:e8:e1:f3:f3:aa:8f:0b:ca:3c:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 12 03:53:18 2023 GMT
Not After : Sep 10 03:53:18 2023 GMT
Subject: CN=c8bf3345-caf0-4b57-896d-edfd155ed4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:b7:fe:e2:fe:d5:9e:8c:4e:2a:7f:9b:03:
27:1e:22:9e:55:c4:de:46:08:f5:49:87:9a:28:cf:
1e:3d:c0:ab:34:cb:7f:6d:56:ad:cd:ca:84:c3:2d:
90:1d:6f:e2:bc:53:e1:71:b9:9f:21:89:9e:58:81:
e7:cf:45:fd:f2:4b:b6:0a:24:31:91:f1:4d:fc:af:
8e:a9:dc:bc:13:e8:24:27:92:61:f1:8b:2b:fc:e5:
a2:dc:1b:d1:83:c4:fb:5d:ed:d6:c6:a5:02:a7:ad:
1f:2b:62:fc:50:c6:41:54:bf:be:4f:fe:89:c4:ea:
11:a2:e2:99:a5:1f:a3:c0:3b:51:de:66:b7:1c:2d:
5e:b5:16:48:4e:7b:82:e6:8d:c7:5a:f0:ac:b0:cc:
79:4c:3f:83:f6:0c:42:38:c4:a5:89:9d:a9:11:d4:
09:25:01:a5:b1:a7:58:6b:20:c3:de:6e:5e:8f:f8:
af:0c:0a:06:20:3f:a7:f2:05:f9:0e:df:ae:e6:c8:
68:a4:03:27:08:6f:66:93:5a:35:1c:92:e8:f1:90:
18:c2:fb:8c:89:76:9e:d6:b4:ab:45:34:96:48:66:
d7:53:b6:1c:d2:77:92:c0:3d:33:7e:1d:73:4b:02:
f4:1c:11:86:8e:b9:b5:2f:c8:e2:de:10:b3:09:ea:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:37:0D:87:50:56:DF:4D:EB:52:20:DB:C8:C2:88:31:7A:DC:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9249e51e-1138-3e3b-a4b6-02c57b1a0108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:13:d2:15:fc:17:df:f2:9e:1f:e1:70:cf:7d:a8:63:ec:6f:
98:50:7c:f4:8a:73:86:5b:f2:a1:bf:15:88:ec:cf:67:31:99:
c7:22:e5:e5:13:65:89:40:02:b5:71:55:54:28:40:b7:5f:04:
bb:eb:b8:e7:96:bd:cb:4f:4a:00:7c:3c:dc:e7:c0:8d:a0:34:
20:c3:7a:f5:26:d1:96:f5:d6:1d:5f:de:20:d7:dd:50:03:ff:
e3:b6:38:87:da:b4:66:53:00:f6:2d:05:e0:e9:3e:b0:2a:3b:
a2:7a:54:aa:63:a5:d4:22:fe:11:55:46:b0:48:99:4d:05:c4:
0d:d2:c0:9d:a3:e1:bf:d8:f0:d3:9f:2e:e6:65:98:56:54:d7:
9e:f0:24:8a:6b:da:77:53:bf:75:32:0c:c4:30:c2:f5:e0:57:
ba:fa:be:29:9d:8b:1e:f6:fd:16:69:20:14:c6:73:84:c6:43:
a2:27:8d:5c:cf:5f:98:76:9f:87:ca:ed:d0:ce:58:0b:18:93:
2b:c5:19:37:5f:49:6e:d3:22:30:06:41:0a:9c:19:a6:44:f2:
1a:d1:bc:1a:d4:c1:56:11:c5:01:fd:61:77:58:49:f1:5f:6e:
e4:a3:85:34:fa:a6:72:4b:74:af:bd:de:6b:b5:04:eb:e3:b3:
94:d3:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:31 2025 by rpki-client