Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae14c7b9-4bbe-36d9-92e6-f0d279de92ab.roa
File: ae14c7b9-4bbe-36d9-92e6-f0d279de92ab.roa (raw, json)
Hash identifier: bUckrlicVwRbLMwLORpMBamQfGs/4IOfab/c3mWrn7s=
Subject key identifier: F0:63:25:E9:5D:EA:A3:DD:9B:6D:85:BD:2C:23:FA:51:59:C5:2A:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841F7D1E49822CA14028B63E880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae14c7b9-4bbe-36d9-92e6-f0d279de92ab.roa
Signing time: Mon 22 May 2023 17:05:54 +0000
ROA not before: Mon 22 May 2023 17:05:54 +0000
ROA not after: Sun 20 Aug 2023 17:05:54 +0000
asID: 834
IP address blocks: 108.165.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:f7:d1:e4:98:22:ca:14:02:8b:63:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 22 17:05:54 2023 GMT
Not After : Aug 20 17:05:54 2023 GMT
Subject: CN=baca2e5c-ffa1-422e-abc9-7df35a060e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:2f:51:07:4e:57:41:1b:8d:53:65:79:05:
30:38:85:b8:66:a4:a6:c8:a2:e1:99:19:dc:7e:05:
69:44:b5:17:9f:e0:30:67:53:a1:e5:fa:31:33:d5:
61:10:95:f5:ed:21:a2:55:18:56:f8:59:f3:d9:e4:
a7:0b:fe:e4:1b:b6:a9:e5:ef:83:9b:fd:ed:72:84:
e4:2b:94:8e:20:15:c4:21:e5:35:4a:8d:f0:de:7a:
96:d3:e9:14:82:5b:25:b8:55:99:02:d1:cf:e4:20:
e1:e3:39:ac:f0:b8:e8:b2:a6:70:41:cc:1f:b4:51:
9e:a1:8b:51:14:06:7a:5d:24:8e:ff:c1:bd:d3:3e:
12:f1:c7:d2:ff:fd:b6:bb:d3:ba:0c:2d:3b:4d:88:
e5:9e:83:99:29:ee:2f:f0:93:51:5c:93:cc:5a:39:
c6:4a:56:9f:fb:83:eb:12:e9:20:28:e9:70:cd:1c:
0c:46:a5:f9:3b:fc:10:00:d1:7d:84:33:12:95:a2:
61:ea:91:85:a8:bb:c6:5e:02:ea:10:29:35:8d:ae:
3e:b9:78:13:a0:8d:4c:b1:b1:46:95:bb:e5:bd:64:
56:c5:8d:4f:6d:98:ee:0f:6d:8d:09:73:d3:1d:3a:
71:a5:1e:50:42:a3:e8:03:20:e7:cb:f0:e3:1e:76:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:25:E9:5D:EA:A3:DD:9B:6D:85:BD:2C:23:FA:51:59:C5:2A:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae14c7b9-4bbe-36d9-92e6-f0d279de92ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:33:a2:91:02:c0:b6:14:d7:08:e2:44:92:82:e6:c0:a0:06:
b2:de:be:65:9e:f3:a2:c3:56:5b:bf:24:a4:14:5e:7d:ba:a4:
60:53:84:af:0d:e3:1a:f7:ad:1e:75:1d:e7:94:75:2e:b9:a2:
c1:bc:68:bf:5a:55:2b:04:eb:20:c9:b0:a2:32:de:3b:ac:87:
b2:d0:f3:1c:a0:f1:85:86:72:0d:ef:ff:97:8f:5d:35:33:26:
e3:63:fd:16:95:c2:c7:ba:fd:0a:59:7d:58:01:e6:5b:2c:08:
dc:48:06:5e:33:eb:1b:27:b4:aa:ef:81:0a:ae:eb:3f:7b:8a:
5c:2d:8e:ba:cb:5e:8f:cf:6a:44:46:31:c6:9f:08:5d:e5:92:
d5:de:07:15:d6:86:be:00:05:4f:31:81:7b:74:d5:d9:f2:aa:
f5:1b:86:eb:f8:ec:57:91:76:fd:5d:cd:6f:df:bb:c9:70:14:
f9:18:36:c7:c1:64:d9:98:70:03:9c:88:fa:40:0c:8e:39:0b:
2d:db:0b:49:eb:48:05:11:18:2f:79:22:e3:dc:28:4a:b2:ce:
aa:98:16:ea:71:04:6c:c3:81:38:9a:b0:e8:8d:fe:6d:d2:28:
5d:7e:d5:a6:06:c5:a7:8a:1e:3e:25:c6:e7:d0:f0:1b:9d:1a:
da:dc:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:37 2025 by rpki-client