Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05ab29dd-91ee-3378-aebc-f740f08fd246.roa
File: 05ab29dd-91ee-3378-aebc-f740f08fd246.roa (raw, json)
Hash identifier: Yft8NnpgiN3H7po8nqtgT4SWZvT6JgmADYuJ+gucehg=
Subject key identifier: 3B:CD:B7:90:A7:1D:1A:55:2A:DF:F3:11:8D:97:13:50:32:01:AD:A4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843E168E8226F0612626BAFB4C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05ab29dd-91ee-3378-aebc-f740f08fd246.roa
Signing time: Tue 14 Nov 2023 02:00:15 +0000
ROA not before: Tue 14 Nov 2023 02:00:15 +0000
ROA not after: Mon 12 Feb 2024 02:00:15 +0000
asID: 21859
IP address blocks: 166.0.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e1:68:e8:22:6f:06:12:62:6b:af:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 14 02:00:15 2023 GMT
Not After : Feb 12 02:00:15 2024 GMT
Subject: CN=ae3186e0-b36f-4963-abd9-3d72a4397148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:da:13:57:db:03:95:13:e8:34:dd:f8:d1:
2b:d8:9d:df:45:19:92:02:2b:46:18:50:a4:7d:d4:
93:81:27:c2:8c:c6:b3:01:6f:25:89:00:71:f1:6f:
8c:36:4d:95:20:80:64:04:64:67:df:52:df:a2:4e:
b7:cf:23:a6:72:4a:30:9d:f0:0b:95:d6:74:6a:cf:
cc:da:c7:14:84:e2:17:fd:31:31:ae:de:30:2c:59:
c4:9f:65:d1:d2:e6:b1:43:52:22:99:6f:23:5f:52:
40:8f:ae:54:a3:cc:37:24:b8:cf:02:9f:35:78:b3:
8c:19:78:ff:ed:9d:3f:85:04:33:cb:0a:00:20:ea:
13:71:aa:4e:f4:15:48:81:c0:0c:63:02:86:ba:7e:
47:aa:77:d5:19:ae:da:b5:9b:e4:d7:22:7d:b6:7a:
16:f7:8c:12:5d:c4:54:df:1d:92:d2:5c:17:b1:e8:
bd:97:40:0e:59:c9:54:96:30:02:a9:00:74:70:c1:
ce:16:f2:71:ba:0e:a2:a2:73:b9:f2:73:4d:82:f4:
6c:1e:4b:77:1e:b5:12:40:7f:7b:1a:2f:62:94:ab:
54:5e:24:1d:d9:db:ef:bd:a4:cb:96:93:ce:35:2e:
dd:69:7c:4a:31:10:06:cd:05:48:38:59:01:a1:ec:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:B7:90:A7:1D:1A:55:2A:DF:F3:11:8D:97:13:50:32:01:AD:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05ab29dd-91ee-3378-aebc-f740f08fd246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ef:69:0f:8a:a0:a2:ba:fb:a7:8d:02:31:ed:e4:d4:97:ca:
64:72:48:9a:88:c2:b1:5b:10:9f:cf:b4:e4:f2:72:9e:57:07:
26:31:1e:7b:83:1d:a8:96:b7:d5:4c:3d:68:45:ba:28:f1:b2:
96:94:2c:f0:c9:3b:7d:b6:96:1a:0b:63:90:b6:dd:bb:7f:cd:
92:a6:e6:9d:e8:24:e6:92:13:65:c5:da:b7:a6:05:b8:f4:b1:
bb:0a:f4:67:c9:46:d4:f5:86:10:af:05:5d:f6:9d:69:d5:ae:
94:6e:8e:6f:ea:31:eb:b9:e4:d6:0a:0d:3a:c0:7b:7d:be:b2:
c3:d7:27:aa:72:06:3e:68:e0:a9:d1:64:d3:f8:68:81:d4:38:
54:2f:d2:80:48:f7:ab:ed:a1:f4:56:ba:fa:e2:14:3c:4c:71:
fe:e8:e0:38:b8:4c:21:65:8c:b1:cc:a1:7f:88:58:e9:1a:58:
da:79:e8:4d:92:9c:aa:1a:05:55:a9:3a:11:08:4e:1d:3e:01:
a7:3e:a2:90:09:d1:31:f9:05:37:1b:aa:db:90:ad:01:b6:b8:
60:61:9b:d0:5e:36:ee:6c:d1:52:d3:37:6f:83:d8:56:83:09:
1c:a3:ed:f4:8f:ff:76:54:5a:b9:34:6d:ca:0b:3e:9d:c7:7e:
e7:43:03:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPhaOgibwYSYmuvtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTExNDAyMDAxNVoXDTI0MDIxMjAyMDAxNVowLzEtMCsGA1UEAxMk
YWUzMTg2ZTAtYjM2Zi00OTYzLWFiZDktM2Q3MmE0Mzk3MTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLHaE1fbA5UT6DTd+NEr2J3fRRmSAitGGFCk
fdSTgSfCjMazAW8liQBx8W+MNk2VIIBkBGRn31Lfok63zyOmckownfALldZ0as/M
2scUhOIX/TExrt4wLFnEn2XR0uaxQ1IimW8jX1JAj65Uo8w3JLjPAp81eLOMGXj/
7Z0/hQQzywoAIOoTcapO9BVIgcAMYwKGun5HqnfVGa7atZvk1yJ9tnoW94wSXcRU
3x2S0lwXsei9l0AOWclUljACqQB0cMHOFvJxug6ionO58nNNgvRsHkt3HrUSQH97
Gi9ilKtUXiQd2dvvvaTLlpPONS7daXxKMRAGzQVIOFkBoezMuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvNt5CnHRpVKt/zEY2XE1AyAa2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDVhYjI5ZGQtOTFlZS0z
Mzc4LWFlYmMtZjc0MGYwOGZkMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvvaQ+KoKK6+6eNAjHt5NSXymRySJqIwrFbEJ/PtOTycp5XByYxHnuD
HaiWt9VMPWhFuijxspaULPDJO322lhoLY5C23bt/zZKm5p3oJOaSE2XF2remBbj0
sbsK9GfJRtT1hhCvBV32nWnVrpRujm/qMeu55NYKDTrAe32+ssPXJ6pyBj5o4KnR
ZNP4aIHUOFQv0oBI96vtofRWuvriFDxMcf7o4Di4TCFljLHMoX+IWOkaWNp56E2S
nKoaBVWpOhEITh0+Aac+opAJ0TH5BTcbqtuQrQG2uGBhm9BeNu5s0VLTN2+D2FaD
CRyj7fSP/3ZUWrk0bcoLPp3HfudDA4Q=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:37 2025 by rpki-client