Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e475c878-66ce-318c-a35d-fc3d876c9b7c.roa
File: e475c878-66ce-318c-a35d-fc3d876c9b7c.roa (raw, json)
Hash identifier: sZeG2mTg6w3tdNWdP43G5qVKwH1OaN2918LdIRPb9Hk=
Subject key identifier: 11:DE:CD:01:53:13:4C:51:D3:15:4D:52:63:99:1F:86:FE:BA:6F:E6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845F0EE697378AC4F5C20BD5100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e475c878-66ce-318c-a35d-fc3d876c9b7c.roa
Signing time: Tue 21 May 2024 01:00:25 +0000
ROA not before: Tue 21 May 2024 01:00:25 +0000
ROA not after: Mon 19 Aug 2024 01:00:25 +0000
asID: 834
IP address blocks: 108.165.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:f0:ee:69:73:78:ac:4f:5c:20:bd:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 21 01:00:25 2024 GMT
Not After : Aug 19 01:00:25 2024 GMT
Subject: CN=f29ebb2f-d343-4f49-81f7-99076970b4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:da:20:4a:f4:6d:ae:a9:33:cc:8a:c3:e3:
83:65:03:5b:b1:3f:c5:49:ef:ea:e6:0c:b7:c8:64:
92:ff:ad:0e:d5:2f:d7:bd:38:d4:cb:58:a8:b6:a6:
1c:d8:b8:bf:25:8f:4d:9d:0c:c4:34:26:20:ad:bb:
6c:44:af:fc:d6:08:4c:c3:d8:ee:68:de:b2:d4:cd:
dc:33:9b:3a:22:96:d8:11:b8:c3:53:e1:78:58:80:
7c:40:61:b4:94:e6:35:30:aa:96:41:63:8e:50:f8:
51:da:d6:31:fa:07:af:d6:b6:49:cc:ac:43:8b:dd:
69:14:0b:d6:21:74:19:f0:d0:e0:7c:c6:0d:0d:c4:
23:9b:05:30:12:b7:9a:31:8a:7f:d8:6b:3f:30:39:
80:8f:5b:bf:8c:15:19:df:97:7a:8a:c9:c5:5f:93:
17:34:9b:24:93:b6:45:9b:79:33:d8:0d:2b:91:6c:
71:45:67:5a:1b:7c:21:00:f8:4b:9a:a7:db:11:13:
46:e5:b9:b5:a8:8d:8b:3d:94:77:0b:24:52:a3:22:
e1:9a:aa:ac:5c:f4:2f:21:59:40:25:b2:b3:b1:1d:
7a:98:17:09:b8:81:06:f3:0e:08:bc:eb:31:03:30:
ec:e6:f4:6b:ac:9e:cf:3c:c7:bd:15:08:d2:05:af:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:CD:01:53:13:4C:51:D3:15:4D:52:63:99:1F:86:FE:BA:6F:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e475c878-66ce-318c-a35d-fc3d876c9b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:14:97:a2:9b:4c:be:46:3a:a3:db:0a:fa:f4:11:42:f4:ae:
e0:81:97:db:4d:2f:59:ce:cf:78:63:4e:ac:f5:86:4d:7f:0e:
45:ed:f3:2f:fb:9e:01:64:02:0e:ef:e7:70:de:73:7f:b7:77:
28:3a:85:e8:87:d9:d3:45:f1:e4:a5:5f:d2:d9:43:ec:a0:f3:
b6:63:ad:55:eb:9e:2e:90:ac:7b:55:4c:ed:03:d8:7c:ae:f1:
6c:81:59:af:54:49:a7:db:b6:0c:10:b8:3e:e5:55:8f:55:90:
cd:a6:44:cd:f0:af:51:46:7e:69:01:6f:28:ee:dc:19:04:0c:
a8:87:d6:79:a7:57:37:ba:79:93:a7:1d:ee:27:63:eb:09:3c:
cc:5e:1f:26:11:63:e4:f8:ec:85:54:28:7f:bf:7c:c8:56:0f:
e4:44:0c:1a:0d:73:8b:88:be:13:48:26:0d:80:61:ec:13:23:
2a:f7:8a:7d:6e:ec:f3:6d:a8:d5:0c:8e:f4:b3:ef:ea:44:04:
ac:00:f6:33:3c:f6:06:76:21:41:01:0c:94:be:ad:a0:ad:53:
c2:ce:5d:b7:d6:22:1e:8c:27:86:ec:dd:5c:f9:e5:10:ae:d1:
eb:1d:a5:72:65:4d:1b:53:71:0e:9e:e9:aa:89:90:49:02:dc:
04:52:1d:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXw7mlzeKxPXCC9UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDUyMTAxMDAyNVoXDTI0MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk
ZjI5ZWJiMmYtZDM0My00ZjQ5LTgxZjctOTkwNzY5NzBiNGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf7aIEr0ba6pM8yKw+ODZQNbsT/FSe/q5gy3
yGSS/60O1S/XvTjUy1iotqYc2Li/JY9NnQzENCYgrbtsRK/81ghMw9juaN6y1M3c
M5s6IpbYEbjDU+F4WIB8QGG0lOY1MKqWQWOOUPhR2tYx+gev1rZJzKxDi91pFAvW
IXQZ8NDgfMYNDcQjmwUwEreaMYp/2Gs/MDmAj1u/jBUZ35d6isnFX5MXNJskk7ZF
m3kz2A0rkWxxRWdaG3whAPhLmqfbERNG5bm1qI2LPZR3CyRSoyLhmqqsXPQvIVlA
JbKzsR16mBcJuIEG8w4IvOsxAzDs5vRrrJ7PPMe9FQjSBa9icQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHezQFTE0xR0xVNUmOZH4b+um/mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTQ3NWM4NzgtNjZjZS0z
MThjLWEzNWQtZmMzZDg3NmM5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKWuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQUl6KbTL5GOqPbCvr0EUL0ruCBl9tNL1nOz3hjTqz1hk1/DkXt8y/7
ngFkAg7v53Dec3+3dyg6heiH2dNF8eSlX9LZQ+yg87ZjrVXrni6QrHtVTO0D2Hyu
8WyBWa9USafbtgwQuD7lVY9VkM2mRM3wr1FGfmkBbyju3BkEDKiH1nmnVze6eZOn
He4nY+sJPMxeHyYRY+T47IVUKH+/fMhWD+REDBoNc4uIvhNIJg2AYewTIyr3in1u
7PNtqNUMjvSz7+pEBKwA9jM89gZ2IUEBDJS+raCtU8LOXbfWIh6MJ4bs3Vz55RCu
0esdpXJlTRtTcQ6e6aqJkEkC3ARSHYM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:48 2025 by rpki-client