Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a21d4f5-bebc-38f2-bfb0-27cd1019e65c.roa
File: 1a21d4f5-bebc-38f2-bfb0-27cd1019e65c.roa (raw, json)
Hash identifier: sAeRTaaqM1sRNHNeOOseXHDvyZiuSMXTv6zx3q/hJzs=
Subject key identifier: 4A:04:BC:CA:B3:DA:4E:A2:F8:C0:89:07:72:F7:DB:FD:65:C0:A3:F7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846970A61CDC9522CF9FCE74A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a21d4f5-bebc-38f2-bfb0-27cd1019e65c.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 212238
IP address blocks: 108.165.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:61:cd:c9:52:2c:f9:fc:e7:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=9e88748a-b8af-49bd-b145-5e7a1b83f494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:89:98:43:e0:fc:b0:af:e6:8e:3f:b8:5f:
d0:ce:52:cf:14:30:e1:dd:6e:e8:a8:38:99:90:69:
d7:a0:39:a4:85:3c:96:ce:7f:82:01:30:f0:01:c8:
12:a4:bb:03:82:da:a5:b5:82:65:ab:88:6b:1d:9b:
c1:7d:26:ef:61:99:13:46:55:98:b0:83:18:c8:b9:
8e:ab:f2:5a:89:73:bc:f9:38:45:d0:bd:d5:85:32:
d6:82:8f:96:0d:bb:25:20:e0:44:5b:6a:17:01:4b:
08:90:dd:6c:ee:68:20:01:1f:2a:f8:2e:ac:ba:1e:
56:27:8e:5e:eb:2f:9e:34:6d:59:e0:15:66:1f:b1:
ee:a7:05:c4:76:ec:80:12:6b:26:7b:9f:37:22:3a:
a6:df:2a:4f:4f:2b:51:aa:38:a0:3e:1a:5b:4a:c8:
f3:6e:18:5c:71:52:7f:a6:a4:90:a2:ad:d4:77:50:
54:5c:48:e5:72:3a:82:e2:7e:36:6c:7e:96:69:d6:
1a:28:ef:a4:fc:7d:93:d1:d6:54:4f:68:92:55:1a:
7c:b3:2e:7d:4f:23:0c:c0:72:68:ec:de:af:e3:1a:
3f:13:be:02:64:b7:a4:9a:4d:c4:2f:74:19:17:6a:
d6:85:8e:d6:08:9f:12:9f:9c:90:8e:23:4c:ea:d7:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:BC:CA:B3:DA:4E:A2:F8:C0:89:07:72:F7:DB:FD:65:C0:A3:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1a21d4f5-bebc-38f2-bfb0-27cd1019e65c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:39:92:16:af:0d:f5:60:c2:76:cb:c3:47:f5:31:a1:bf:a2:
45:4e:5b:af:6b:5c:b1:aa:e1:88:3d:3a:4e:7c:1f:a5:90:2e:
4b:8a:ac:f3:d2:8c:51:c4:a0:d0:db:ed:2e:63:ee:59:1a:50:
44:a8:e3:7b:54:ae:8e:b5:82:af:e0:07:16:58:30:ca:1d:de:
3d:f2:01:e3:1b:81:bb:d8:ee:15:ad:ba:6c:b3:45:86:69:06:
20:66:c8:f2:33:fe:78:46:14:fb:dc:28:f9:c8:f9:e8:8b:8c:
9d:b1:9c:90:68:c8:53:26:9a:a6:cf:53:c6:3d:c2:8d:8e:8a:
ed:96:c7:67:fe:b2:dd:ba:32:31:4c:75:19:7a:c4:68:f4:d8:
44:f3:6d:a2:11:53:45:b1:c6:f3:41:ab:8b:f4:59:d0:84:4a:
58:c9:94:d8:87:93:ee:44:e6:f7:90:11:14:e8:04:0e:91:a2:
df:b2:d5:8b:91:92:78:9c:31:0a:6f:25:ee:37:32:9b:5d:85:
fa:c5:6d:d5:9f:60:5e:a0:bd:c1:05:db:7f:60:61:3f:f2:e6:
ab:e9:c8:7b:ee:56:60:9f:b8:2f:f8:97:0a:9c:19:5d:06:84:
1b:91:54:63:e4:b1:33:21:1d:ec:89:9d:d3:d9:d9:4c:c3:23:
13:22:5c:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXCmHNyVIs+fznSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
OWU4ODc0OGEtYjhhZi00OWJkLWIxNDUtNWU3YTFiODNmNDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQaJmEPg/LCv5o4/uF/QzlLPFDDh3W7oqDiZ
kGnXoDmkhTyWzn+CATDwAcgSpLsDgtqltYJlq4hrHZvBfSbvYZkTRlWYsIMYyLmO
q/JaiXO8+ThF0L3VhTLWgo+WDbslIOBEW2oXAUsIkN1s7mggAR8q+C6suh5WJ45e
6y+eNG1Z4BVmH7HupwXEduyAEmsme583Ijqm3ypPTytRqjigPhpbSsjzbhhccVJ/
pqSQoq3Ud1BUXEjlcjqC4n42bH6WadYaKO+k/H2T0dZUT2iSVRp8sy59TyMMwHJo
7N6v4xo/E74CZLekmk3EL3QZF2rWhY7WCJ8Sn5yQjiNM6tcTMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEoEvMqz2k6i+MCJB3L32/1lwKP3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWEyMWQ0ZjUtYmViYy0z
OGYyLWJmYjAtMjdjZDEwMTllNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU5khavDfVgwnbLw0f1MaG/okVOW69rXLGq4Yg9Ok58H6WQLkuKrPPS
jFHEoNDb7S5j7lkaUESo43tUro61gq/gBxZYMMod3j3yAeMbgbvY7hWtumyzRYZp
BiBmyPIz/nhGFPvcKPnI+eiLjJ2xnJBoyFMmmqbPU8Y9wo2Oiu2Wx2f+st26MjFM
dRl6xGj02ETzbaIRU0WxxvNBq4v0WdCESljJlNiHk+5E5veQERToBA6Rot+y1YuR
knicMQpvJe43MptdhfrFbdWfYF6gvcEF239gYT/y5qvpyHvuVmCfuC/4lwqcGV0G
hBuRVGPksTMhHeyJndPZ2UzDIxMiXIc=
-----END CERTIFICATE-----
Generated at Sun May 11 20:13:32 2025 by rpki-client