Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64f620b6-dc59-3809-a053-8071137999a1.roa
File: 64f620b6-dc59-3809-a053-8071137999a1.roa (raw, json)
Hash identifier: lOpBDdkpzURBEGj5x2x7Lf/jrcI35sndnA/YL3jLCkY=
Subject key identifier: 0A:E9:EF:AD:C3:8D:ED:96:20:9D:66:0B:78:BD:E7:E1:5D:71:C8:C4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309EC93410789D7F4F54E5E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64f620b6-dc59-3809-a053-8071137999a1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 108.59.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:93:41:07:89:d7:f4:f5:4e:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a73dc523-1542-49f3-a123-7f8e8e4d0040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:36:7c:dc:95:58:8b:66:d9:18:f2:80:fe:
44:ef:8a:cf:01:9e:46:71:b3:b6:47:d3:e2:5f:56:
c2:cb:a9:75:35:8a:3b:99:63:58:6d:f4:d9:07:a5:
00:af:3b:87:e0:54:cc:67:07:07:bf:f1:f6:c6:4d:
30:41:1f:03:33:83:c3:25:e6:d3:5e:30:8d:37:7f:
e0:66:40:7f:7c:98:ae:a0:a2:47:64:82:18:79:f3:
2b:ca:4e:05:24:e0:6f:da:88:1d:88:be:89:58:49:
c4:d7:0d:ca:cb:98:9a:fc:71:1c:06:8e:80:2c:7c:
95:b5:95:9d:af:d6:63:de:fa:8e:cc:06:1a:7a:8c:
e9:83:fc:7a:d9:d3:76:84:72:8f:4f:b5:18:a1:14:
e1:f6:95:dc:06:d6:73:04:bf:fe:74:89:ea:55:4b:
59:18:a9:d7:f6:3a:42:29:91:c7:c0:76:2e:20:0c:
b3:02:65:e1:dd:47:c9:32:d1:9a:0a:a1:a2:64:45:
b6:d9:5c:91:c7:b2:f1:d5:d3:79:93:11:2a:51:88:
1a:16:0b:84:a8:93:e0:d7:a0:8f:25:3d:26:65:c0:
f3:eb:25:e9:74:f4:79:f7:a0:40:f4:05:5e:51:0e:
31:db:a1:52:d2:3a:32:e3:2f:a8:30:b0:8a:1c:00:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:EF:AD:C3:8D:ED:96:20:9D:66:0B:78:BD:E7:E1:5D:71:C8:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64f620b6-dc59-3809-a053-8071137999a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:62:8e:44:2b:b8:e7:ef:96:55:68:c4:54:08:c5:db:f5:ac:
a0:9a:a1:a1:60:1b:1a:25:22:ee:2b:77:88:13:9d:74:c9:03:
22:7a:d3:dc:97:e8:53:08:23:34:7b:1a:e0:90:e3:fc:5b:07:
71:58:e6:fc:6a:61:d1:0a:8b:3c:75:2a:2e:03:4c:e5:45:4c:
f3:f8:19:e8:b1:e5:a0:1c:8c:61:f8:f6:a3:c0:07:aa:57:38:
d4:97:8a:39:50:6f:00:c5:25:39:07:1b:9e:85:ba:ae:84:96:
5d:3d:7c:7d:7f:71:63:90:49:89:05:a8:86:7f:06:a4:9c:f1:
c4:8b:2d:d5:76:7d:0f:15:ce:b7:42:c2:75:08:41:68:45:b2:
d2:5f:3a:5a:30:dd:cd:65:e1:5e:71:8b:af:d2:f3:91:e4:83:
0b:e8:38:9b:e3:56:18:f8:1f:86:2b:04:d9:87:06:0a:c4:a0:
dc:5c:28:94:fa:b0:f5:0b:27:f4:d5:39:e9:a6:b7:84:10:92:
8d:29:7c:ff:97:be:fd:8f:b4:20:c2:e7:c6:88:77:7c:eb:a9:
9f:18:71:cd:03:18:f3:15:43:04:7c:3c:af:87:d3:e1:0e:e6:
91:07:77:69:35:3a:57:03:6e:e1:a7:a9:63:fe:d1:e5:34:a8:
0c:2b:49:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ7JNBB4nX9PVOXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTczZGM1MjMtMTU0Mi00OWYzLWExMjMtN2Y4ZThlNGQwMDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MY2fNyVWItm2RjygP5E74rPAZ5GcbO2R9Pi
X1bCy6l1NYo7mWNYbfTZB6UArzuH4FTMZwcHv/H2xk0wQR8DM4PDJebTXjCNN3/g
ZkB/fJiuoKJHZIIYefMryk4FJOBv2ogdiL6JWEnE1w3Ky5ia/HEcBo6ALHyVtZWd
r9Zj3vqOzAYaeozpg/x62dN2hHKPT7UYoRTh9pXcBtZzBL/+dInqVUtZGKnX9jpC
KZHHwHYuIAyzAmXh3UfJMtGaCqGiZEW22VyRx7Lx1dN5kxEqUYgaFguEqJPg16CP
JT0mZcDz6yXpdPR596BA9AVeUQ4x26FS0joy4y+oMLCKHAAGyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArp763Dje2WIJ1mC3i95+FdccjEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjRmNjIwYjYtZGM1OS0z
ODA5LWEwNTMtODA3MTEzNzk5OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhijkQruOfvllVoxFQIxdv1rKCaoaFgGxolIu4rd4gTnXTJAyJ609yX
6FMIIzR7GuCQ4/xbB3FY5vxqYdEKizx1Ki4DTOVFTPP4Geix5aAcjGH49qPAB6pX
ONSXijlQbwDFJTkHG56Fuq6Ell09fH1/cWOQSYkFqIZ/BqSc8cSLLdV2fQ8VzrdC
wnUIQWhFstJfOlow3c1l4V5xi6/S85HkgwvoOJvjVhj4H4YrBNmHBgrEoNxcKJT6
sPULJ/TVOemmt4QQko0pfP+Xvv2PtCDC58aId3zrqZ8Ycc0DGPMVQwR8PK+H0+EO
5pEHd2k1OlcDbuGnqWP+0eU0qAwrSaU=
-----END CERTIFICATE-----
Generated at Sun May 11 13:52:25 2025 by rpki-client