Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f7894a45-ca28-36c8-9f34-7b18038d0373.roa
File: f7894a45-ca28-36c8-9f34-7b18038d0373.roa (raw, json)
Hash identifier: 061YfQzuyhULDq9XHoxL0Q404MkDQf3C36NJi0A6WyI=
Subject key identifier: 97:99:0B:84:2B:3F:77:3C:77:63:A7:CE:C2:BA:C3:EE:C7:F2:96:4E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843C4C1984008C267F1A3918D60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f7894a45-ca28-36c8-9f34-7b18038d0373.roa
Signing time: Fri 03 Nov 2023 19:40:42 +0000
ROA not before: Fri 03 Nov 2023 19:40:42 +0000
ROA not after: Thu 01 Feb 2024 20:40:42 +0000
asID: 400402
IP address blocks: 108.165.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c4:c1:98:40:08:c2:67:f1:a3:91:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 3 19:40:42 2023 GMT
Not After : Feb 1 20:40:42 2024 GMT
Subject: CN=f5f71b8d-8237-4607-8d6e-12048fa83aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:07:18:33:39:fe:b0:18:4d:4f:6f:94:c1:
50:bb:d4:e4:f3:c6:f0:89:32:4b:6e:3e:56:9c:d5:
6a:8e:80:91:1d:57:28:e2:54:15:80:27:d4:0a:5a:
bf:5c:0e:f6:5a:44:de:5f:cf:6d:89:c7:22:c0:18:
9c:91:89:c6:f5:6c:15:57:b6:c0:77:73:3d:16:fc:
86:93:c4:c8:bb:1c:b2:1c:b1:11:db:91:24:ee:21:
4f:0e:40:cb:31:00:6b:94:81:bd:b3:24:a0:24:9b:
14:d8:db:c3:f5:2c:f3:db:79:0d:0d:86:83:c6:69:
9f:b7:0c:46:ff:72:1f:a0:94:51:eb:3b:30:86:b1:
cc:b5:6e:4a:66:60:76:08:19:8b:60:ab:84:bb:18:
fd:e5:0d:75:e8:eb:e6:62:2a:2f:3a:ab:c4:53:18:
f7:06:6e:a6:3f:26:09:c7:74:d3:aa:53:f6:fb:01:
55:93:7a:46:8d:39:07:5c:fd:cf:8c:f7:df:70:e9:
0b:9b:08:18:7c:7f:de:0d:fb:f3:12:a4:77:66:16:
6c:65:8c:90:15:50:f5:19:18:5c:0d:cb:40:13:03:
b0:f6:75:cd:c1:38:7b:c9:88:97:22:81:e4:6f:a5:
22:b1:e3:71:83:11:dd:b5:c7:4a:9d:f0:fc:6d:a4:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:0B:84:2B:3F:77:3C:77:63:A7:CE:C2:BA:C3:EE:C7:F2:96:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f7894a45-ca28-36c8-9f34-7b18038d0373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:a7:a7:49:b9:bb:d4:b3:6f:de:7b:f5:06:95:5e:c4:f7:9e:
44:31:d7:fc:72:fe:70:41:af:ec:b1:ad:ce:08:15:35:f0:0c:
c1:99:19:7b:b8:a6:ed:65:2e:59:1f:02:fc:75:06:45:b2:88:
b8:61:50:a7:45:51:9a:10:09:a4:74:2e:c7:c7:6f:33:cc:4c:
31:df:ba:ee:68:15:2c:9b:0c:66:89:7f:c9:43:9a:4b:38:cc:
98:f0:34:74:a9:90:dc:8e:ae:26:b0:37:a7:8f:9b:44:24:da:
a7:25:ef:3e:31:cf:3c:62:3b:e6:0f:0d:ee:a7:f7:3a:b0:01:
7d:e9:e7:5e:a7:75:13:e2:79:d4:eb:20:6e:28:85:8e:e2:85:
58:d6:7e:da:2a:54:ae:e5:54:c4:5f:cb:4f:c2:f4:c1:ad:4c:
9e:49:08:41:83:46:be:ed:cb:43:b5:ae:1c:1a:d4:29:26:04:
e7:15:74:85:83:08:55:af:ab:7e:64:13:76:9e:f9:d2:72:a8:
8a:4e:4e:1c:79:96:9d:5b:83:61:0c:e5:e6:f5:01:a3:a6:9b:
26:0c:72:b6:8a:6d:e0:d5:14:da:d6:b3:c8:5d:78:e7:23:40:
38:71:b5:35:65:51:00:39:3e:81:40:13:41:fb:fc:ad:73:d5:
eb:7a:4c:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPEwZhACMJn8aORjWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTEwMzE5NDA0MloXDTI0MDIwMTIwNDA0MlowLzEtMCsGA1UEAxMk
ZjVmNzFiOGQtODIzNy00NjA3LThkNmUtMTIwNDhmYTgzYWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V4HGDM5/rAYTU9vlMFQu9Tk88bwiTJLbj5W
nNVqjoCRHVco4lQVgCfUClq/XA72WkTeX89ticciwBickYnG9WwVV7bAd3M9FvyG
k8TIuxyyHLER25Ek7iFPDkDLMQBrlIG9sySgJJsU2NvD9Szz23kNDYaDxmmftwxG
/3IfoJRR6zswhrHMtW5KZmB2CBmLYKuEuxj95Q116OvmYiovOqvEUxj3Bm6mPyYJ
x3TTqlP2+wFVk3pGjTkHXP3PjPffcOkLmwgYfH/eDfvzEqR3ZhZsZYyQFVD1GRhc
DctAEwOw9nXNwTh7yYiXIoHkb6UiseNxgxHdtcdKnfD8baRZ1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeZC4QrP3c8d2OnzsK6w+7H8pZOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjc4OTRhNDUtY2EyOC0z
NmM4LTlmMzQtN2IxODAzOGQwMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKUjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEynp0m5u9Szb9579QaVXsT3nkQx1/xy/nBBr+yxrc4IFTXwDMGZGXu4
pu1lLlkfAvx1BkWyiLhhUKdFUZoQCaR0LsfHbzPMTDHfuu5oFSybDGaJf8lDmks4
zJjwNHSpkNyOriawN6ePm0Qk2qcl7z4xzzxiO+YPDe6n9zqwAX3p516ndRPiedTr
IG4ohY7ihVjWftoqVK7lVMRfy0/C9MGtTJ5JCEGDRr7ty0O1rhwa1CkmBOcVdIWD
CFWvq35kE3ae+dJyqIpOThx5lp1bg2EM5eb1AaOmmyYMcraKbeDVFNrWs8hdeOcj
QDhxtTVlUQA5PoFAE0H7/K1z1et6TAM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:25:20 2025 by rpki-client