Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a27aca-bc30-3b0d-91a7-5cbef9f36f90.roa
File: a3a27aca-bc30-3b0d-91a7-5cbef9f36f90.roa (raw, json)
Hash identifier: LaSNF0kITwESsREB551rkc0xmcWP69IY6eCVLC7qWt4=
Subject key identifier: CF:AA:5E:D5:ED:D7:8B:C5:4B:B8:91:57:1B:A4:68:75:16:46:02:CA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446F5B8EDDA8DBB4B38A4C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a27aca-bc30-3b0d-91a7-5cbef9f36f90.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Thu 03 Aug 2023 15:32:56 +0000
asID: 135752
IP address blocks: 108.165.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:f5:b8:ed:da:8d:bb:4b:38:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 3 15:32:56 2023 GMT
Subject: CN=6f0f4702-5761-4baa-b4bd-a210702afd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:16:15:38:3c:70:89:f9:d0:fd:18:d0:83:
ab:65:29:6c:75:12:3b:3d:de:8c:3b:57:44:cd:11:
57:bd:0e:c3:47:2f:8a:c1:df:fb:31:0d:b3:68:04:
87:a8:4b:47:90:4c:c2:6c:3c:02:57:aa:b3:7c:56:
a1:02:76:76:de:85:62:11:be:f1:a0:7c:a3:a7:1d:
29:1a:b1:cc:5f:40:a4:15:59:55:6b:6b:b8:19:2c:
56:06:45:e8:73:1b:23:76:08:85:58:16:47:b4:e0:
20:ea:24:8b:15:c2:8b:f9:c9:5f:a7:cd:7c:c3:4d:
b1:20:79:73:b6:d3:a7:00:6d:51:7f:8d:78:8c:c4:
58:5f:5a:2b:9a:14:94:94:e3:91:28:c5:72:e4:24:
c6:ee:99:75:13:bc:ff:1c:40:41:03:17:53:b8:42:
6b:9e:5a:93:49:0c:cf:f9:33:71:be:61:2c:ce:f7:
db:69:65:8e:2b:1b:b9:df:e2:ff:1b:65:1a:7b:49:
31:74:e9:2d:35:2e:c6:da:70:c0:04:1d:47:eb:af:
c5:6d:12:4e:bf:7a:5f:0c:7b:fd:3b:07:f0:16:33:
47:b9:ef:92:35:47:a7:ac:59:9a:1a:ae:b6:8c:54:
26:a6:73:0c:a4:6c:2f:3a:92:15:17:f4:85:0c:86:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AA:5E:D5:ED:D7:8B:C5:4B:B8:91:57:1B:A4:68:75:16:46:02:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3a27aca-bc30-3b0d-91a7-5cbef9f36f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:bb:10:a5:eb:2a:6b:fc:90:29:b0:3b:48:43:dc:83:a9:30:
50:6a:11:26:72:9d:b5:bd:44:bb:49:45:8d:d2:ce:fd:7b:ff:
38:71:c3:28:a4:21:e7:9a:47:51:fa:80:1c:c3:51:b5:a3:cb:
51:6b:e7:05:86:1e:5c:80:b5:30:ea:aa:a3:e9:a0:ec:4b:ff:
a2:4d:58:b9:6b:2b:85:ed:4e:65:2a:34:c9:5d:af:29:9b:64:
ec:ab:6d:92:74:6c:a7:03:1e:e9:e8:d8:e5:8f:24:c7:14:0d:
0d:d2:6d:86:7f:e0:b7:63:7c:5e:db:3a:e8:e0:52:77:3b:d3:
b9:71:a7:1e:20:25:d7:2e:f6:ae:53:1f:4e:9d:b4:d5:30:67:
b7:b7:a2:f6:2d:ec:81:0e:de:19:81:0e:31:12:0e:c3:d5:16:
33:8a:cb:c1:7a:b9:fe:13:b1:84:db:13:85:53:ab:86:f6:e2:
4a:f7:ca:c7:a5:21:ea:b0:1a:a4:ef:db:ec:74:87:91:cf:05:
4c:93:fd:a1:5d:9c:0f:9d:d3:da:57:a2:e5:4e:aa:4f:ca:76:
6a:64:f1:5e:b5:68:07:e8:b3:b2:c6:83:05:7c:8f:c7:65:ec:
8d:97:6a:57:d2:cd:2f:b0:fb:74:81:be:b7:19:68:aa:f7:81:
c2:ba:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:57 2025 by rpki-client