Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/960b6586-6bb8-3e5d-94b2-ce3c21289083.roa
File: 960b6586-6bb8-3e5d-94b2-ce3c21289083.roa (raw, json)
Hash identifier: udB9q9rF/0J7LlZA3MU6NOqsJAU55CUSnjrNvCQ17IA=
Subject key identifier: 84:B9:EE:EA:CE:BC:FB:AF:0F:DD:CC:D4:48:46:F1:89:9B:66:F5:F6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858428BB14BE332F3259DF0BAF400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/960b6586-6bb8-3e5d-94b2-ce3c21289083.roa
Signing time: Fri 14 Jul 2023 16:19:51 +0000
ROA not before: Fri 14 Jul 2023 16:19:51 +0000
ROA not after: Thu 12 Oct 2023 16:19:51 +0000
asID: 834
IP address blocks: 108.165.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:8b:b1:4b:e3:32:f3:25:9d:f0:ba:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 14 16:19:51 2023 GMT
Not After : Oct 12 16:19:51 2023 GMT
Subject: CN=f2d6467b-1027-4a2d-a035-869c5dd62b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:a0:0e:75:f3:cd:da:a3:06:c1:2a:18:a5:
7f:23:1d:6e:05:2f:fe:1a:9a:76:bf:0b:0c:88:bb:
e7:ea:35:2e:59:a2:d0:9a:2f:6a:06:57:99:c8:51:
39:b6:32:8b:be:1a:20:01:19:dc:48:71:ca:b7:c3:
43:07:62:ac:fc:0d:64:85:10:e7:87:9a:a8:00:e9:
ba:ea:dc:20:1d:bf:6e:e4:20:34:d0:db:f9:38:bb:
19:25:d5:9d:e9:71:db:b9:8d:a9:60:b6:88:de:98:
f5:6e:15:1b:8a:a1:99:56:fa:c5:e3:37:38:3e:af:
a9:f4:ea:a7:f3:46:51:f2:3b:ae:5e:3d:77:3a:6e:
2d:28:02:39:56:2b:d9:f1:ec:27:4d:7e:b0:d2:ed:
fb:dc:96:c8:27:58:99:98:a1:b6:6e:6a:2e:f8:0b:
19:71:0e:02:23:70:8c:2d:96:81:54:cc:e9:d0:e0:
30:27:1a:d8:97:a0:78:54:10:8d:75:3a:fb:8b:8d:
aa:a6:bc:a0:e6:15:18:e0:31:66:2e:4d:00:88:e4:
7a:3b:b2:20:8c:fa:d0:8f:36:85:7b:4f:82:04:44:
84:a2:33:6c:64:ef:a6:d7:38:e2:d2:c0:e8:27:cb:
16:16:42:46:06:d4:cc:31:7d:f5:83:d3:30:e1:88:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:EE:EA:CE:BC:FB:AF:0F:DD:CC:D4:48:46:F1:89:9B:66:F5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/960b6586-6bb8-3e5d-94b2-ce3c21289083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:c5:b0:cd:65:a7:89:65:d9:20:79:ae:eb:d9:51:eb:96:21:
58:f9:75:86:55:55:37:af:bd:1c:92:fe:09:54:d1:f5:f3:74:
90:07:36:63:10:6c:d7:ab:28:13:a5:50:24:20:69:df:4e:84:
e2:d6:99:6a:df:e9:2c:06:85:73:e6:94:1b:31:6e:79:f1:41:
1e:5e:51:fa:67:62:74:09:c4:fd:4c:a3:4e:d1:73:26:bd:62:
22:62:ee:20:9b:38:88:f8:b9:86:74:41:d8:b4:a3:c1:d5:5a:
f8:d0:e3:22:9b:31:97:00:89:d8:ff:fc:97:54:74:4a:3a:cc:
05:00:ea:09:ea:28:d8:1a:c0:8e:4f:ab:35:19:71:16:2d:a3:
70:54:04:43:a5:fe:19:45:a5:25:d7:b6:4e:7b:ab:8d:e4:2d:
e7:66:aa:9f:f0:57:3b:06:57:0e:2f:55:d4:33:32:6e:c5:3d:
9b:73:f0:b5:13:f3:da:78:99:93:e8:2f:3f:a6:5c:45:92:c6:
27:2e:51:17:bc:59:98:0c:b3:71:a8:74:89:7d:e6:eb:51:82:
d9:c6:ad:36:71:6b:3d:37:3f:44:50:cf:16:03:ac:75:29:1e:
c5:b1:4c:17:05:ba:1c:64:8a:2f:69:61:0a:b8:0a:7d:c7:6b:
43:27:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:01:08 2025 by rpki-client