Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29093cff-ab63-3a2a-85c8-13b998a135b3.roa
File: 29093cff-ab63-3a2a-85c8-13b998a135b3.roa (raw, json)
Hash identifier: ZwIUh9sFIisu7t8t78hLQwkbf3D/6M+MJVjA64520JE=
Subject key identifier: C8:5B:1D:24:29:8E:95:E2:83:0F:85:A4:9A:8E:F0:4A:5B:57:66:FC
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584617526237648B375B00079300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29093cff-ab63-3a2a-85c8-13b998a135b3.roa
Signing time: Mon 03 Jun 2024 19:02:36 +0000
ROA not before: Mon 03 Jun 2024 19:02:36 +0000
ROA not after: Sun 01 Sep 2024 19:02:36 +0000
asID: 53356
IP address blocks: 166.0.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:17:52:62:37:64:8b:37:5b:00:07:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 3 19:02:36 2024 GMT
Not After : Sep 1 19:02:36 2024 GMT
Subject: CN=e8be5329-f102-4279-9501-31ccfeafbc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:5f:3c:d2:33:63:ed:88:fa:0a:50:5e:b3:
1e:5e:bc:31:c9:7c:a4:1c:78:a9:40:93:d3:66:2c:
0c:42:4d:87:be:d7:68:5c:4a:72:ba:87:0d:85:83:
15:1b:08:4a:da:81:8f:f9:ff:9b:20:ce:d1:13:15:
f1:ad:f5:42:82:08:b3:bb:4b:af:45:9c:e3:28:f9:
0c:b7:9f:0f:e7:dd:d6:32:2c:eb:8f:22:fd:27:c4:
8b:66:c2:79:d4:47:4a:96:07:ed:60:d9:cb:e5:f3:
62:26:08:92:b5:9a:21:64:76:b4:4a:e4:58:db:bd:
7b:10:a7:52:72:1c:e1:ed:8f:52:fd:6e:20:47:33:
1e:26:92:de:19:0d:12:ec:e3:9d:0a:8d:6a:6f:30:
a0:b3:9e:ea:40:f4:64:64:cc:d8:07:89:13:5a:4d:
0d:c1:aa:bb:4b:5a:7f:c6:c4:b0:f1:6a:da:35:5e:
4a:b1:35:66:ea:3e:26:7a:06:2d:76:b2:87:e0:a1:
95:c7:b1:65:a1:1e:5c:7d:30:40:98:cd:3e:3c:a3:
2a:65:ee:88:58:1f:eb:4c:21:f9:0c:a9:e0:a9:fe:
e6:2e:85:22:48:c3:20:45:1e:fe:e9:b5:08:6c:51:
00:de:4b:32:c6:1d:05:36:39:33:97:fc:b0:5a:12:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:1D:24:29:8E:95:E2:83:0F:85:A4:9A:8E:F0:4A:5B:57:66:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/29093cff-ab63-3a2a-85c8-13b998a135b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b8:fc:90:90:dc:86:3d:53:b2:47:2d:a9:e7:6f:5f:e8:6b:
9f:32:b9:d5:9d:38:00:0b:cc:5c:12:22:d0:d5:0b:d1:bb:55:
68:22:d4:8c:2b:11:4a:80:b7:16:c8:da:75:da:ad:d8:b7:d9:
a2:12:5d:0f:10:12:04:2d:20:50:d6:63:e1:1d:f3:f0:f5:08:
75:7e:23:99:e6:10:f9:53:73:49:f2:93:b6:e1:c2:b7:c8:df:
75:12:18:44:ee:8a:24:51:db:ab:7b:7b:1c:cf:59:e6:57:7d:
3b:7e:72:fe:33:b2:22:90:ac:f4:f0:46:a0:b7:87:3d:33:8e:
16:a2:5b:66:93:c5:e0:cd:98:25:7f:07:92:a6:ce:85:4c:c3:
a6:eb:9f:f8:ad:d4:bb:a7:5c:aa:8d:73:af:d1:5d:95:fa:80:
1e:57:91:da:82:0f:9d:25:1f:f6:bd:12:54:eb:bc:6c:3c:71:
0b:09:17:28:90:7a:96:d2:9e:a7:70:4a:a0:fe:30:49:37:0e:
4c:ce:61:0c:3b:27:ed:11:f9:4c:c6:c3:8d:4e:73:45:c5:8f:
d1:7e:2a:c7:5c:71:ea:b0:87:f9:37:4b:1e:ee:14:43:0c:57:
5d:35:2e:00:56:c4:6a:84:48:fc:a4:33:1a:fc:f0:23:94:3f:
83:81:1b:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYXUmI3ZIs3WwAHkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDYwMzE5MDIzNloXDTI0MDkwMTE5MDIzNlowLzEtMCsGA1UEAxMk
ZThiZTUzMjktZjEwMi00Mjc5LTk1MDEtMzFjY2ZlYWZiYzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf1fPNIzY+2I+gpQXrMeXrwxyXykHHipQJPT
ZiwMQk2HvtdoXEpyuocNhYMVGwhK2oGP+f+bIM7RExXxrfVCggizu0uvRZzjKPkM
t58P593WMizrjyL9J8SLZsJ51EdKlgftYNnL5fNiJgiStZohZHa0SuRY2717EKdS
chzh7Y9S/W4gRzMeJpLeGQ0S7OOdCo1qbzCgs57qQPRkZMzYB4kTWk0Nwaq7S1p/
xsSw8WraNV5KsTVm6j4megYtdrKH4KGVx7FloR5cfTBAmM0+PKMqZe6IWB/rTCH5
DKngqf7mLoUiSMMgRR7+6bUIbFEA3ksyxh0FNjkzl/ywWhJUiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhbHSQpjpXigw+FpJqO8EpbV2b8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjkwOTNjZmYtYWI2My0z
YTJhLTg1YzgtMTNiOTk4YTEzNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGC4/JCQ3IY9U7JHLannb1/oa58yudWdOAALzFwSItDVC9G7VWgi1Iwr
EUqAtxbI2nXardi32aISXQ8QEgQtIFDWY+Ed8/D1CHV+I5nmEPlTc0nyk7bhwrfI
33USGETuiiRR26t7exzPWeZXfTt+cv4zsiKQrPTwRqC3hz0zjhaiW2aTxeDNmCV/
B5KmzoVMw6brn/it1LunXKqNc6/RXZX6gB5XkdqCD50lH/a9ElTrvGw8cQsJFyiQ
epbSnqdwSqD+MEk3DkzOYQw7J+0R+UzGw41Oc0XFj9F+Ksdcceqwh/k3Sx7uFEMM
V101LgBWxGqESPykMxr88COUP4OBGwk=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:11:23 2025 by rpki-client