Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be7e40aa-e9e1-3f3c-bbba-b11069fa665d.roa
File: be7e40aa-e9e1-3f3c-bbba-b11069fa665d.roa (raw, json)
Hash identifier: ARsu9Oii/3evXkNxkQShL+t989osHupV9yTuwgnZcmU=
Subject key identifier: A6:A2:6A:65:BA:69:BF:45:4F:95:75:AF:46:F4:F4:49:A1:37:6F:3C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583DE1141A3952D9E651D71E8000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be7e40aa-e9e1-3f3c-bbba-b11069fa665d.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Wed 14 Aug 2024 04:00:00 +0000
asID: 207459
IP address blocks: 108.165.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:e1:14:1a:39:52:d9:e6:51:d7:1e:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Aug 14 04:00:00 2024 GMT
Subject: CN=195093e7-e66a-4aa3-b582-79c7e5b31bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:63:0b:a9:e5:9f:89:66:b0:e5:c6:1d:31:
03:ef:6d:21:72:0b:f6:ad:65:db:d7:ed:57:cc:ad:
9c:00:49:99:c1:86:3c:3e:da:42:8b:f7:64:fa:ec:
74:2a:d4:fd:93:ca:20:50:27:ab:18:e8:45:91:d1:
a5:83:d2:48:70:5d:92:70:a6:91:95:c3:e7:aa:22:
d4:de:dc:d7:69:a0:f8:d8:ff:1c:8a:a9:20:18:1e:
28:e4:13:14:8d:15:19:ca:45:f5:fd:73:f3:4b:03:
5b:96:dd:e2:2c:00:79:05:41:cc:4a:2d:f0:e2:50:
da:37:b0:13:1c:56:0c:35:95:f6:0e:b1:3a:06:a0:
8a:f1:2b:c5:5d:c5:7e:94:5d:90:6d:53:14:71:96:
5c:6d:05:15:2d:eb:4f:8e:5b:c0:82:a5:12:37:ad:
3d:21:df:21:a3:6d:18:5d:db:af:e5:9a:52:68:03:
3c:32:95:be:56:31:8d:62:02:4c:7f:b7:b0:ff:be:
f7:2e:b2:69:12:f0:56:26:43:00:9a:b3:67:10:60:
97:99:d4:18:36:15:2a:52:47:3e:dc:8e:05:fc:27:
9d:ef:e5:59:f9:12:a0:20:41:53:e2:48:e8:64:08:
81:9f:67:5d:0a:01:ed:19:59:3e:cd:73:d0:7d:f2:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:6A:65:BA:69:BF:45:4F:95:75:AF:46:F4:F4:49:A1:37:6F:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be7e40aa-e9e1-3f3c-bbba-b11069fa665d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:0f:92:c7:bb:ac:f8:23:95:1b:af:17:0e:21:47:98:42:b1:
cf:ad:43:b0:bf:eb:d5:41:47:80:d9:38:8c:8a:cb:98:b8:27:
69:09:4f:e6:40:fc:b9:ef:b6:74:80:7e:ff:01:4b:9e:c2:e3:
c5:b3:10:52:1f:01:49:69:60:d5:bc:89:23:0f:2e:85:07:f4:
22:1a:24:d3:4f:67:98:ab:09:f9:d6:8e:e4:e2:24:d4:3f:76:
79:3a:be:ea:a5:88:a9:15:c3:45:71:a5:1f:e6:ec:76:2c:b7:
b0:5c:df:52:4d:3a:a5:ba:18:8f:f9:70:0e:e4:8b:ba:9f:d9:
a2:38:29:bd:2b:b1:2d:56:d1:c7:58:cd:36:50:bc:17:93:b8:
30:45:03:f4:14:25:ce:db:95:9c:06:b8:4a:ad:50:5a:10:45:
0d:3b:ee:d8:0c:e5:fc:0d:00:42:18:ce:6f:67:60:f0:d2:83:
70:cd:dc:bb:d2:9b:9d:bb:2b:db:6d:da:1c:65:95:d0:13:85:
a0:1e:05:9e:68:86:b6:e9:e9:e1:ed:92:e8:d9:0b:fb:12:34:
78:d8:e8:39:1b:b7:46:1a:fe:d4:b6:8a:ca:80:58:34:7a:9f:
fa:70:b6:5d:7f:b6:ff:77:94:21:2e:3a:f5:d9:33:34:28:75:
19:6c:21:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3hFBo5UtnmUdcegAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MDgxNDA0MDAwMFowLzEtMCsGA1UEAxMk
MTk1MDkzZTctZTY2YS00YWEzLWI1ODItNzljN2U1YjMxYmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP9jC6nln4lmsOXGHTED720hcgv2rWXb1+1X
zK2cAEmZwYY8PtpCi/dk+ux0KtT9k8ogUCerGOhFkdGlg9JIcF2ScKaRlcPnqiLU
3tzXaaD42P8ciqkgGB4o5BMUjRUZykX1/XPzSwNblt3iLAB5BUHMSi3w4lDaN7AT
HFYMNZX2DrE6BqCK8SvFXcV+lF2QbVMUcZZcbQUVLetPjlvAgqUSN609Id8ho20Y
Xduv5ZpSaAM8MpW+VjGNYgJMf7ew/773LrJpEvBWJkMAmrNnEGCXmdQYNhUqUkc+
3I4F/Ced7+VZ+RKgIEFT4kjoZAiBn2ddCgHtGVk+zXPQffJcgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaiamW6ab9FT5V1r0b09EmhN288MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmU3ZTQwYWEtZTllMS0z
ZjNjLWJiYmEtYjExMDY5ZmE2NjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUPkse7rPgjlRuvFw4hR5hCsc+tQ7C/69VBR4DZOIyKy5i4J2kJT+ZA
/LnvtnSAfv8BS57C48WzEFIfAUlpYNW8iSMPLoUH9CIaJNNPZ5irCfnWjuTiJNQ/
dnk6vuqliKkVw0VxpR/m7HYst7Bc31JNOqW6GI/5cA7ki7qf2aI4Kb0rsS1W0cdY
zTZQvBeTuDBFA/QUJc7blZwGuEqtUFoQRQ077tgM5fwNAEIYzm9nYPDSg3DN3LvS
m527K9tt2hxlldAThaAeBZ5ohrbp6eHtkujZC/sSNHjY6Dkbt0Ya/tS2isqAWDR6
n/pwtl1/tv93lCEuOvXZMzQodRlsIbc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:31 2025 by rpki-client