Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5687cef-e929-376a-afbe-bc2ae081ee52.roa
File: e5687cef-e929-376a-afbe-bc2ae081ee52.roa (raw, json)
Hash identifier: dgSB3lAKK/x5m+/H4Q18i87p7H0U3jfDRz2rIlp+Wkg=
Subject key identifier: 08:BF:56:41:82:93:E2:D2:DA:B0:11:B9:74:B5:99:37:EF:AA:5B:CB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845E45E725F269F6C97B7615380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5687cef-e929-376a-afbe-bc2ae081ee52.roa
Signing time: Thu 16 May 2024 13:00:35 +0000
ROA not before: Thu 16 May 2024 13:00:35 +0000
ROA not after: Wed 14 Aug 2024 13:00:35 +0000
asID: 19437
IP address blocks: 108.165.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:e4:5e:72:5f:26:9f:6c:97:b7:61:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 16 13:00:35 2024 GMT
Not After : Aug 14 13:00:35 2024 GMT
Subject: CN=487aaa77-be4f-4800-a2b9-0ed00abbff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:73:d0:96:ef:45:04:da:6a:19:96:1a:17:
c5:c5:fb:a4:96:c8:91:fd:dd:87:3e:74:da:23:2a:
36:43:d3:5f:52:f7:c5:e8:e1:e6:81:7e:1e:d0:df:
9d:4c:1e:6d:d0:c7:f6:72:5b:73:57:27:5f:e1:0f:
3c:36:71:08:79:61:8b:0a:59:7d:60:45:03:bc:b4:
7e:f5:e2:36:b2:fc:ca:b9:9e:7d:9f:10:83:57:da:
c7:3d:9c:cb:f6:b7:77:58:42:bd:6b:35:64:68:4f:
15:0a:70:be:15:33:a2:27:92:dd:ec:a5:42:9d:f9:
69:ac:ef:31:0b:bd:89:66:35:1a:c9:63:19:dc:a4:
84:03:28:c5:2e:53:dd:98:5d:fd:ed:88:ce:b0:84:
36:fb:00:16:c3:49:7c:dd:49:78:74:dc:5d:c5:3f:
2c:0b:eb:5e:c9:5d:a9:d8:a8:27:4b:96:84:ca:3c:
2a:a4:30:38:0e:f7:31:cd:ba:3e:12:ec:48:dd:d1:
72:e9:76:b7:c9:e1:11:6c:b3:9d:a3:18:17:a0:92:
19:c6:3c:61:33:95:e2:4d:99:de:ac:36:ea:a4:c1:
b2:64:34:31:08:be:68:3f:3d:ad:ba:b2:37:eb:0e:
f8:40:d5:a7:9d:b3:43:9b:4c:02:fd:68:a7:93:9e:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:56:41:82:93:E2:D2:DA:B0:11:B9:74:B5:99:37:EF:AA:5B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e5687cef-e929-376a-afbe-bc2ae081ee52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:dc:8f:06:e1:c8:a5:9d:16:8a:d0:59:2e:87:1a:2c:f5:8a:
54:0e:d0:6b:f1:74:e6:18:85:90:d5:cb:45:4d:4b:d6:15:12:
11:ca:88:ff:e9:8b:37:be:e4:30:d0:1a:74:10:36:e1:35:f3:
ef:f8:00:e9:78:f7:ea:af:6b:e4:e8:8c:bc:2e:fc:b6:94:ca:
36:85:85:4f:c6:6d:4c:66:da:02:c1:5c:eb:38:16:72:90:d1:
dc:b6:59:1d:80:1f:9c:bb:fe:68:4f:7e:88:aa:52:71:23:e7:
77:59:12:8f:38:f7:24:f5:8a:7f:72:50:45:74:76:32:80:a1:
aa:8c:05:3d:f6:d9:4d:15:c0:2b:b6:75:fe:1d:e1:67:2d:a7:
60:41:5a:99:db:a6:10:d1:59:72:e6:b0:ed:bf:fe:42:74:0f:
d8:39:bd:1c:f9:8b:f2:3c:85:78:a0:70:b4:b6:72:ea:c9:88:
3f:35:de:b2:84:72:22:c8:c4:04:19:ba:92:c1:40:8b:20:4d:
25:3b:22:25:df:29:b1:a2:9c:3f:75:b4:7d:c8:a6:5e:a0:f0:
75:7d:0e:04:7d:5e:23:05:3d:a7:35:89:ce:f3:a4:67:80:38:
e1:3b:ea:18:ff:ee:39:81:f0:ec:0b:ab:a1:32:27:bf:7e:54:
fc:fe:fe:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXnJfJp9sl7dhU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk
NDg3YWFhNzctYmU0Zi00ODAwLWEyYjktMGVkMDBhYmJmZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwFz0JbvRQTaahmWGhfFxfuklsiR/d2HPnTa
Iyo2Q9NfUvfF6OHmgX4e0N+dTB5t0Mf2cltzVydf4Q88NnEIeWGLCll9YEUDvLR+
9eI2svzKuZ59nxCDV9rHPZzL9rd3WEK9azVkaE8VCnC+FTOiJ5Ld7KVCnflprO8x
C72JZjUayWMZ3KSEAyjFLlPdmF397YjOsIQ2+wAWw0l83Ul4dNxdxT8sC+teyV2p
2KgnS5aEyjwqpDA4Dvcxzbo+EuxI3dFy6Xa3yeERbLOdoxgXoJIZxjxhM5XiTZne
rDbqpMGyZDQxCL5oPz2turI36w74QNWnnbNDm0wC/Wink570sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAi/VkGCk+LS2rARuXS1mTfvqlvLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTU2ODdjZWYtZTkyOS0z
NzZhLWFmYmUtYmMyYWUwODFlZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3cjwbhyKWdForQWS6HGiz1ilQO0GvxdOYYhZDVy0VNS9YVEhHKiP/p
ize+5DDQGnQQNuE18+/4AOl49+qva+TojLwu/LaUyjaFhU/GbUxm2gLBXOs4FnKQ
0dy2WR2AH5y7/mhPfoiqUnEj53dZEo849yT1in9yUEV0djKAoaqMBT322U0VwCu2
df4d4Wctp2BBWpnbphDRWXLmsO2//kJ0D9g5vRz5i/I8hXigcLS2curJiD813rKE
ciLIxAQZupLBQIsgTSU7IiXfKbGinD91tH3Ipl6g8HV9DgR9XiMFPac1ic7zpGeA
OOE76hj/7jmB8OwLq6EyJ79+VPz+/pM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:10:24 2025 by rpki-client