Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff9edf92-55da-3a25-b7f4-a79bd57ece9e.roa
File: ff9edf92-55da-3a25-b7f4-a79bd57ece9e.roa (raw, json)
Hash identifier: 42+d79gjN/VXrLNs0x0kt6B40MEFd12vpZ0HSr/08Ak=
Subject key identifier: 1F:26:60:FF:0D:6C:76:AA:68:7C:C6:E4:43:60:C9:FB:2B:37:CB:09
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858432BD4A28D7E573A121D1CD800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff9edf92-55da-3a25-b7f4-a79bd57ece9e.roa
Signing time: Sun 10 Sep 2023 01:00:22 +0000
ROA not before: Sun 10 Sep 2023 01:00:22 +0000
ROA not after: Sat 09 Dec 2023 02:00:22 +0000
asID: 1239
IP address blocks: 108.165.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2b:d4:a2:8d:7e:57:3a:12:1d:1c:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 10 01:00:22 2023 GMT
Not After : Dec 9 02:00:22 2023 GMT
Subject: CN=424c3282-d2a5-4014-84f1-6117eb1ffc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:4e:82:9a:30:af:a9:5f:93:75:8d:0f:9f:
ba:6a:34:34:f0:31:cf:6a:d5:61:6f:96:2c:9d:15:
ec:2c:73:86:78:b7:ac:91:51:1e:94:48:10:5e:7f:
7a:d0:b5:5f:80:93:73:4f:38:08:d8:08:d0:1b:4f:
e5:b5:97:b4:72:2b:76:0c:2e:ad:c0:33:25:a8:8a:
69:c2:04:44:de:08:3f:d6:a6:8f:0f:6b:21:32:13:
d5:2b:dd:42:6b:f0:6b:1b:a0:d6:1e:c7:52:21:36:
42:ef:83:70:6c:e4:89:76:58:f7:25:ba:f8:7f:db:
9f:45:46:c1:f1:64:c4:68:6a:4c:59:01:b8:c6:51:
69:ee:0a:31:6b:ca:ff:ba:c7:09:09:0b:6f:55:3a:
e4:97:3c:59:eb:92:b2:57:b9:30:c8:85:7c:87:c0:
6e:81:0a:f3:b2:ef:46:de:55:00:19:2a:ab:d9:21:
1d:69:6f:f3:be:f9:a1:cd:03:d0:75:5b:a5:1f:25:
f4:d2:cc:88:7d:99:20:a2:3a:0b:81:ef:4b:b2:fc:
2d:42:44:36:7e:3b:f7:c1:aa:7d:72:07:b2:0d:92:
10:f2:d0:f3:35:35:63:7b:8c:25:7a:d0:7d:46:f0:
fc:ec:d1:77:d2:cd:9a:87:82:61:2a:1e:82:a8:92:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:60:FF:0D:6C:76:AA:68:7C:C6:E4:43:60:C9:FB:2B:37:CB:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff9edf92-55da-3a25-b7f4-a79bd57ece9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:04:f6:65:de:a7:b5:eb:ae:18:b9:fd:30:08:3b:08:1f:fb:
28:ba:49:a5:93:79:4c:d1:57:42:a2:32:bf:40:86:2b:1e:26:
bf:ba:7a:ee:d0:3b:cb:1a:f8:1c:48:20:75:d8:14:b3:43:0c:
2e:12:a3:75:f5:91:bb:3a:4e:e5:17:2c:f2:35:56:76:72:84:
da:2c:8b:5e:b1:01:b9:89:6f:fb:48:67:fb:40:ed:7b:37:cc:
cf:5a:a5:5d:e6:2e:53:28:38:a5:a3:bb:46:28:49:f3:ee:69:
3d:3c:90:9d:64:9e:d3:15:c2:ad:32:7a:d5:0f:a3:bf:af:e3:
70:03:f0:ae:46:b5:46:ba:df:4d:0e:42:64:7e:28:da:2e:aa:
19:32:06:e8:a9:2b:82:ba:a4:f5:8f:30:5c:96:47:3f:20:7a:
60:4c:3d:99:a9:4d:58:8b:0e:a6:52:97:91:94:56:a7:26:72:
e2:e0:a2:01:a6:69:11:25:08:3a:05:4a:19:63:a5:49:00:c8:
0e:93:5f:9d:21:dc:03:2a:6a:76:b9:b8:32:3e:2d:84:a3:d3:
9e:a1:88:c4:da:11:09:4a:e8:56:3d:01:94:44:a6:8d:a3:60:
95:4d:1b:a6:2c:87:ef:d0:b0:5b:e4:b3:c5:6b:26:76:06:14:
3d:ab:8a:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMr1KKNflc6Eh0c2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkxMDAxMDAyMloXDTIzMTIwOTAyMDAyMlowLzEtMCsGA1UEAxMk
NDI0YzMyODItZDJhNS00MDE0LTg0ZjEtNjExN2ViMWZmYzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFJOgpowr6lfk3WND5+6ajQ08DHPatVhb5Ys
nRXsLHOGeLeskVEelEgQXn960LVfgJNzTzgI2AjQG0/ltZe0cit2DC6twDMlqIpp
wgRE3gg/1qaPD2shMhPVK91Ca/BrG6DWHsdSITZC74NwbOSJdlj3Jbr4f9ufRUbB
8WTEaGpMWQG4xlFp7goxa8r/uscJCQtvVTrklzxZ65KyV7kwyIV8h8BugQrzsu9G
3lUAGSqr2SEdaW/zvvmhzQPQdVulHyX00syIfZkgojoLge9LsvwtQkQ2fjv3wap9
cgeyDZIQ8tDzNTVje4wletB9RvD87NF30s2ah4JhKh6CqJJ6jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8mYP8NbHaqaHzG5ENgyfsrN8sJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmY5ZWRmOTItNTVkYS0z
YTI1LWI3ZjQtYTc5YmQ1N2VjZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUE9mXep7Xrrhi5/TAIOwgf+yi6SaWTeUzRV0KiMr9AhiseJr+6eu7Q
O8sa+BxIIHXYFLNDDC4So3X1kbs6TuUXLPI1VnZyhNosi16xAbmJb/tIZ/tA7Xs3
zM9apV3mLlMoOKWju0YoSfPuaT08kJ1kntMVwq0yetUPo7+v43AD8K5GtUa6300O
QmR+KNouqhkyBuipK4K6pPWPMFyWRz8gemBMPZmpTViLDqZSl5GUVqcmcuLgogGm
aRElCDoFShljpUkAyA6TX50h3AMqana5uDI+LYSj056hiMTaEQlK6FY9AZREpo2j
YJVNG6Ysh+/QsFvks8VrJnYGFD2rihM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:05:20 2025 by rpki-client