Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c168b726-df9d-30fc-a0cd-98f045bbdbb7.roa
File: c168b726-df9d-30fc-a0cd-98f045bbdbb7.roa (raw, json)
Hash identifier: h2Nef0IRBEIcBz505YJE76A016MNVNhFhhUMN0EeF7k=
Subject key identifier: 1D:B0:FE:D8:87:92:81:6A:43:4D:EB:F0:40:F1:1A:53:21:8C:DD:D9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328576D51CC73C042CFC172F21A98D4
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c168b726-df9d-30fc-a0cd-98f045bbdbb7.roa
Signing time: Fri 26 Jun 2020 19:28:48 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 61317
IP address blocks: 108.165.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:f2:1a:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=70ffc173-620d-456d-8b0b-6c3858e8ac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:da:9c:f8:72:87:58:03:29:c4:2c:9c:18:
3d:f3:ca:6c:9a:78:68:4e:62:44:76:ee:73:8f:5c:
cc:be:85:33:99:17:3c:ea:9a:63:a7:e4:05:f4:82:
a6:d9:60:c8:9f:0a:90:39:8c:ba:ff:f5:d9:a5:e6:
49:f0:ec:24:00:bb:f9:b1:86:b7:cc:24:cb:48:5a:
5a:60:9d:43:38:cb:16:94:f4:87:5d:d7:4f:c9:72:
0f:93:33:31:3d:12:a5:a2:1d:9a:51:ed:da:d1:64:
e1:9a:75:39:57:15:62:54:28:19:78:25:c8:ef:3a:
fc:9d:d9:fa:fc:8e:26:67:40:ee:1b:34:d2:d4:5a:
ad:ee:0a:70:da:3f:ba:4f:5c:78:ce:96:cd:fc:16:
25:e8:a5:02:2e:7e:26:1a:6c:84:e4:39:d0:b7:45:
f3:26:c0:f4:d1:74:e4:61:03:a8:80:7e:2b:34:04:
e0:70:c8:63:de:bc:02:a3:f9:c7:50:ce:16:f8:08:
93:9d:d7:9c:50:e6:32:05:e4:83:62:03:1d:59:9e:
e8:9d:3c:32:1f:34:b1:bc:7e:e8:64:3c:49:ac:43:
a4:89:08:16:8f:e3:c7:fb:84:d9:5a:fd:d2:d2:78:
f3:2c:d4:89:73:e2:1d:1c:28:15:b4:1e:f2:fa:1e:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:FE:D8:87:92:81:6A:43:4D:EB:F0:40:F1:1A:53:21:8C:DD:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c168b726-df9d-30fc-a0cd-98f045bbdbb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:c2:4f:ee:78:d7:e2:bc:6d:56:d5:50:45:7b:b3:83:bf:d4:
ce:bf:1b:aa:01:30:69:6c:93:2b:21:b0:92:a2:01:e1:8c:44:
ca:9d:61:84:a2:d2:33:d8:ce:c4:dd:dc:62:3b:9c:a4:97:79:
05:3f:b5:80:71:75:44:2e:15:1d:d1:5a:98:f0:44:1e:d4:81:
21:86:c9:e1:a3:40:f6:11:aa:5c:91:c5:af:81:bc:05:d6:2c:
64:3d:4c:05:3d:fa:e7:80:76:54:b7:bf:17:11:04:7c:dd:83:
85:54:32:1b:51:08:89:50:9b:22:30:fa:24:28:a9:38:db:f5:
20:bd:68:a4:89:e1:5e:e5:da:20:4c:ac:60:19:03:b2:3b:87:
28:77:30:fb:ac:b1:2b:23:36:1f:1d:8d:d2:ce:ac:69:b9:92:
13:fa:b6:1e:2e:68:26:1c:d9:ab:74:37:f2:99:f9:64:54:c5:
41:67:28:83:9d:ad:40:51:57:d7:02:62:d8:12:1b:c3:61:b7:
7f:fd:34:45:8c:81:1a:7a:67:f4:26:10:1d:f9:82:d1:04:c9:
6e:ba:ea:75:08:be:9c:eb:3b:fa:ae:9c:69:79:1e:44:09:bf:
bb:cb:0f:15:2b:fc:fd:6d:08:b2:b9:78:fe:4c:8a:2f:8b:47:
b1:e8:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:30:52 2025 by rpki-client