Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18da42b2-09a6-38a2-9d70-154315d0bc5e.roa
File: 18da42b2-09a6-38a2-9d70-154315d0bc5e.roa (raw, json)
Hash identifier: hq7e6kfPB6zwY9DdfL/Mblgs5qDy72kUNSzzlwwh1+k=
Subject key identifier: 6E:90:64:4C:D3:93:15:F6:A3:CE:4F:56:A4:93:C9:1C:8D:B3:DA:9B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C8FF8120BF973198F3F2B260
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18da42b2-09a6-38a2-9d70-154315d0bc5e.roa
Signing time: Wed 05 Feb 2025 20:03:22 +0000
ROA not before: Wed 05 Feb 2025 20:03:22 +0000
ROA not after: Tue 06 May 2025 19:03:22 +0000
asID: 11798
IP address blocks: 166.0.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:ff:81:20:bf:97:31:98:f3:f2:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 5 20:03:22 2025 GMT
Not After : May 6 19:03:22 2025 GMT
Subject: CN=faf85024-7f48-4f55-a8db-dd13ca937f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:88:54:df:c7:9f:ca:80:90:2a:52:e6:40:
05:6d:5d:65:97:b7:13:64:ed:ff:f3:58:42:22:a0:
8c:54:fb:1b:b0:c0:c6:cd:f0:ee:14:a5:f4:a8:70:
fe:b2:3d:dc:0d:98:6e:2f:62:c5:2b:09:d4:2e:1f:
67:ae:a4:03:32:dd:35:f7:0d:e5:f9:84:5a:c8:12:
8e:db:ee:81:2d:ee:d0:b8:85:c9:a2:cc:d1:cd:11:
2b:82:eb:6a:0c:88:ea:c7:8b:f7:d5:21:8e:3c:e9:
32:60:92:09:5a:6a:fc:df:70:d4:04:5a:65:31:22:
7b:95:41:e7:87:b6:53:f9:5c:27:c4:d6:67:a5:bc:
61:58:46:c1:21:d9:1b:a5:c1:c5:5c:3e:31:4e:3f:
92:a9:e8:94:3d:e1:7e:f7:61:10:ef:d3:50:c7:12:
0f:89:a6:97:3c:25:65:e9:ba:27:77:71:b2:ac:d4:
ac:80:d2:a6:cf:2f:07:e7:7c:d5:91:a6:a9:57:45:
aa:d0:7d:79:94:24:20:15:2c:de:46:25:c6:a4:39:
2f:70:68:42:2b:2b:e6:2b:d4:8d:67:99:25:bd:ae:
cc:1a:dc:91:d5:65:72:db:41:42:a8:95:41:d7:9d:
1a:f0:fa:40:0d:6a:86:3b:d0:9f:38:75:39:9a:47:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:64:4C:D3:93:15:F6:A3:CE:4F:56:A4:93:C9:1C:8D:B3:DA:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18da42b2-09a6-38a2-9d70-154315d0bc5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b1:91:ed:29:11:a9:33:57:8f:c2:29:ef:ca:28:37:fd:0c:
e9:73:44:a8:ca:c6:58:db:a5:2f:7a:30:db:a7:5b:ef:46:43:
7e:cf:97:58:12:7c:a8:ff:3f:75:74:57:47:9b:fd:8c:b4:01:
b2:99:a7:08:78:49:9f:ae:e5:bb:3c:5b:97:38:89:2d:d6:b1:
8e:c4:74:79:ee:bf:ee:36:9f:4d:62:61:a7:c4:04:6a:33:f8:
0c:64:8e:ab:47:ae:ff:59:57:96:c0:ec:13:16:93:6e:1d:a0:
91:ec:18:80:17:f8:88:0c:1b:1d:9a:d8:dc:0e:0b:c9:a8:ff:
d0:c3:bc:99:22:b4:a2:fc:43:a2:87:df:5a:0e:25:36:23:24:
4e:71:67:d8:ec:57:d6:f3:45:7c:c6:17:ee:d3:f2:3d:3c:a4:
69:88:ea:97:cb:32:65:33:5d:95:66:8a:86:a4:34:52:7b:29:
5b:a1:34:11:7c:32:62:73:18:82:28:81:7a:f3:73:08:92:02:
8b:b4:0d:2a:65:03:ba:5d:ee:66:21:1a:db:77:b7:9f:6c:52:
74:8c:cb:b7:d6:91:a5:72:37:39:82:27:45:5f:f6:83:73:7f:
ce:8b:82:cc:5a:3a:ab:30:5b:75:6a:c4:e7:4f:6a:46:4d:c6:
9f:08:54:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjI/4Egv5cxmPPysmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwNTIwMDMyMloXDTI1MDUwNjE5MDMyMlowLzEtMCsGA1UEAxMk
ZmFmODUwMjQtN2Y0OC00ZjU1LWE4ZGItZGQxM2NhOTM3ZjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgWIVN/Hn8qAkCpS5kAFbV1ll7cTZO3/81hC
IqCMVPsbsMDGzfDuFKX0qHD+sj3cDZhuL2LFKwnULh9nrqQDMt019w3l+YRayBKO
2+6BLe7QuIXJoszRzRErgutqDIjqx4v31SGOPOkyYJIJWmr833DUBFplMSJ7lUHn
h7ZT+VwnxNZnpbxhWEbBIdkbpcHFXD4xTj+SqeiUPeF+92EQ79NQxxIPiaaXPCVl
6bond3GyrNSsgNKmzy8H53zVkaapV0Wq0H15lCQgFSzeRiXGpDkvcGhCKyvmK9SN
Z5klva7MGtyR1WVy20FCqJVB150a8PpADWqGO9CfOHU5mkdDzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6QZEzTkxX2o85PVqSTyRyNs9qbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMThkYTQyYjItMDlhNi0z
OGEyLTlkNzAtMTU0MzE1ZDBiYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABexke0pEakzV4/CKe/KKDf9DOlzRKjKxljbpS96MNunW+9GQ37Pl1gS
fKj/P3V0V0eb/Yy0AbKZpwh4SZ+u5bs8W5c4iS3WsY7EdHnuv+42n01iYafEBGoz
+AxkjqtHrv9ZV5bA7BMWk24doJHsGIAX+IgMGx2a2NwOC8mo/9DDvJkitKL8Q6KH
31oOJTYjJE5xZ9jsV9bzRXzGF+7T8j08pGmI6pfLMmUzXZVmioakNFJ7KVuhNBF8
MmJzGIIogXrzcwiSAou0DSplA7pd7mYhGtt3t59sUnSMy7fWkaVyNzmCJ0Vf9oNz
f86LgsxaOqswW3VqxOdPakZNxp8IVFk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:08 2025 by rpki-client