Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/186dd043-4221-36c3-9cb2-230613807235.roa
File: 186dd043-4221-36c3-9cb2-230613807235.roa (raw, json)
Hash identifier: EjFTGjY1KaXxMKf+ZevttcDZQUj7wBJM+to7LEd9BKQ=
Subject key identifier: 2D:2F:B8:BF:54:47:79:E0:C2:CB:D0:D0:95:51:53:14:0C:7E:4E:B6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C360456000107A73550A5B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/186dd043-4221-36c3-9cb2-230613807235.roa
Signing time: Mon 03 Feb 2025 19:43:29 +0000
ROA not before: Mon 03 Feb 2025 19:43:29 +0000
ROA not after: Sun 04 May 2025 18:43:29 +0000
asID: 215224
IP address blocks: 166.0.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:60:45:60:00:10:7a:73:55:0a:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 3 19:43:29 2025 GMT
Not After : May 4 18:43:29 2025 GMT
Subject: CN=490acae0-f967-4541-8ae9-4c03f2b06618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c2:51:fa:f5:72:5e:15:24:3d:6d:50:3d:ac:
23:55:2f:cd:41:0e:c3:de:a4:48:51:fc:4d:7b:ee:
8e:63:14:3e:e5:b9:55:24:98:f1:a3:ef:fc:c5:f5:
ef:6d:82:e1:ba:3f:ac:9b:63:ac:63:88:57:a9:04:
a5:51:5a:ac:d6:c7:a4:b8:57:50:4f:8e:5c:a0:51:
26:bf:c7:f6:9d:c9:f3:10:27:54:52:d3:06:be:a3:
40:6c:41:28:b2:13:e4:f9:be:5e:00:8d:28:09:76:
6d:d4:07:51:cb:c5:e2:cf:22:6a:e4:5a:8b:52:2d:
ac:71:b6:7c:7f:ca:d9:14:74:c7:82:be:c5:c7:70:
6a:dd:96:6b:ca:1b:e5:4f:cf:c1:d9:3e:e8:c6:bf:
51:3c:e6:f8:2e:1d:e6:3b:39:86:0c:52:47:9a:02:
04:6a:b4:c3:e3:06:bb:a5:55:42:8a:83:51:aa:79:
94:c2:51:b3:95:ed:f7:0f:f5:36:17:6b:fc:51:5e:
f2:c0:cd:70:d2:86:7b:d5:a4:f5:46:e7:32:ff:64:
d6:cd:db:1a:c2:0a:d4:c8:4d:4f:d6:09:8d:d7:b3:
0f:01:04:32:8d:c6:9b:4c:de:e6:b4:cd:bf:56:66:
eb:a9:c6:a4:4f:85:50:7d:a1:2d:82:08:4c:49:2f:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:B8:BF:54:47:79:E0:C2:CB:D0:D0:95:51:53:14:0C:7E:4E:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/186dd043-4221-36c3-9cb2-230613807235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a8:6b:59:5a:2b:3c:5a:cc:ce:af:0c:3f:80:06:cf:aa:3e:
63:a1:2e:a2:4b:18:99:53:ca:01:c0:28:fb:93:f6:ad:66:5a:
92:f2:a3:eb:6c:7f:49:60:a9:9b:39:9e:05:9f:2f:14:2d:aa:
f2:1e:c6:eb:21:07:13:1b:fe:f4:70:22:43:3f:b5:dd:00:ba:
a6:60:11:34:2f:0b:7a:f3:f9:66:9f:58:c1:41:cf:f7:59:6a:
c3:2b:59:82:99:e3:d6:e8:6b:ef:a5:51:1b:aa:c8:46:1b:f0:
46:64:03:77:59:42:44:63:a1:58:fe:49:8d:d4:24:8b:15:8b:
41:be:2f:c3:31:90:77:20:7b:22:df:f6:1a:ec:80:1a:d8:be:
ae:58:b8:73:38:43:ff:2b:51:3d:63:dd:bc:34:96:14:4f:14:
bb:8e:1c:7b:3f:84:25:5a:99:a4:a7:27:d8:b1:a8:58:7b:25:
c7:e8:a5:82:d2:10:70:c4:b9:1b:d7:f4:af:1b:7a:25:c7:75:
b5:d1:ee:ef:eb:68:2e:c4:db:58:a1:5f:da:10:c2:41:76:da:
01:9c:15:59:f2:c8:d9:71:5e:67:47:36:79:dd:70:4c:ca:f2:
c0:0a:f9:96:cd:29:51:59:0a:b6:4b:ee:bf:0b:cf:90:45:47:
75:97:6a:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjDYEVgABB6c1UKW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwMzE5NDMyOVoXDTI1MDUwNDE4NDMyOVowLzEtMCsGA1UEAxMk
NDkwYWNhZTAtZjk2Ny00NTQxLThhZTktNGMwM2YyYjA2NjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicJR+vVyXhUkPW1QPawjVS/NQQ7D3qRIUfxN
e+6OYxQ+5blVJJjxo+/8xfXvbYLhuj+sm2OsY4hXqQSlUVqs1sekuFdQT45coFEm
v8f2ncnzECdUUtMGvqNAbEEoshPk+b5eAI0oCXZt1AdRy8XizyJq5FqLUi2scbZ8
f8rZFHTHgr7Fx3Bq3ZZryhvlT8/B2T7oxr9RPOb4Lh3mOzmGDFJHmgIEarTD4wa7
pVVCioNRqnmUwlGzle33D/U2F2v8UV7ywM1w0oZ71aT1Rucy/2TWzdsawgrUyE1P
1gmN17MPAQQyjcabTN7mtM2/VmbrqcakT4VQfaEtgghMSS9PaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0vuL9UR3ngwsvQ0JVRUxQMfk62MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTg2ZGQwNDMtNDIyMS0z
NmMzLTljYjItMjMwNjEzODA3MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKuoa1laKzxazM6vDD+ABs+qPmOhLqJLGJlTygHAKPuT9q1mWpLyo+ts
f0lgqZs5ngWfLxQtqvIexushBxMb/vRwIkM/td0AuqZgETQvC3rz+WafWMFBz/dZ
asMrWYKZ49boa++lURuqyEYb8EZkA3dZQkRjoVj+SY3UJIsVi0G+L8MxkHcgeyLf
9hrsgBrYvq5YuHM4Q/8rUT1j3bw0lhRPFLuOHHs/hCVamaSnJ9ixqFh7JcfopYLS
EHDEuRvX9K8beiXHdbXR7u/raC7E21ihX9oQwkF22gGcFVnyyNlxXmdHNnndcEzK
8sAK+ZbNKVFZCrZL7r8Lz5BFR3WXakw=
-----END CERTIFICATE-----
Generated at Wed Jun 18 17:01:22 2025 by rpki-client