Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a584787c-71f6-3c41-aafb-4a419a65b34c.roa
File: a584787c-71f6-3c41-aafb-4a419a65b34c.roa (raw, json)
Hash identifier: b0ayHqnXk702g4ko+BWQFnMwnp+MG3HxPUT+vy32pAQ=
Subject key identifier: 57:79:4C:FE:BD:AF:B6:0E:E2:FD:5A:60:75:AF:54:33:C7:F9:70:33
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841FB6BBE832FAAEC96959F2D2C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a584787c-71f6-3c41-aafb-4a419a65b34c.roa
Signing time: Wed 24 May 2023 00:03:19 +0000
ROA not before: Wed 24 May 2023 00:03:19 +0000
ROA not after: Tue 22 Aug 2023 00:03:19 +0000
asID: 834
IP address blocks: 108.165.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:fb:6b:be:83:2f:aa:ec:96:95:9f:2d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 24 00:03:19 2023 GMT
Not After : Aug 22 00:03:19 2023 GMT
Subject: CN=9f4ddba3-8a73-4d81-a9d4-7b9128f13abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:4d:70:46:3e:95:3e:25:2e:94:83:88:af:
ba:c4:e9:a2:c8:3c:05:40:aa:e1:e9:7d:24:0c:2b:
1c:b0:98:43:1a:5b:0c:cb:99:ab:b7:10:5b:3e:84:
6a:0f:dd:eb:aa:b3:2d:85:b3:c1:68:af:6c:bd:89:
70:5b:d2:fe:1a:55:af:5a:a4:31:9c:a4:4f:64:37:
a5:6a:f1:28:ae:26:b5:8f:f1:de:67:3b:8d:8e:06:
2a:7e:41:c6:7b:51:23:cd:b2:6c:01:df:62:90:61:
a5:59:cc:af:93:4c:e8:de:de:83:0b:a2:0b:90:7b:
44:62:2e:b8:78:7c:8d:44:92:fa:d5:7c:32:e1:7c:
6c:0b:39:5b:67:a6:8b:16:fd:ef:ea:c0:d5:dd:3b:
b1:bd:00:04:1e:44:cc:24:70:49:2c:f7:c4:33:93:
f1:43:1d:57:28:48:df:c2:13:9d:26:84:db:41:be:
9d:a3:70:6b:ae:1f:d7:e7:03:ba:9f:f6:0d:48:55:
e3:ae:da:2c:92:69:29:e5:11:04:9d:5e:51:d6:60:
c3:a4:4d:10:f5:98:43:a0:26:ed:f7:97:7a:84:9f:
b2:0c:79:4a:4c:13:8a:f2:88:3a:fd:95:c2:67:81:
56:50:e6:92:df:0c:6e:dd:3c:5a:06:8d:ba:ff:7c:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:4C:FE:BD:AF:B6:0E:E2:FD:5A:60:75:AF:54:33:C7:F9:70:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a584787c-71f6-3c41-aafb-4a419a65b34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:4e:3f:8c:fe:07:d4:f2:52:43:74:ff:62:f6:ab:5c:f6:23:
23:4e:ae:63:e9:9b:0e:e4:d5:8a:09:32:48:c3:8a:e6:5d:9e:
4c:d9:83:b5:11:00:41:ba:56:ab:e1:82:bb:3b:a4:da:7e:30:
45:f4:71:3f:82:94:b3:f7:7a:35:ec:c2:30:0f:a3:c5:16:09:
f3:c1:e0:7e:76:bd:27:78:57:1e:50:43:c7:e4:9d:53:c5:20:
a8:1e:5f:be:37:c2:55:df:ef:ac:63:e5:9f:61:ed:e2:83:07:
35:8c:4a:89:58:e7:76:d9:58:7d:9a:8c:14:22:ea:37:29:cc:
83:fe:ad:b7:48:21:86:ee:4e:ca:8e:76:85:da:87:01:8d:e0:
a7:25:a9:7c:76:09:0d:4a:4c:58:b6:51:18:fa:79:92:8d:10:
c3:6c:fa:84:94:2c:4e:92:fc:b5:c4:e0:d2:8d:09:5a:c2:43:
52:e0:b4:b4:e8:a4:8d:eb:61:ef:34:7f:f0:13:51:91:dd:e7:
db:86:c2:ad:ac:2a:9d:ab:bf:14:5c:5d:dc:7e:f5:8f:b9:e1:
1a:21:94:17:81:7f:e7:b4:1a:3e:99:48:12:d3:a7:4c:c5:12:
34:5f:89:e0:90:b8:1e:7f:5e:b8:98:a1:89:21:f2:ec:03:8e:
af:6c:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:31:21 2025 by rpki-client