Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68bbedf7-2d98-3664-8d48-b654b3c83932.roa
File: 68bbedf7-2d98-3664-8d48-b654b3c83932.roa (raw, json)
Hash identifier: FpprgTg4tHhoehwP08ydAbqflXv7QOLUCwed5FLVsus=
Subject key identifier: A5:C0:50:FB:A5:E9:DE:00:DB:62:DD:6B:A3:C6:EC:BD:EC:4F:27:CF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858458049704A75DA6173F4660C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68bbedf7-2d98-3664-8d48-b654b3c83932.roa
Signing time: Wed 10 Apr 2024 16:37:31 +0000
ROA not before: Wed 10 Apr 2024 16:37:31 +0000
ROA not after: Tue 09 Jul 2024 16:37:31 +0000
asID: 834
IP address blocks: 108.165.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:80:49:70:4a:75:da:61:73:f4:66:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Apr 10 16:37:31 2024 GMT
Not After : Jul 9 16:37:31 2024 GMT
Subject: CN=54f8b2b8-ff3f-410e-a99b-2efc54ba5758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:b4:e6:c0:bd:40:c3:20:9f:0d:27:01:1e:
3d:e8:d3:f7:d3:b9:b0:8a:7a:2c:48:fa:fc:d2:ef:
4d:45:59:b1:a9:c2:5b:3f:3c:af:f7:27:d1:e0:39:
1b:96:35:42:98:de:ad:ea:d3:d0:8d:fd:7c:cf:78:
78:a3:97:f4:9e:ad:a1:e5:da:26:dd:5e:70:1e:63:
39:e6:fe:c4:a2:14:24:96:97:f1:23:b1:9d:5c:c2:
dc:67:92:83:43:eb:f5:18:18:2a:b7:19:47:fa:8c:
d0:d5:db:a8:ac:2c:33:36:02:45:aa:3c:5a:68:80:
34:15:3a:e3:a7:f9:4e:3c:e0:74:08:f0:ac:55:41:
ad:bd:d9:98:4f:57:69:4a:f2:d3:ff:d3:ba:38:e0:
56:c4:f7:2e:82:61:31:95:82:9b:f2:a8:bb:bf:31:
20:a0:96:f6:18:f1:19:ca:c2:58:35:43:31:8d:3a:
e8:fa:b7:07:d3:da:c4:fc:3e:5b:c3:dd:d4:49:0a:
97:63:ff:f5:b5:c8:4a:b3:eb:9a:09:f3:b2:3d:a5:
68:0d:9e:c7:2f:c9:8e:f9:80:32:83:44:11:52:1f:
e3:e8:ab:09:01:12:3c:89:f3:c7:8e:e8:ef:2f:e9:
13:ef:64:68:6a:3d:19:a0:98:94:eb:c5:c9:f8:0b:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:50:FB:A5:E9:DE:00:DB:62:DD:6B:A3:C6:EC:BD:EC:4F:27:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/68bbedf7-2d98-3664-8d48-b654b3c83932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:1a:13:6e:82:f4:06:05:a9:0a:fc:f3:00:be:e8:32:2a:03:
25:75:f1:65:c1:0b:58:f5:3d:aa:be:cb:58:c1:cf:82:10:63:
74:a5:ed:91:f7:4d:8c:50:c9:fe:93:ec:a6:99:f9:14:74:51:
92:c9:3e:13:c2:5c:ee:7f:37:ff:ad:50:f4:2b:8a:62:b2:47:
a3:0d:cc:6f:dd:c9:8f:e4:e3:1a:ce:2b:99:cb:9e:ce:0d:50:
88:b3:6e:4b:eb:d6:ff:f2:21:ad:d9:a5:46:16:6a:1b:2f:8f:
b4:bc:60:72:88:74:17:3e:5c:52:78:f9:dd:cc:4c:78:3e:4c:
6f:bb:9c:1c:ec:8e:fb:53:4f:43:c2:fd:40:e8:03:7d:2e:07:
05:b9:0a:5c:4b:d7:32:ca:5b:ed:c2:18:40:dc:70:94:5e:4d:
46:27:05:fc:2e:5a:5a:f9:be:b5:ff:63:e5:cf:58:03:d5:60:
99:3d:1a:33:fe:5d:ed:6b:c8:c8:18:1f:71:64:05:9a:d3:93:
0d:6a:e1:65:aa:5b:3c:46:57:a1:15:33:1f:a8:05:04:b2:d3:
7a:d5:3c:c7:39:ec:fe:4e:3f:c8:9e:82:66:e6:41:44:e1:63:
cb:cc:13:30:25:f3:09:16:dd:8c:c8:0a:4c:f0:1f:7f:02:11:
c3:62:57:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWASXBKddphc/RmDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDQxMDE2MzczMVoXDTI0MDcwOTE2MzczMVowLzEtMCsGA1UEAxMk
NTRmOGIyYjgtZmYzZi00MTBlLWE5OWItMmVmYzU0YmE1NzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFm05sC9QMMgnw0nAR496NP307mwinosSPr8
0u9NRVmxqcJbPzyv9yfR4DkbljVCmN6t6tPQjf18z3h4o5f0nq2h5dom3V5wHmM5
5v7EohQklpfxI7GdXMLcZ5KDQ+v1GBgqtxlH+ozQ1duorCwzNgJFqjxaaIA0FTrj
p/lOPOB0CPCsVUGtvdmYT1dpSvLT/9O6OOBWxPcugmExlYKb8qi7vzEgoJb2GPEZ
ysJYNUMxjTro+rcH09rE/D5bw93USQqXY//1tchKs+uaCfOyPaVoDZ7HL8mO+YAy
g0QRUh/j6KsJARI8ifPHjujvL+kT72Roaj0ZoJiU68XJ+AsAxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXAUPul6d4A22Lda6PG7L3sTyfPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjhiYmVkZjctMmQ5OC0z
NjY0LThkNDgtYjY1NGIzYzgzOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkaE26C9AYFqQr88wC+6DIqAyV18WXBC1j1Paq+y1jBz4IQY3Sl7ZH3
TYxQyf6T7KaZ+RR0UZLJPhPCXO5/N/+tUPQrimKyR6MNzG/dyY/k4xrOK5nLns4N
UIizbkvr1v/yIa3ZpUYWahsvj7S8YHKIdBc+XFJ4+d3MTHg+TG+7nBzsjvtTT0PC
/UDoA30uBwW5ClxL1zLKW+3CGEDccJReTUYnBfwuWlr5vrX/Y+XPWAPVYJk9GjP+
Xe1ryMgYH3FkBZrTkw1q4WWqWzxGV6EVMx+oBQSy03rVPMc57P5OP8iegmbmQUTh
Y8vMEzAl8wkW3YzICkzwH38CEcNiV1Q=
-----END CERTIFICATE-----
Generated at Thu Mar 27 19:32:45 2025 by rpki-client