Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a75ed94c-d794-3244-8460-ba5b5c222072.roa
File: a75ed94c-d794-3244-8460-ba5b5c222072.roa (raw, json)
Hash identifier: r3dt/m5RU24KkxwzEABqAhZUUaVdvzjPNbYE/x78MDY=
Subject key identifier: F3:DA:FD:64:54:01:19:D9:3A:7D:D3:A0:3F:87:83:49:A5:B2:BD:CA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846D8F554C9AB3908AA5F08363C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a75ed94c-d794-3244-8460-ba5b5c222072.roa
Signing time: Mon 12 Aug 2024 03:41:56 +0000
ROA not before: Mon 12 Aug 2024 03:41:56 +0000
ROA not after: Sun 10 Nov 2024 04:41:56 +0000
asID: 834
IP address blocks: 108.165.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d8:f5:54:c9:ab:39:08:aa:5f:08:36:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 12 03:41:56 2024 GMT
Not After : Nov 10 04:41:56 2024 GMT
Subject: CN=3f435262-634e-4f7a-824f-eb8c93796494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:c9:09:12:d5:de:c6:2b:ed:6c:83:49:66:
a3:17:08:89:6f:8e:f0:72:d1:6a:e1:5f:2b:0a:1b:
bf:0f:aa:50:21:7a:f5:32:29:34:f5:dd:84:4b:6e:
ef:89:b9:54:f3:ca:43:05:36:14:2c:01:97:f7:f4:
0e:d9:03:8d:43:09:57:2a:be:a6:30:8e:48:dc:4f:
bc:d1:39:2c:02:84:57:49:cc:d7:e5:24:9c:f7:85:
ea:ee:ea:0e:c6:33:ab:0d:82:b0:1c:6c:4d:2b:37:
5c:ac:88:b5:56:50:bf:a4:11:f6:c5:24:95:d0:a3:
71:18:ce:8d:d0:71:18:4c:06:e6:53:29:6b:44:4f:
82:d9:53:84:32:bf:99:73:0a:36:29:b3:cd:18:87:
cb:3e:db:d6:c7:d3:5d:d2:53:cc:fa:e7:eb:6a:4f:
a6:7b:19:67:0c:a9:dc:23:a6:c4:9d:c1:6b:75:84:
69:16:08:62:13:e7:f4:56:9a:cb:1e:0c:88:ff:5b:
33:2e:6a:42:87:60:07:47:0f:45:b1:70:5d:d8:21:
51:c9:b5:b1:51:63:73:92:ff:4b:41:46:ad:98:5f:
04:ef:c1:ec:05:6b:1c:4c:95:fa:b6:eb:78:3f:2e:
6b:ce:89:b3:be:a8:b0:c6:cf:0a:6d:2b:82:77:d6:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:FD:64:54:01:19:D9:3A:7D:D3:A0:3F:87:83:49:A5:B2:BD:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a75ed94c-d794-3244-8460-ba5b5c222072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b4:fa:2f:cd:70:2a:ac:6c:82:71:e7:f3:70:7e:6c:f3:46:
83:3f:6b:65:d7:c8:64:a6:aa:ed:14:8c:b1:eb:64:1c:e1:90:
ac:fb:db:e1:7e:6d:bd:3e:70:b8:6b:d6:a7:4d:c8:29:c5:2c:
aa:d9:84:cd:d2:53:a4:e1:1e:3a:f1:f4:2b:d4:bc:ba:7d:c9:
a5:a7:84:c9:46:f9:8b:ec:fe:6c:5b:5a:ff:25:01:1e:af:09:
12:19:b8:f9:3e:99:59:5c:10:c0:27:53:ae:65:ea:db:62:2c:
11:fb:96:4b:25:1e:a9:5e:cd:08:5f:77:19:2e:c9:f7:0a:5d:
1f:66:34:bf:3d:1e:f4:1b:9a:2e:48:ee:43:60:10:10:5d:82:
61:e8:84:71:8b:98:ed:d3:66:78:c9:da:80:06:be:b5:b8:2c:
8e:61:79:0f:30:d3:78:a4:70:73:0d:96:89:73:6f:c3:4b:35:
2e:33:90:94:f9:a8:33:d4:5d:f1:24:0f:51:de:e3:52:72:82:
64:3e:29:2a:c1:47:41:ef:5e:bb:b2:df:9f:fd:a7:52:54:76:
a1:a3:56:cd:09:dc:88:f6:a3:ce:fa:75:6b:e2:ee:f6:6c:66:
c2:ad:0d:3c:3f:99:26:d8:b9:c8:2e:4b:97:ec:4f:c4:ec:5c:
ab:51:37:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbY9VTJqzkIql8INjwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDgxMjAzNDE1NloXDTI0MTExMDA0NDE1NlowLzEtMCsGA1UEAxMk
M2Y0MzUyNjItNjM0ZS00ZjdhLTgyNGYtZWI4YzkzNzk2NDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArenJCRLV3sYr7WyDSWajFwiJb47wctFq4V8r
Chu/D6pQIXr1Mik09d2ES27viblU88pDBTYULAGX9/QO2QONQwlXKr6mMI5I3E+8
0TksAoRXSczX5SSc94Xq7uoOxjOrDYKwHGxNKzdcrIi1VlC/pBH2xSSV0KNxGM6N
0HEYTAbmUylrRE+C2VOEMr+Zcwo2KbPNGIfLPtvWx9Nd0lPM+ufrak+mexlnDKnc
I6bEncFrdYRpFghiE+f0VprLHgyI/1szLmpCh2AHRw9FsXBd2CFRybWxUWNzkv9L
QUatmF8E78HsBWscTJX6tut4Py5rzomzvqiwxs8KbSuCd9ZROQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPa/WRUARnZOn3ToD+Hg0mlsr3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTc1ZWQ5NGMtZDc5NC0z
MjQ0LTg0NjAtYmE1YjVjMjIyMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu0+i/NcCqsbIJx5/NwfmzzRoM/a2XXyGSmqu0UjLHrZBzhkKz72+F+
bb0+cLhr1qdNyCnFLKrZhM3SU6ThHjrx9CvUvLp9yaWnhMlG+Yvs/mxbWv8lAR6v
CRIZuPk+mVlcEMAnU65l6ttiLBH7lkslHqlezQhfdxkuyfcKXR9mNL89HvQbmi5I
7kNgEBBdgmHohHGLmO3TZnjJ2oAGvrW4LI5heQ8w03ikcHMNlolzb8NLNS4zkJT5
qDPUXfEkD1He41JygmQ+KSrBR0HvXruy35/9p1JUdqGjVs0J3Ij2o876dWvi7vZs
ZsKtDTw/mSbYucguS5fsT8TsXKtRN1A=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:48:15 2025 by rpki-client