Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94a0ed45-12e4-33ca-adf1-332fd9b7e6c8.roa
File: 94a0ed45-12e4-33ca-adf1-332fd9b7e6c8.roa (raw, json)
Hash identifier: 2NMc0ImN64aoVeMe3cS1f7C+L+a2gJQHEz9mSCWXSaA=
Subject key identifier: 73:11:D6:4C:FD:7D:2B:F9:A1:50:67:A7:B7:BB:DF:53:C4:AB:18:B7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847CB045E4504488E9F087C6680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94a0ed45-12e4-33ca-adf1-332fd9b7e6c8.roa
Signing time: Wed 06 Nov 2024 20:37:51 +0000
ROA not before: Wed 06 Nov 2024 20:37:51 +0000
ROA not after: Tue 04 Feb 2025 20:37:51 +0000
asID: 834
IP address blocks: 108.165.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cb:04:5e:45:04:48:8e:9f:08:7c:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 6 20:37:51 2024 GMT
Not After : Feb 4 20:37:51 2025 GMT
Subject: CN=f63e9145-98c8-49bc-abcc-d79f11a082f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:15:e7:ff:3a:4f:09:a7:f9:dd:0f:3c:a3:f0:
e0:63:1c:fe:54:a6:2e:b1:9b:2f:4b:45:5a:70:2d:
2c:b6:3e:95:66:55:22:d7:a8:74:d2:06:9f:b2:a1:
1d:9c:7a:6d:0b:63:28:63:3d:9f:4d:e6:26:31:80:
98:5e:67:2f:8c:06:b7:5f:e3:e7:f0:28:ae:2c:d8:
05:67:77:d0:0b:65:15:2a:01:d4:bb:e7:b2:09:b3:
02:15:1a:2f:0e:9d:2e:56:41:a1:7e:26:9b:2f:96:
38:18:a4:2d:91:40:36:03:11:8d:8c:31:de:37:ec:
8d:05:44:a3:d5:e2:af:e3:7b:dd:a6:94:7f:67:9f:
38:28:3c:c5:64:21:d3:9d:67:58:b5:9f:fd:e1:a2:
b9:5f:8f:2f:25:e5:47:35:d4:d5:cb:25:d0:97:f1:
cc:f3:ff:c7:e3:85:f0:fd:31:cd:58:d9:fd:a1:e3:
40:46:52:d0:91:28:15:50:30:bd:4b:1a:e8:4a:71:
87:e6:08:bc:60:a7:5d:d9:ee:66:79:d3:d0:92:0c:
94:53:32:21:31:d4:57:03:c3:cd:c7:c5:fb:09:cb:
56:e5:b3:3f:ac:73:00:ca:0c:05:18:eb:37:a0:7f:
86:5c:a9:9f:2d:a0:2f:c1:15:c3:9e:01:78:12:92:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:D6:4C:FD:7D:2B:F9:A1:50:67:A7:B7:BB:DF:53:C4:AB:18:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/94a0ed45-12e4-33ca-adf1-332fd9b7e6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d4:ce:1b:ad:5a:1a:2a:a1:d3:03:43:1f:0c:3d:50:8f:6c:
45:17:b3:83:f6:ec:4c:33:f1:aa:f6:fd:74:73:93:74:86:ae:
76:7b:09:87:97:ab:9a:34:3b:82:2e:e7:7b:4b:e2:5e:5a:b4:
17:1e:6e:ad:c5:6e:89:17:7c:97:8a:62:8a:15:40:53:a5:29:
a3:4f:c2:9a:5c:0b:51:da:70:72:f5:17:c1:2f:dd:72:a0:03:
d1:0e:75:d8:9d:4c:31:94:b4:7e:fd:9f:0f:c6:bc:c6:e4:05:
78:e8:db:88:ed:79:69:e7:76:46:b8:8f:e8:6f:33:7c:b5:96:
e0:1e:0b:08:d1:a6:70:9d:ca:77:b1:58:a0:b8:6d:c3:a2:6d:
5c:39:8c:38:9c:9e:e6:36:b5:d6:05:0d:4c:2d:37:71:3f:96:
a9:20:65:3c:cd:6b:08:8f:f0:f2:1c:d6:c7:fa:9d:f8:9b:fd:
ed:f3:db:b3:c8:85:e4:1a:b5:61:d0:20:75:30:50:36:f5:f1:
07:93:a2:bf:d3:b0:de:7d:a6:43:a8:d9:5e:84:ed:e4:6f:a1:
a1:96:1d:8c:55:6c:09:e1:99:a7:56:a6:f2:9a:ff:3e:e0:92:
f2:e5:b8:9b:c7:45:a3:97:e9:d5:72:ec:82:68:b5:65:dd:73:
80:6b:3d:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfLBF5FBEiOnwh8ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEwNjIwMzc1MVoXDTI1MDIwNDIwMzc1MVowLzEtMCsGA1UEAxMk
ZjYzZTkxNDUtOThjOC00OWJjLWFiY2MtZDc5ZjExYTA4MmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhXn/zpPCaf53Q88o/DgYxz+VKYusZsvS0Va
cC0stj6VZlUi16h00gafsqEdnHptC2MoYz2fTeYmMYCYXmcvjAa3X+Pn8CiuLNgF
Z3fQC2UVKgHUu+eyCbMCFRovDp0uVkGhfiabL5Y4GKQtkUA2AxGNjDHeN+yNBUSj
1eKv43vdppR/Z584KDzFZCHTnWdYtZ/94aK5X48vJeVHNdTVyyXQl/HM8//H44Xw
/THNWNn9oeNARlLQkSgVUDC9SxroSnGH5gi8YKdd2e5medPQkgyUUzIhMdRXA8PN
x8X7CctW5bM/rHMAygwFGOs3oH+GXKmfLaAvwRXDngF4EpINIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMR1kz9fSv5oVBnp7e731PEqxi3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTRhMGVkNDUtMTJlNC0z
M2NhLWFkZjEtMzMyZmQ5YjdlNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3UzhutWhoqodMDQx8MPVCPbEUXs4P27Ewz8ar2/XRzk3SGrnZ7CYeX
q5o0O4Iu53tL4l5atBcebq3FbokXfJeKYooVQFOlKaNPwppcC1HacHL1F8Ev3XKg
A9EOddidTDGUtH79nw/GvMbkBXjo24jteWnndka4j+hvM3y1luAeCwjRpnCdynex
WKC4bcOibVw5jDicnuY2tdYFDUwtN3E/lqkgZTzNawiP8PIc1sf6nfib/e3z27PI
heQatWHQIHUwUDb18QeTor/TsN59pkOo2V6E7eRvoaGWHYxVbAnhmadWpvKa/z7g
kvLluJvHRaOX6dVy7IJotWXdc4BrPQk=
-----END CERTIFICATE-----
Generated at Thu Mar 20 11:08:01 2025 by rpki-client