Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6e0caec-c8cc-3f29-ade9-b45948b745c7.roa
File: a6e0caec-c8cc-3f29-ade9-b45948b745c7.roa (raw, json)
Hash identifier: kCWgohg5SYh4eDoL4t1HoBQBEWKp6eA5elHplwQN0yE=
Subject key identifier: D0:CF:51:6B:7B:2F:3F:53:96:7D:29:2C:E3:61:BE:73:62:CB:37:B8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858435B4A4C68E4326CC52C2577A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6e0caec-c8cc-3f29-ade9-b45948b745c7.roa
Signing time: Wed 27 Sep 2023 01:00:23 +0000
ROA not before: Wed 27 Sep 2023 01:00:23 +0000
ROA not after: Tue 26 Dec 2023 02:00:23 +0000
asID: 211432
IP address blocks: 108.165.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5b:4a:4c:68:e4:32:6c:c5:2c:25:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 27 01:00:23 2023 GMT
Not After : Dec 26 02:00:23 2023 GMT
Subject: CN=b0123c0e-1e31-4916-b9aa-93f8f77169ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:a0:59:27:65:c9:9b:5c:bb:15:58:58:ec:
0b:b5:1e:61:7f:36:0a:41:78:bf:ee:d1:1e:80:92:
29:05:23:ef:fe:3d:8b:97:3b:41:d9:09:9a:e8:09:
d9:9e:8f:42:59:d2:18:1d:f5:32:02:d1:04:97:86:
b8:31:11:8f:fc:2a:4c:27:da:6c:50:31:ac:65:7c:
97:5b:4d:38:d8:ef:7d:5d:60:f1:f9:a7:58:c8:ac:
47:b1:84:14:1d:b1:3e:aa:55:b0:ea:78:e9:64:ac:
55:b7:20:e9:ea:5c:e4:8c:34:c9:2a:9e:e1:d0:a5:
ef:3e:05:b0:52:ac:c0:09:a4:86:ff:85:7f:84:4e:
62:42:49:04:63:8e:30:5b:26:65:81:df:a8:9e:f8:
62:34:bd:15:07:71:ed:d6:f6:a9:6f:b4:67:36:ba:
d1:52:96:5a:43:8d:85:3d:b5:71:97:4e:85:d1:7f:
08:b5:7c:c8:93:6e:96:ff:21:8e:f9:65:49:6d:6a:
40:4c:c8:6d:ff:28:ec:7d:0a:37:57:4f:de:a6:e3:
9b:80:dd:fc:eb:18:8f:e8:1a:03:25:35:79:5a:8e:
5f:9c:2e:55:5a:9e:9e:f2:81:0c:8a:04:28:c6:0d:
58:e9:c8:75:d1:3d:61:22:04:fb:80:96:9f:cd:4e:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CF:51:6B:7B:2F:3F:53:96:7D:29:2C:E3:61:BE:73:62:CB:37:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a6e0caec-c8cc-3f29-ade9-b45948b745c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:59:98:e9:5f:e5:c5:9d:c1:f8:53:17:88:af:7a:a2:1c:55:
15:cb:81:f2:66:98:19:a3:c9:7f:7e:a4:5b:95:7b:08:40:29:
08:49:c4:7a:35:9e:ba:d1:71:38:60:e1:1e:63:f2:bb:62:f6:
0c:87:92:79:3a:c6:6c:e1:11:16:20:37:fc:42:4c:47:44:ce:
14:e0:33:ca:da:b2:49:55:54:54:f7:b0:1d:67:2d:44:9d:be:
6a:fe:0a:4d:ed:bd:34:aa:81:d9:f5:b8:67:a7:ae:70:20:e4:
d3:27:48:c5:1a:c1:c8:a3:8d:1b:f9:51:0b:d7:e9:18:30:88:
6d:e5:b3:eb:db:7c:21:dc:40:98:c1:d6:05:80:cc:fa:5f:a7:
11:2c:60:d1:b2:13:d7:61:39:c1:45:a3:85:d7:70:c6:61:98:
e6:ae:d7:c3:7c:b9:85:4d:ce:0e:b2:0c:03:fb:73:21:d2:7d:
cf:f9:3f:2d:f0:05:64:f1:c8:5e:87:4a:6a:2b:b9:0d:4a:39:
9f:68:f0:2d:d7:3d:df:3c:ee:28:27:d2:0e:30:04:2a:bf:7c:
f4:58:f7:6a:10:16:dd:e7:f0:ba:d6:5a:d2:ac:66:03:6b:ee:
f9:0f:8d:34:ea:81:4f:05:2b:54:f2:58:fc:58:1e:9c:28:7e:
08:af:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:24:08 2025 by rpki-client