Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06c7f37c-fddc-3e90-901b-aad6ad5a9cb1.roa
File: 06c7f37c-fddc-3e90-901b-aad6ad5a9cb1.roa (raw, json)
Hash identifier: chIGGSf7ENme385m8zaEalfDr+Sp1QVmmoGbF29asn8=
Subject key identifier: B5:11:52:C6:B0:B8:2B:C1:EE:C1:E4:CE:50:5B:75:92:6E:61:23:41
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842325B7C2E10C82ACC1FCFB480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06c7f37c-fddc-3e90-901b-aad6ad5a9cb1.roa
Signing time: Mon 12 Jun 2023 16:20:01 +0000
ROA not before: Mon 12 Jun 2023 16:20:01 +0000
ROA not after: Sun 10 Sep 2023 16:20:01 +0000
asID: 207633
IP address blocks: 166.1.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:32:5b:7c:2e:10:c8:2a:cc:1f:cf:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 12 16:20:01 2023 GMT
Not After : Sep 10 16:20:01 2023 GMT
Subject: CN=20269084-6b72-4c59-8f8e-e156492e5aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:ed:1f:af:77:85:87:25:13:43:2f:27:5c:
e4:ed:76:c1:ea:4c:2e:c0:a9:a4:23:2b:ae:a1:65:
c2:ed:46:84:c4:b1:d7:ce:66:5b:88:42:04:dc:25:
58:90:5b:05:d0:67:b5:2c:48:0c:45:55:6e:b9:3f:
de:71:54:49:7b:f6:b3:ee:9c:ed:f3:2e:19:9a:ec:
bd:ed:d8:c5:ac:4a:fb:d4:7b:0a:11:e0:1b:96:a5:
a8:ea:48:43:a6:0a:a5:36:d2:9d:ae:36:4a:c9:4f:
52:ac:3c:a9:d3:3b:ac:c1:dd:aa:52:5b:2c:91:dc:
57:b1:4a:88:05:9b:16:ac:ef:ff:3c:44:c5:88:66:
90:bb:cc:33:27:37:6f:f2:93:4c:01:b5:88:e4:81:
b8:37:da:ce:e0:52:62:f0:07:cd:39:09:0a:0a:69:
2e:c1:78:3c:34:1a:03:37:37:4e:62:ba:4c:d0:ff:
e0:4a:0d:f7:0f:6e:fb:d6:a0:79:59:87:6a:24:41:
2e:de:7d:41:76:99:4d:60:dc:11:af:19:6b:bb:14:
76:81:50:27:fd:bc:7d:df:5b:10:ed:35:57:c9:7b:
55:18:50:b7:35:73:c1:5f:ca:fa:5f:43:3e:da:dc:
9c:c1:9b:53:1a:07:3c:4d:cf:fc:ac:a3:ae:ae:94:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:52:C6:B0:B8:2B:C1:EE:C1:E4:CE:50:5B:75:92:6E:61:23:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06c7f37c-fddc-3e90-901b-aad6ad5a9cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fd:65:67:ed:f1:b2:a8:b8:81:0b:f2:0b:bb:5e:5a:d2:98:
e8:6b:60:14:73:66:3c:dc:0f:aa:db:5d:59:f4:b6:ae:05:bb:
f7:1f:21:d4:da:51:82:35:57:d7:63:bc:08:ec:01:a8:2b:1a:
b3:ed:58:e1:97:9e:55:46:b4:19:bb:c4:ad:a1:53:f0:8c:7e:
2a:92:df:20:a0:0d:64:1d:e8:a4:c8:a5:52:85:2e:ff:5d:95:
6b:f0:eb:b0:62:6d:8f:15:aa:4e:00:86:cc:7f:74:23:43:51:
b3:7b:a3:88:b6:81:26:92:2a:38:28:1a:bb:33:45:cd:42:cf:
b7:29:c1:33:39:a8:2a:0d:54:1a:b3:d4:ec:b0:83:ae:92:18:
54:24:c5:9a:78:fd:c6:6c:22:c7:98:50:3f:9e:d7:4c:f4:d8:
03:b5:c7:92:95:c3:3b:b6:ae:2b:be:f9:c9:cc:e5:29:ad:23:
8d:bd:a4:22:81:b7:09:56:44:44:6d:e1:52:80:9a:db:c1:f7:
d3:c8:12:f6:10:cb:6b:27:1a:79:06:87:c2:63:6a:cf:16:68:
08:37:e3:c9:d1:19:55:b0:b3:57:ce:e5:4c:f4:a6:1e:60:35:
73:06:ac:2d:56:a5:c6:08:a5:59:79:77:aa:a0:06:e6:d6:be:
07:df:dd:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIyW3wuEMgqzB/PtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxMjE2MjAwMVoXDTIzMDkxMDE2MjAwMVowLzEtMCsGA1UEAxMk
MjAyNjkwODQtNmI3Mi00YzU5LThmOGUtZTE1NjQ5MmU1YWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibHtH693hYclE0MvJ1zk7XbB6kwuwKmkIyuu
oWXC7UaExLHXzmZbiEIE3CVYkFsF0Ge1LEgMRVVuuT/ecVRJe/az7pzt8y4Zmuy9
7djFrEr71HsKEeAblqWo6khDpgqlNtKdrjZKyU9SrDyp0zuswd2qUlsskdxXsUqI
BZsWrO//PETFiGaQu8wzJzdv8pNMAbWI5IG4N9rO4FJi8AfNOQkKCmkuwXg8NBoD
NzdOYrpM0P/gSg33D2771qB5WYdqJEEu3n1BdplNYNwRrxlruxR2gVAn/bx931sQ
7TVXyXtVGFC3NXPBX8r6X0M+2tycwZtTGgc8Tc/8rKOurpRJ6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLURUsawuCvB7sHkzlBbdZJuYSNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDZjN2YzN2MtZmRkYy0z
ZTkwLTkwMWItYWFkNmFkNWE5Y2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFX9ZWft8bKouIEL8gu7XlrSmOhrYBRzZjzcD6rbXVn0tq4Fu/cfIdTa
UYI1V9djvAjsAagrGrPtWOGXnlVGtBm7xK2hU/CMfiqS3yCgDWQd6KTIpVKFLv9d
lWvw67BibY8Vqk4Ahsx/dCNDUbN7o4i2gSaSKjgoGrszRc1Cz7cpwTM5qCoNVBqz
1Oywg66SGFQkxZp4/cZsIseYUD+e10z02AO1x5KVwzu2riu++cnM5SmtI429pCKB
twlWRERt4VKAmtvB99PIEvYQy2snGnkGh8Jjas8WaAg348nRGVWws1fO5Uz0ph5g
NXMGrC1WpcYIpVl5d6qgBubWvgff3XE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:18:17 2025 by rpki-client