Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/947dc822-1834-39b8-b2f2-9b0956d02ce1.roa
File: 947dc822-1834-39b8-b2f2-9b0956d02ce1.roa (raw, json)
Hash identifier: +l/ZqP2jJ3vbOBY2unR6W7Czto0aq2f4CaKBo3qEcrI=
Subject key identifier: 96:22:B4:13:AB:1C:0D:8A:9D:A8:B9:C3:78:57:3B:8B:86:17:29:C0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583BC02EEDA6F1434299D94D1980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/947dc822-1834-39b8-b2f2-9b0956d02ce1.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 01 Feb 2024 05:00:00 +0000
asID: 19437
IP address blocks: 108.165.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:c0:2e:ed:a6:f1:43:42:99:d9:4d:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Feb 1 05:00:00 2024 GMT
Subject: CN=b8356686-affa-47f1-bec8-1e1f39bfebcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:6f:ca:3f:77:28:77:ab:49:7b:c0:10:63:
58:3a:5c:9e:c5:54:19:ac:d1:31:19:46:42:80:be:
cc:f7:da:48:cf:78:ce:84:f5:3e:3b:a6:01:1c:04:
b0:ac:6e:c1:9a:2a:28:f5:02:ce:35:cd:ed:a2:27:
df:c6:0e:6a:4e:29:07:b4:20:80:3a:c9:ae:da:05:
91:8d:af:c0:6d:75:0e:a6:77:64:ee:f3:fd:e1:e4:
e0:41:59:02:bb:eb:c8:72:28:69:34:62:c9:d0:77:
c6:24:d1:8b:87:47:22:7e:2e:70:a7:9a:d3:99:d3:
69:c0:e8:31:00:88:93:b5:46:99:c0:9a:d2:6c:21:
be:93:93:1f:87:36:02:0c:05:59:d5:12:60:c1:03:
1e:da:71:f0:c5:02:5d:e0:7e:e3:d1:b8:4f:5e:a5:
56:8a:7f:91:3a:85:c8:8b:07:1a:20:8c:87:38:ca:
40:2b:d6:3e:7e:92:6a:89:40:f8:5c:e8:75:c1:c8:
cd:48:4a:b5:0b:5c:76:c6:7d:1e:08:5f:2f:00:fd:
a1:54:9d:9a:c9:49:f1:48:b7:ff:75:02:55:76:dd:
1c:e4:8b:d3:43:73:26:ea:ad:7f:df:45:85:4d:a8:
da:7a:09:52:ab:be:93:a2:0c:ba:11:6e:6c:df:12:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:B4:13:AB:1C:0D:8A:9D:A8:B9:C3:78:57:3B:8B:86:17:29:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/947dc822-1834-39b8-b2f2-9b0956d02ce1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:ba:0d:0f:94:c2:87:4d:5c:d0:72:48:a8:79:8c:02:dd:46:
f5:cd:0a:29:bf:8f:37:31:cb:d3:a0:c0:4c:02:e4:d6:e8:ad:
a9:50:30:ed:33:cf:a2:75:11:63:17:e1:2b:5b:d0:de:25:2f:
82:29:b8:8f:53:09:b8:c0:2f:13:14:6e:d9:0e:bf:10:9d:95:
33:8e:33:12:5b:da:1e:22:04:49:c2:0b:e8:bc:c8:65:8a:b9:
ae:01:fb:d6:57:74:a9:bf:ec:b4:8e:72:06:62:1f:57:31:0f:
1d:0d:05:87:5f:75:ee:0c:13:db:76:e3:36:9c:f6:ef:08:d3:
df:60:96:55:2d:d6:a4:7d:fb:f0:07:a4:3f:1e:59:50:d2:a2:
cf:27:bf:87:59:00:85:80:6c:b1:e7:7c:bc:77:4b:19:ee:a1:
42:aa:5a:02:c3:f7:2e:5d:47:bb:94:e0:e4:ce:45:2b:8c:d6:
14:ff:dd:c0:8b:b8:38:41:ba:a4:f9:ee:dc:23:25:f7:1f:20:
b2:d7:32:79:3b:be:cc:56:89:df:15:48:41:f2:f7:cc:2d:7c:
36:60:78:85:a1:a4:aa:5a:ff:9b:4c:f0:93:06:5b:ef:67:f5:
c7:49:cd:ab:84:23:5f:5b:2b:1d:08:b3:6e:b6:aa:0c:2a:00:
f5:2b:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:33 2025 by rpki-client