Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13771533-8f0c-35a9-96d5-01b9ca84ebc9.roa
File: 13771533-8f0c-35a9-96d5-01b9ca84ebc9.roa (raw, json)
Hash identifier: 4dE3dxKuPRXWJvgCPWT2GsWSLTN/5vcEQzCjHB1HXxg=
Subject key identifier: 44:E9:AA:53:55:8E:F6:95:78:35:65:34:BA:0F:8F:1B:54:41:FB:FB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842EA6BF0ADBB11712EA2DB5C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13771533-8f0c-35a9-96d5-01b9ca84ebc9.roa
Signing time: Thu 17 Aug 2023 14:41:54 +0000
ROA not before: Thu 17 Aug 2023 14:41:54 +0000
ROA not after: Wed 15 Nov 2023 15:41:54 +0000
asID: 50131
IP address blocks: 166.1.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ea:6b:f0:ad:bb:11:71:2e:a2:db:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 17 14:41:54 2023 GMT
Not After : Nov 15 15:41:54 2023 GMT
Subject: CN=d7653151-4434-4c75-b696-e912cb5aa939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:2f:8f:7c:04:58:62:0f:24:8e:e2:e2:b5:
50:11:34:55:25:af:e5:20:1b:62:9b:66:09:22:0f:
2a:1d:dc:4f:88:ff:78:f9:2e:3b:96:cb:96:c8:8b:
2c:7e:36:00:d0:ee:1c:1d:56:9a:dd:30:b8:32:00:
08:b8:09:88:8e:c1:d5:08:50:0c:5b:35:47:e9:38:
2b:f9:b0:91:32:aa:0d:3a:f1:43:f1:b2:94:1d:45:
91:67:09:07:26:3a:85:e8:27:e7:7d:8e:c1:8c:4d:
8f:14:74:70:b6:d7:02:c9:68:71:d6:b1:25:4b:15:
84:0a:84:8b:f9:e6:4c:d3:06:ad:3b:83:14:45:4e:
21:d0:8d:0c:2b:07:c8:77:0d:77:59:99:ba:87:6d:
00:24:5b:d4:77:9c:3a:8d:4b:04:59:db:46:67:16:
db:5a:9b:2d:d0:ce:36:d3:59:fb:a9:36:88:90:7b:
b5:65:40:b7:92:43:f7:d6:2a:55:cc:80:2e:2d:d3:
01:17:2f:23:3f:0d:8c:0b:d7:6e:97:44:22:be:09:
58:5f:7a:3c:d5:07:86:14:53:5f:db:86:1d:5a:92:
ea:04:89:bc:cb:7f:a7:fa:03:91:d4:8b:ff:31:69:
7c:81:75:ea:9f:6d:3b:be:f3:67:b6:30:c7:e1:1c:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:AA:53:55:8E:F6:95:78:35:65:34:BA:0F:8F:1B:54:41:FB:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/13771533-8f0c-35a9-96d5-01b9ca84ebc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:7d:a0:ef:de:9a:c5:6d:ef:a7:ed:98:fb:bb:c0:a3:79:ec:
6c:71:99:e0:35:66:d5:f7:4e:90:78:74:32:0d:25:cd:4f:28:
08:49:0a:b5:98:33:da:7c:a0:e6:75:04:04:04:80:4d:9f:6c:
be:30:db:d1:99:64:09:62:ba:58:88:59:23:4a:fa:ca:26:46:
bd:37:5d:03:74:98:fe:80:0a:21:29:0a:91:e8:03:17:b3:cd:
f6:04:12:65:3f:48:26:86:eb:76:6e:d4:0d:7d:55:fa:c4:c9:
f7:47:07:e1:c3:26:3b:a2:a0:ff:6c:bf:55:8c:41:7e:5d:cf:
b1:42:50:e2:aa:bb:dc:ee:ea:27:42:45:9a:6b:55:bc:e5:a7:
f9:04:50:05:f8:99:79:10:0c:ce:35:71:f0:1d:58:96:e0:32:
61:7f:2d:95:41:b6:f4:13:e8:f5:1c:bc:6d:4e:95:b4:1e:7a:
a5:1c:c8:36:d6:02:76:0b:b2:c9:0d:a7:6b:6f:fe:98:5d:53:
b1:0f:91:fd:c1:8f:4b:17:63:95:1c:0e:b4:f9:22:aa:72:46:
fe:19:81:a6:f1:23:cb:08:a2:d9:b3:8f:97:1f:81:32:65:4a:
59:89:6a:e9:7d:85:bd:fd:e9:29:7d:3d:f9:b1:ab:26:dc:03:
e2:66:a6:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELqa/CtuxFxLqLbXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgxNzE0NDE1NFoXDTIzMTExNTE1NDE1NFowLzEtMCsGA1UEAxMk
ZDc2NTMxNTEtNDQzNC00Yzc1LWI2OTYtZTkxMmNiNWFhOTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1cvj3wEWGIPJI7i4rVQETRVJa/lIBtim2YJ
Ig8qHdxPiP94+S47lsuWyIssfjYA0O4cHVaa3TC4MgAIuAmIjsHVCFAMWzVH6Tgr
+bCRMqoNOvFD8bKUHUWRZwkHJjqF6CfnfY7BjE2PFHRwttcCyWhx1rElSxWECoSL
+eZM0watO4MURU4h0I0MKwfIdw13WZm6h20AJFvUd5w6jUsEWdtGZxbbWpst0M42
01n7qTaIkHu1ZUC3kkP31ipVzIAuLdMBFy8jPw2MC9dul0QivglYX3o81QeGFFNf
24YdWpLqBIm8y3+n+gOR1Iv/MWl8gXXqn207vvNntjDH4RxomQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETpqlNVjvaVeDVlNLoPjxtUQfv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTM3NzE1MzMtOGYwYy0z
NWE5LTk2ZDUtMDFiOWNhODRlYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgECMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKd9oO/emsVt76ftmPu7wKN57GxxmeA1ZtX3TpB4dDINJc1PKAhJCrWY
M9p8oOZ1BAQEgE2fbL4w29GZZAliuliIWSNK+somRr03XQN0mP6ACiEpCpHoAxez
zfYEEmU/SCaG63Zu1A19VfrEyfdHB+HDJjuioP9sv1WMQX5dz7FCUOKqu9zu6idC
RZprVbzlp/kEUAX4mXkQDM41cfAdWJbgMmF/LZVBtvQT6PUcvG1OlbQeeqUcyDbW
AnYLsskNp2tv/phdU7EPkf3Bj0sXY5UcDrT5IqpyRv4ZgabxI8sIotmzj5cfgTJl
SlmJaul9hb396Sl9PfmxqybcA+Jmpqo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:38 2025 by rpki-client