Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7a2675c-08fa-386e-9969-0b8068fd3aa8.roa
File: c7a2675c-08fa-386e-9969-0b8068fd3aa8.roa (raw, json)
Hash identifier: wknSa+j1geENYOgzRtslzFfcxTpw4oE80I7SY1cgWwI=
Subject key identifier: 77:30:EA:DD:D1:68:D8:66:EB:68:87:A6:AE:98:1E:F7:61:93:EB:CB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584210E7879CD297EDB0FB7A8D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7a2675c-08fa-386e-9969-0b8068fd3aa8.roa
Signing time: Wed 31 May 2023 16:44:42 +0000
ROA not before: Wed 31 May 2023 16:44:42 +0000
ROA not after: Tue 29 Aug 2023 16:44:42 +0000
asID: 834
IP address blocks: 108.165.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:10:e7:87:9c:d2:97:ed:b0:fb:7a:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 31 16:44:42 2023 GMT
Not After : Aug 29 16:44:42 2023 GMT
Subject: CN=d4ba859e-ac05-49de-97af-1e9f410bea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:4d:3d:57:bd:72:84:d1:79:6c:3c:9f:74:
78:1f:0a:35:8f:18:de:a8:0c:6c:02:8e:0b:d7:69:
67:8b:35:2d:33:1b:64:7f:f9:62:f6:97:08:00:c5:
63:19:45:c2:50:54:f7:d4:62:76:dd:00:2d:0b:be:
53:c6:67:8e:fc:09:8c:f6:21:1b:8a:78:c2:3c:c6:
62:14:00:f8:c9:6c:c1:09:55:ba:08:92:69:c8:d8:
f5:b3:8e:a4:3b:26:db:8a:8e:09:55:08:3f:0e:03:
7d:41:ce:16:09:dc:ab:1b:0f:e5:7e:17:de:e7:ee:
fb:e2:f1:3d:fb:d6:05:eb:99:87:a0:23:0b:97:e8:
bf:2f:ed:6d:1a:e8:60:dc:53:80:72:58:85:3b:ed:
9e:a2:4a:34:fb:91:aa:ef:48:88:10:f5:ab:7b:b2:
a2:b1:91:ee:2d:4c:32:4d:ac:68:2a:29:19:bf:77:
51:95:d5:0d:ea:9c:97:a0:58:2f:43:cf:e2:99:26:
af:d5:8c:5b:b5:c9:5e:16:c0:08:ba:a4:48:7d:75:
86:50:28:28:a1:2e:cd:12:a4:ae:bf:ed:24:10:f6:
22:1b:2d:15:76:f7:a0:a5:ce:7c:d3:52:7e:15:c7:
f8:96:cf:d6:24:98:31:63:aa:69:62:96:a8:cd:ff:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:EA:DD:D1:68:D8:66:EB:68:87:A6:AE:98:1E:F7:61:93:EB:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c7a2675c-08fa-386e-9969-0b8068fd3aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:e4:61:c9:94:97:ae:f0:2e:f9:45:3e:2f:cf:46:ec:81:95:
f3:73:be:ef:3a:85:06:6a:56:dd:0b:13:42:9d:62:61:49:c5:
c7:e2:bb:74:1c:f7:94:65:ba:5c:78:f1:9e:66:68:4e:78:5d:
08:9b:ab:c3:6c:f1:23:a7:7c:16:4b:a8:7c:9a:7a:d7:65:fa:
12:5f:d4:19:0d:d2:a4:61:1a:6e:45:51:50:50:0b:ab:e8:4b:
a5:cf:e6:e7:6f:a5:1b:2b:21:a6:95:f1:ad:ca:5b:c3:a2:d9:
86:e1:27:17:76:a5:4e:93:09:64:8c:74:1c:dc:27:78:f2:5e:
42:b7:65:c6:64:97:24:b4:cc:bc:da:90:17:69:b0:cc:e2:24:
bf:69:a1:1a:8b:ad:70:a4:93:89:f9:bf:e6:14:8a:1b:df:74:
71:40:88:49:5b:de:06:41:71:7c:d3:73:7d:5e:a8:13:85:e2:
b4:9c:28:83:e9:52:08:a7:e9:b5:d8:5b:c5:72:77:3a:1f:95:
af:e6:47:b5:5c:7f:46:88:72:8c:00:c5:4b:c1:26:f8:f1:6b:
cf:8f:57:43:f9:79:8e:84:e8:c2:c5:07:98:f1:36:7c:42:d3:
7b:51:44:0d:1d:ad:f9:ba:ac:54:56:4f:61:69:78:76:42:1e:
98:2e:75:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIQ54ec0pftsPt6jYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUzMTE2NDQ0MloXDTIzMDgyOTE2NDQ0MlowLzEtMCsGA1UEAxMk
ZDRiYTg1OWUtYWMwNS00OWRlLTk3YWYtMWU5ZjQxMGJlYTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PZNPVe9coTReWw8n3R4Hwo1jxjeqAxsAo4L
12lnizUtMxtkf/li9pcIAMVjGUXCUFT31GJ23QAtC75TxmeO/AmM9iEbinjCPMZi
FAD4yWzBCVW6CJJpyNj1s46kOybbio4JVQg/DgN9Qc4WCdyrGw/lfhfe5+774vE9
+9YF65mHoCMLl+i/L+1tGuhg3FOAcliFO+2eoko0+5Gq70iIEPWre7KisZHuLUwy
TaxoKikZv3dRldUN6pyXoFgvQ8/imSav1YxbtcleFsAIuqRIfXWGUCgooS7NEqSu
v+0kEPYiGy0Vdvegpc5801J+Fcf4ls/WJJgxY6ppYpaozf/bXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcw6t3RaNhm62iHpq6YHvdhk+vLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzdhMjY3NWMtMDhmYS0z
ODZlLTk5NjktMGI4MDY4ZmQzYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILkYcmUl67wLvlFPi/PRuyBlfNzvu86hQZqVt0LE0KdYmFJxcfiu3Qc
95Rlulx48Z5maE54XQibq8Ns8SOnfBZLqHyaetdl+hJf1BkN0qRhGm5FUVBQC6vo
S6XP5udvpRsrIaaV8a3KW8Oi2YbhJxd2pU6TCWSMdBzcJ3jyXkK3ZcZklyS0zLza
kBdpsMziJL9poRqLrXCkk4n5v+YUihvfdHFAiElb3gZBcXzTc31eqBOF4rScKIPp
Ugin6bXYW8Vydzofla/mR7Vcf0aIcowAxUvBJvjxa8+PV0P5eY6E6MLFB5jxNnxC
03tRRA0drfm6rFRWT2FpeHZCHpgudV4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:55 2025 by rpki-client