Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baa2b5bb-4afd-33e0-a740-cc98e8c54b40.roa
File: baa2b5bb-4afd-33e0-a740-cc98e8c54b40.roa (raw, json)
Hash identifier: 3VnIeJtlu2napQG4+NUYOjtyGcTqpslPLIPQLl+r7I0=
Subject key identifier: DA:2F:6A:B1:C3:A8:C6:BF:17:56:CE:28:CD:96:16:9A:55:58:73:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842244F6FFC7DE11B48585BFE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baa2b5bb-4afd-33e0-a740-cc98e8c54b40.roa
Signing time: Wed 07 Jun 2023 15:34:25 +0000
ROA not before: Wed 07 Jun 2023 15:34:25 +0000
ROA not after: Tue 05 Sep 2023 15:34:25 +0000
asID: 834
IP address blocks: 108.165.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:24:4f:6f:fc:7d:e1:1b:48:58:5b:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 7 15:34:25 2023 GMT
Not After : Sep 5 15:34:25 2023 GMT
Subject: CN=d2260616-36a3-4c18-9462-0b98ab21bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:a9:0c:b9:5b:d0:90:89:cc:3a:39:87:12:
45:17:31:c9:9f:46:39:1b:16:6f:ac:84:9f:23:ac:
f0:bb:e6:9a:cb:a1:5b:a6:61:95:74:a5:13:62:97:
96:58:f0:ab:41:7a:d6:88:e3:69:e3:7a:9c:c2:1d:
47:2f:36:b9:bf:b1:42:af:f4:43:06:94:43:e9:45:
12:5f:83:65:07:b1:ff:c1:00:ea:6f:d4:57:5a:34:
21:1e:e4:9a:eb:03:87:7c:e3:01:9e:90:da:11:6d:
17:b5:86:75:5e:8a:32:c5:28:54:45:6b:c2:ff:f9:
68:e2:73:e3:19:e5:89:bb:ce:63:4c:b4:c1:05:91:
cd:4f:b5:ac:f4:11:6b:e1:f3:25:5c:6b:45:b7:e2:
d3:50:fa:00:3d:cb:28:d5:42:ae:e5:36:b2:f6:9e:
76:2f:72:35:cd:6a:c3:88:69:56:e8:60:5b:de:20:
95:39:42:29:b3:cd:24:6b:d3:94:f0:38:b7:d6:ed:
49:2c:73:1c:43:b6:50:8c:52:93:40:0a:ef:54:c8:
6b:74:22:42:1b:e0:7b:80:e1:0a:2c:51:97:11:8a:
f1:b1:8d:04:3e:82:8f:c3:d9:2d:88:43:f8:07:c2:
af:0b:44:13:13:82:05:99:3d:29:ef:4f:83:b0:28:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:6A:B1:C3:A8:C6:BF:17:56:CE:28:CD:96:16:9A:55:58:73:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/baa2b5bb-4afd-33e0-a740-cc98e8c54b40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:97:9c:1b:7f:a3:03:39:69:11:ba:4b:27:9f:3b:3c:85:29:
18:02:75:a0:16:b8:e0:ea:4d:af:55:0b:6a:ae:01:f0:ac:c6:
da:93:ba:17:32:fe:51:56:dc:79:4e:34:39:78:a2:59:7a:80:
4b:27:ec:83:66:ee:6f:e3:93:51:45:18:de:25:df:2c:7b:fa:
1d:ae:97:77:18:fa:7d:ed:7a:70:99:65:fa:61:e2:28:e9:58:
07:93:78:62:c9:48:50:2e:aa:d9:72:b6:55:c1:f6:70:3a:9c:
70:20:8f:53:9d:b7:e2:ea:70:ea:8b:69:5e:61:8a:4b:b2:99:
08:1e:ae:f1:35:27:99:52:a9:6f:ae:0c:ce:32:eb:f1:95:e7:
5a:2a:bf:ba:82:4a:74:1b:dd:a0:d8:01:0a:1f:0c:d7:69:eb:
e8:3e:75:cb:a4:a6:88:5d:5f:1c:ab:ca:bc:10:47:d4:b9:5b:
be:d3:5d:9e:e5:25:03:e9:21:58:0c:53:98:cb:c0:97:60:1a:
76:bf:f6:2b:c3:21:9e:9d:61:b4:70:56:40:3b:81:94:d7:b2:
4d:f1:cd:a2:0f:88:10:35:07:a7:43:98:4e:f9:d3:f2:03:c1:
96:86:b1:98:5a:e9:e1:cf:66:2d:d0:10:b8:14:84:65:05:2c:
c5:44:61:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIkT2/8feEbSFhb/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYwNzE1MzQyNVoXDTIzMDkwNTE1MzQyNVowLzEtMCsGA1UEAxMk
ZDIyNjA2MTYtMzZhMy00YzE4LTk0NjItMGI5OGFiMjFiZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldKpDLlb0JCJzDo5hxJFFzHJn0Y5GxZvrISf
I6zwu+aay6FbpmGVdKUTYpeWWPCrQXrWiONp43qcwh1HLza5v7FCr/RDBpRD6UUS
X4NlB7H/wQDqb9RXWjQhHuSa6wOHfOMBnpDaEW0XtYZ1XooyxShURWvC//lo4nPj
GeWJu85jTLTBBZHNT7Ws9BFr4fMlXGtFt+LTUPoAPcso1UKu5Tay9p52L3I1zWrD
iGlW6GBb3iCVOUIps80ka9OU8Di31u1JLHMcQ7ZQjFKTQArvVMhrdCJCG+B7gOEK
LFGXEYrxsY0EPoKPw9ktiEP4B8KvC0QTE4IFmT0p70+DsChE0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNovarHDqMa/F1bOKM2WFppVWHMhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmFhMmI1YmItNGFmZC0z
M2UwLWE3NDAtY2M5OGU4YzU0YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaXnBt/owM5aRG6SyefOzyFKRgCdaAWuODqTa9VC2quAfCsxtqTuhcy
/lFW3HlONDl4oll6gEsn7INm7m/jk1FFGN4l3yx7+h2ul3cY+n3tenCZZfph4ijp
WAeTeGLJSFAuqtlytlXB9nA6nHAgj1Odt+LqcOqLaV5hikuymQgervE1J5lSqW+u
DM4y6/GV51oqv7qCSnQb3aDYAQofDNdp6+g+dcukpohdXxyryrwQR9S5W77TXZ7l
JQPpIVgMU5jLwJdgGna/9ivDIZ6dYbRwVkA7gZTXsk3xzaIPiBA1B6dDmE750/ID
wZaGsZha6eHPZi3QELgUhGUFLMVEYdY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:50 2025 by rpki-client