Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ab9d427-bbce-3a93-8235-51ba4c48ce74.roa
File: 2ab9d427-bbce-3a93-8235-51ba4c48ce74.roa (raw, json)
Hash identifier: FleQuIKZmo+cuQaY9ppFd39AGkduZ/goDhTL+ew3kJ0=
Subject key identifier: DA:DC:50:78:88:47:CF:A6:CA:5E:DB:BE:DC:0D:8D:E9:C4:1F:8D:B3
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584248ACCA0ABBCA239A74CD4100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ab9d427-bbce-3a93-8235-51ba4c48ce74.roa
Signing time: Tue 20 Jun 2023 16:11:37 +0000
ROA not before: Tue 20 Jun 2023 16:11:37 +0000
ROA not after: Mon 18 Sep 2023 16:11:37 +0000
asID: 198802
IP address blocks: 166.1.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:48:ac:ca:0a:bb:ca:23:9a:74:cd:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 20 16:11:37 2023 GMT
Not After : Sep 18 16:11:37 2023 GMT
Subject: CN=bb5df715-1243-4fc6-ad49-c36127ff066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:18:77:f9:d5:dd:d0:ad:88:81:43:35:0e:
28:d4:17:b6:cb:5e:ac:09:6f:b7:6e:e5:7c:d3:a4:
61:6b:72:76:4d:e5:71:ed:d9:59:1c:78:5b:85:f8:
96:bf:27:89:a6:0a:57:00:20:59:6f:15:df:2d:cf:
8f:df:24:05:42:82:b7:7e:e3:a2:f7:77:79:98:62:
8f:6c:5c:29:b5:b5:e9:fa:20:b6:ef:e4:7b:33:bf:
95:a8:ac:2c:4f:f6:b7:56:98:45:06:97:b9:40:06:
bc:5d:19:e9:fb:a3:a5:9c:a2:80:d7:19:98:f2:e8:
4b:41:0e:8b:ab:6c:e4:c0:a8:bb:d0:73:0d:c4:f4:
7e:42:af:54:93:71:46:81:4a:6f:2a:cd:5d:d8:30:
32:47:0f:76:73:4e:62:f4:15:b4:0e:7d:52:28:a8:
6a:4e:12:78:1d:92:84:aa:ec:7b:31:8d:a3:82:e0:
3a:42:b4:cc:17:4f:9f:b7:11:38:3f:4f:a7:7d:4b:
72:a9:d0:21:14:21:d2:92:6b:ae:77:6b:ed:26:0c:
ab:74:aa:ee:d3:2a:c6:64:52:8c:d9:40:6c:b8:a2:
f6:74:d7:9f:63:bb:f8:75:1f:c9:09:30:77:ed:a9:
03:53:ab:f1:38:47:5d:3e:62:11:03:56:a7:a9:d0:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:50:78:88:47:CF:A6:CA:5E:DB:BE:DC:0D:8D:E9:C4:1F:8D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2ab9d427-bbce-3a93-8235-51ba4c48ce74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:54:cd:76:d4:3c:50:09:4a:ef:9d:58:d8:c3:8d:bd:16:7b:
6a:b2:5a:63:86:2e:48:e1:4b:61:8b:a7:21:52:a6:0a:8d:9c:
9f:55:25:43:c7:6c:6f:f0:b5:07:bc:89:b0:6a:e4:05:fe:b8:
1e:15:2c:24:0c:a8:93:93:c3:91:dc:ab:66:d5:85:0f:96:56:
8a:63:1c:32:6a:2f:ce:3d:e7:fc:5c:19:49:38:57:3f:e7:2a:
a7:53:41:8d:3a:a0:d6:ec:fc:4f:97:e6:b1:90:95:9f:f5:d8:
5d:3d:53:8b:12:8a:7d:c1:00:2f:b1:96:f5:f5:94:e8:f6:2a:
e7:93:79:f4:70:ba:2a:fd:ae:77:4a:16:60:c3:78:75:28:0b:
38:e3:56:c0:c9:9a:fd:a4:8b:3d:3a:23:93:5b:74:fc:2e:de:
eb:f7:ff:a4:f3:7c:ce:12:f9:9c:1c:80:8e:00:f6:90:a3:0d:
af:fe:d5:d8:3f:be:d3:ad:e2:b1:03:26:f8:9a:89:a2:cf:bc:
2a:dd:02:98:c6:a9:c9:91:9f:7a:75:b1:dd:36:3c:1a:25:a7:
c9:d5:f2:16:d1:f6:ee:44:78:a0:46:6e:64:f4:92:ee:b8:de:
0b:b3:a7:44:a9:09:d5:aa:34:79:77:5f:cb:b5:2a:82:68:68:
b6:62:70:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJIrMoKu8ojmnTNQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYyMDE2MTEzN1oXDTIzMDkxODE2MTEzN1owLzEtMCsGA1UEAxMk
YmI1ZGY3MTUtMTI0My00ZmM2LWFkNDktYzM2MTI3ZmYwNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYYd/nV3dCtiIFDNQ4o1Be2y16sCW+3buV8
06Rha3J2TeVx7dlZHHhbhfiWvyeJpgpXACBZbxXfLc+P3yQFQoK3fuOi93d5mGKP
bFwptbXp+iC27+R7M7+VqKwsT/a3VphFBpe5QAa8XRnp+6OlnKKA1xmY8uhLQQ6L
q2zkwKi70HMNxPR+Qq9Uk3FGgUpvKs1d2DAyRw92c05i9BW0Dn1SKKhqThJ4HZKE
qux7MY2jguA6QrTMF0+ftxE4P0+nfUtyqdAhFCHSkmuud2vtJgyrdKru0yrGZFKM
2UBsuKL2dNefY7v4dR/JCTB37akDU6vxOEddPmIRA1anqdCV8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrcUHiIR8+myl7bvtwNjenEH42zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmFiOWQ0MjctYmJjZS0z
YTkzLTgyMzUtNTFiYTRjNDhjZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChUzXbUPFAJSu+dWNjDjb0We2qyWmOGLkjhS2GLpyFSpgqNnJ9VJUPH
bG/wtQe8ibBq5AX+uB4VLCQMqJOTw5Hcq2bVhQ+WVopjHDJqL8495/xcGUk4Vz/n
KqdTQY06oNbs/E+X5rGQlZ/12F09U4sSin3BAC+xlvX1lOj2KueTefRwuir9rndK
FmDDeHUoCzjjVsDJmv2kiz06I5NbdPwu3uv3/6TzfM4S+ZwcgI4A9pCjDa/+1dg/
vtOt4rEDJviaiaLPvCrdApjGqcmRn3p1sd02PBolp8nV8hbR9u5EeKBGbmT0ku64
3guzp0SpCdWqNHl3X8u1KoJoaLZicAE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:09 2025 by rpki-client