Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a7b392-49a5-3525-ace3-d045a4f4c36d.roa
File: f6a7b392-49a5-3525-ace3-d045a4f4c36d.roa (raw, json)
Hash identifier: L4LqoNefvRtbN66L3b4acGwHfCqiOD5A7YFI4UdHM70=
Subject key identifier: 81:1A:50:35:BE:E2:09:5A:10:18:7D:65:1B:D1:18:AA:14:75:3E:86
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E44701EC832DA3678904BF60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a7b392-49a5-3525-ace3-d045a4f4c36d.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Wed 09 Aug 2023 22:22:39 +0000
asID: 43260
IP address blocks: 108.165.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:01:ec:83:2d:a3:67:89:04:bf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 9 22:22:39 2023 GMT
Subject: CN=6d65f84d-5870-43ba-bc2d-b0d7a52ba7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:c5:00:55:ac:d7:ba:94:21:c3:3d:10:05:
08:09:12:6c:7d:99:2e:d0:f2:35:eb:2c:85:4c:8c:
79:10:02:09:63:4f:ca:0c:05:4d:01:42:9e:2e:d0:
ad:de:c0:bb:ed:c0:6d:3e:36:80:c2:ea:34:6b:84:
44:30:99:d3:9e:6b:61:1e:bd:2c:81:7e:05:a9:df:
08:89:a5:33:9f:34:23:3c:ca:65:58:c3:05:14:c3:
73:7b:be:86:c4:17:2d:12:56:b0:8b:01:24:6c:35:
39:2d:81:b5:1c:07:4d:d1:6e:b3:04:0b:c4:a2:76:
da:91:a3:ac:8e:fb:e4:ef:f3:93:7f:56:67:5d:03:
e8:a9:f1:88:de:99:db:6c:ba:55:03:64:2c:e6:07:
ff:e8:dc:25:f9:9d:7f:af:7c:23:af:b1:7e:1f:99:
2f:0d:c8:6d:24:9a:8d:c5:01:c2:e3:6f:b9:f3:f3:
d0:77:6a:1b:31:96:ce:e5:47:d0:96:5d:65:59:12:
94:d6:1a:f2:06:53:48:f5:d8:a3:5e:e2:86:78:83:
25:27:88:8f:bb:f1:a2:09:22:c7:88:24:f9:95:83:
86:52:c6:04:cc:35:23:ba:29:4e:92:23:f2:8c:b6:
fd:05:ba:3e:6c:ea:99:0d:a7:e0:02:3b:e6:c0:71:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:50:35:BE:E2:09:5A:10:18:7D:65:1B:D1:18:AA:14:75:3E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6a7b392-49a5-3525-ace3-d045a4f4c36d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:bc:08:35:42:f4:66:5c:6e:5a:b3:aa:19:df:b7:b8:9a:e2:
71:d2:ef:45:e2:3a:5e:27:50:c1:b0:9a:70:97:4b:c1:06:48:
08:50:f4:d2:0c:b0:00:24:44:a3:10:95:b1:ae:5b:2f:ce:85:
db:e0:ad:af:20:ca:a0:5b:c9:11:43:24:bc:00:b0:48:e2:73:
3d:42:f9:06:4e:d7:2a:27:68:cb:61:8b:7f:7f:74:e1:6d:76:
b1:3d:06:b1:48:81:37:58:b7:3a:fd:ef:24:b0:b5:e4:81:90:
e2:55:87:c9:73:fe:24:20:ca:82:7d:b9:76:36:d4:59:54:4c:
3a:f5:e1:95:4c:f4:49:93:65:27:f4:e4:fb:44:f7:d8:68:8f:
c6:12:7a:c4:64:8e:b1:53:b4:d5:37:ce:b4:f1:48:12:09:29:
52:bd:68:d6:d2:94:0a:65:c0:fc:b4:96:b1:91:ec:5d:d2:a6:
f2:4d:d1:ad:c5:9f:46:9c:3b:fb:ef:e2:96:19:71:5b:6d:03:
62:f7:bd:6f:34:e4:87:89:17:51:5a:65:ad:cc:42:c1:d5:36:
cf:09:a1:13:c3:e3:2e:52:7f:e6:28:df:92:c3:4a:b1:2c:0b:
b1:4d:f6:1f:ce:e3:51:38:42:a5:4b:af:88:7a:9d:ec:10:5b:
54:3f:4d:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRwHsgy2jZ4kEv2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwOTIyMjIzOVowLzEtMCsGA1UEAxMk
NmQ2NWY4NGQtNTg3MC00M2JhLWJjMmQtYjBkN2E1MmJhN2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj57FAFWs17qUIcM9EAUICRJsfZku0PI16yyF
TIx5EAIJY0/KDAVNAUKeLtCt3sC77cBtPjaAwuo0a4REMJnTnmthHr0sgX4Fqd8I
iaUznzQjPMplWMMFFMNze76GxBctElawiwEkbDU5LYG1HAdN0W6zBAvEonbakaOs
jvvk7/OTf1ZnXQPoqfGI3pnbbLpVA2Qs5gf/6Nwl+Z1/r3wjr7F+H5kvDchtJJqN
xQHC42+58/PQd2obMZbO5UfQll1lWRKU1hryBlNI9dijXuKGeIMlJ4iPu/GiCSLH
iCT5lYOGUsYEzDUjuilOkiPyjLb9Bbo+bOqZDafgAjvmwHEQfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEaUDW+4glaEBh9ZRvRGKoUdT6GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjZhN2IzOTItNDlhNS0z
NTI1LWFjZTMtZDA0NWE0ZjRjMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJm8CDVC9GZcblqzqhnft7ia4nHS70XiOl4nUMGwmnCXS8EGSAhQ9NIM
sAAkRKMQlbGuWy/Ohdvgra8gyqBbyRFDJLwAsEjicz1C+QZO1yonaMthi39/dOFt
drE9BrFIgTdYtzr97ySwteSBkOJVh8lz/iQgyoJ9uXY21FlUTDr14ZVM9EmTZSf0
5PtE99hoj8YSesRkjrFTtNU3zrTxSBIJKVK9aNbSlAplwPy0lrGR7F3SpvJN0a3F
n0acO/vv4pYZcVttA2L3vW805IeJF1FaZa3MQsHVNs8JoRPD4y5Sf+Yo35LDSrEs
C7FN9h/O41E4QqVLr4h6newQW1Q/TZI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:34:39 2025 by rpki-client