Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18c973e6-17c0-3997-890f-9a17fe0c18c6.roa
File: 18c973e6-17c0-3997-890f-9a17fe0c18c6.roa (raw, json)
Hash identifier: n3DFKkXtXcAwDfZWzInLT838tp1jjwJBG07vT/YLhP0=
Subject key identifier: FE:61:EF:9C:57:A0:AF:05:74:62:13:E1:6B:E6:61:1F:93:D7:FA:5A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CBAFE7B1C4144A6B22E65AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18c973e6-17c0-3997-890f-9a17fe0c18c6.roa
Signing time: Thu 06 Feb 2025 19:10:25 +0000
ROA not before: Thu 06 Feb 2025 19:10:25 +0000
ROA not after: Wed 07 May 2025 18:10:25 +0000
asID: 401152
IP address blocks: 108.165.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:af:e7:b1:c4:14:4a:6b:22:e6:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 19:10:25 2025 GMT
Not After : May 7 18:10:25 2025 GMT
Subject: CN=ac199263-0432-4cca-8c31-6058518e176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:19:2f:7e:86:08:a9:1f:bc:d3:6c:4f:0a:
68:07:94:a4:69:f5:4b:f4:f4:28:13:a1:4b:03:c2:
90:0e:84:c6:6d:ee:e3:cf:1e:3f:14:48:df:3b:88:
39:c6:03:d7:26:fe:3b:ab:3b:c1:65:32:98:d3:c4:
84:cd:72:fd:19:91:31:66:72:af:b0:16:c6:87:bc:
11:0f:d6:e2:74:cc:1a:07:cf:3f:ff:03:43:2d:31:
35:b0:d3:dc:66:a0:f1:e6:5d:ef:08:e9:36:25:76:
e5:68:c9:c6:c0:77:72:09:e0:a0:9a:5e:ae:99:61:
4a:5c:f4:65:20:dc:e8:01:dd:41:10:db:b4:f2:8c:
17:7d:f3:75:20:be:d9:61:4c:7b:0b:10:16:48:b3:
1c:ed:56:94:f4:0e:02:7b:55:7d:af:e2:0f:15:fc:
35:60:a6:06:8d:82:4b:4f:96:fa:cd:78:24:ff:af:
5e:60:9e:f5:c9:df:16:5f:c3:ad:fe:d5:ed:05:b2:
6f:d9:19:be:d5:7e:3c:46:71:2e:1e:43:83:35:e8:
ca:4c:a2:1f:85:8d:39:23:3c:2f:90:90:5b:05:d0:
06:ac:54:cd:34:60:19:07:58:cd:aa:18:1b:4b:62:
fe:5d:c9:ac:d0:27:8a:0c:92:fb:e9:d2:4d:81:92:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:EF:9C:57:A0:AF:05:74:62:13:E1:6B:E6:61:1F:93:D7:FA:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18c973e6-17c0-3997-890f-9a17fe0c18c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:53:4a:e4:c9:09:d1:4d:a8:e6:f8:46:bf:d9:18:c5:a9:a1:
c4:cb:b8:14:0b:dc:3e:eb:b3:33:fd:0d:04:12:86:b5:19:9d:
7b:88:41:93:31:35:e1:fc:5e:c8:6c:20:94:c3:c5:ac:75:5a:
92:47:f9:22:20:24:da:42:af:09:56:98:fd:46:79:59:31:4b:
b2:5c:0b:ad:4f:d7:b3:ea:a8:3e:a5:50:41:45:4f:f6:b9:df:
65:e9:f8:43:aa:df:84:d1:9d:bf:5c:d5:50:6c:6c:43:14:87:
d8:54:4a:9d:7c:59:78:9b:2b:89:f2:11:61:aa:c5:45:68:71:
d5:02:f9:38:06:00:41:05:e9:88:1d:3a:8c:14:f4:af:b0:aa:
b9:6a:71:06:6e:74:ab:47:99:42:b8:55:6b:2c:77:76:34:59:
81:cd:f3:01:5a:4a:49:0b:81:1e:4d:68:84:70:ab:1b:94:41:
ea:bb:f3:93:18:00:44:25:17:70:4e:ae:d4:b9:94:3d:ff:a3:
af:21:a4:d4:08:54:55:2b:f6:be:2c:ff:59:15:e7:7b:da:67:
bf:7d:de:fa:61:08:26:f4:09:fe:1d:0c:7e:3e:09:bd:ba:da:
66:b4:3d:a7:05:ef:dd:92:04:5d:2e:95:62:f8:4a:f9:ef:53:
61:1b:b8:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLr+exxBRKayLmWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwNjE5MTAyNVoXDTI1MDUwNzE4MTAyNVowLzEtMCsGA1UEAxMk
YWMxOTkyNjMtMDQzMi00Y2NhLThjMzEtNjA1ODUxOGUxNzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIkZL36GCKkfvNNsTwpoB5SkafVL9PQoE6FL
A8KQDoTGbe7jzx4/FEjfO4g5xgPXJv47qzvBZTKY08SEzXL9GZExZnKvsBbGh7wR
D9bidMwaB88//wNDLTE1sNPcZqDx5l3vCOk2JXblaMnGwHdyCeCgml6umWFKXPRl
INzoAd1BENu08owXffN1IL7ZYUx7CxAWSLMc7VaU9A4Ce1V9r+IPFfw1YKYGjYJL
T5b6zXgk/69eYJ71yd8WX8Ot/tXtBbJv2Rm+1X48RnEuHkODNejKTKIfhY05Izwv
kJBbBdAGrFTNNGAZB1jNqhgbS2L+Xcms0CeKDJL76dJNgZInCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5h75xXoK8FdGIT4WvmYR+T1/paMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMThjOTczZTYtMTdjMC0z
OTk3LTg5MGYtOWExN2ZlMGMxOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBTSuTJCdFNqOb4Rr/ZGMWpocTLuBQL3D7rszP9DQQShrUZnXuIQZMx
NeH8XshsIJTDxax1WpJH+SIgJNpCrwlWmP1GeVkxS7JcC61P17PqqD6lUEFFT/a5
32Xp+EOq34TRnb9c1VBsbEMUh9hUSp18WXibK4nyEWGqxUVocdUC+TgGAEEF6Ygd
OowU9K+wqrlqcQZudKtHmUK4VWssd3Y0WYHN8wFaSkkLgR5NaIRwqxuUQeq785MY
AEQlF3BOrtS5lD3/o68hpNQIVFUr9r4s/1kV53vaZ7993vphCCb0Cf4dDH4+Cb26
2ma0PacF792SBF0ulWL4SvnvU2EbuEQ=
-----END CERTIFICATE-----
Generated at Fri May 9 05:36:11 2025 by rpki-client