Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b5158c0-8e40-3501-be4c-94b5cff2a645.roa
File: 2b5158c0-8e40-3501-be4c-94b5cff2a645.roa (raw, json)
Hash identifier: M3MO0A3Airwm8Gra0zUhK8W2lb+03vNkk8+IwpFM9TI=
Subject key identifier: DD:25:7C:EE:A1:23:04:85:B3:5B:8C:25:53:BF:EA:2D:D8:7B:D6:5F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584626719CA5299216CB68D4A000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b5158c0-8e40-3501-be4c-94b5cff2a645.roa
Signing time: Sun 09 Jun 2024 05:02:39 +0000
ROA not before: Sun 09 Jun 2024 05:02:39 +0000
ROA not after: Sat 07 Sep 2024 05:02:39 +0000
asID: 834
IP address blocks: 166.0.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:26:71:9c:a5:29:92:16:cb:68:d4:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 9 05:02:39 2024 GMT
Not After : Sep 7 05:02:39 2024 GMT
Subject: CN=ce8704f4-419b-493c-9bff-17e473635747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:0e:c0:a7:22:f0:68:dc:82:3b:b0:a4:71:
67:27:dc:e5:ca:0b:5e:f4:fa:10:ef:70:93:df:06:
2e:57:d4:42:d6:1e:28:ac:00:99:bf:49:37:14:c9:
aa:4c:2d:97:73:f4:25:54:3c:a6:c9:35:d7:6c:77:
6d:d2:19:56:87:d8:2c:26:b5:81:53:6d:10:48:3d:
c3:9d:c5:fc:76:33:60:40:73:b5:a4:34:68:9d:e7:
e8:8b:51:c4:d0:f0:0a:d2:c0:16:5a:bc:51:d1:7b:
40:77:80:22:a8:55:30:af:69:ed:82:c6:ac:77:d1:
0d:70:8e:5a:94:a4:6c:19:a1:62:7c:b3:51:7c:6e:
3e:6b:5e:c8:6c:c2:03:b7:94:a4:0b:09:41:e6:75:
86:85:8f:d2:00:bd:8d:8e:32:d7:e5:bf:de:5d:f6:
88:6a:91:cd:51:5a:40:05:92:25:07:b1:4f:d5:26:
36:22:6b:bd:03:62:f2:b7:d7:4d:a2:0f:d6:3f:1b:
60:dd:f5:1e:80:ed:ad:d7:8a:64:f3:94:48:ff:06:
97:d1:21:2a:21:ad:8e:f2:89:05:de:34:30:ff:47:
73:24:cc:15:a4:c5:06:29:3a:7f:fd:75:16:b7:0e:
cc:11:77:8c:2b:15:7c:fd:f7:77:46:e2:e1:cf:46:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:25:7C:EE:A1:23:04:85:B3:5B:8C:25:53:BF:EA:2D:D8:7B:D6:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2b5158c0-8e40-3501-be4c-94b5cff2a645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:67:25:49:84:04:b4:c1:9f:b0:66:89:91:c5:c3:50:08:3a:
a0:99:5d:b5:08:b3:14:23:d3:ce:8e:28:16:e3:11:23:f3:e1:
9b:d8:ce:74:fc:c3:de:52:f6:f9:ea:2f:cd:b3:66:40:7e:e0:
43:ad:9b:0a:08:b4:34:6b:3b:d7:2c:43:09:da:53:f4:6a:5c:
b9:9b:ba:b8:49:cc:60:63:73:54:53:90:01:10:bb:11:23:81:
18:e9:5c:7d:03:b1:e2:bc:66:4a:8c:3e:2a:a8:13:dc:49:b0:
87:fb:eb:e4:76:71:45:c0:cd:a6:85:3b:02:c1:5e:f4:a4:de:
36:2c:e4:f9:64:4b:d7:77:72:f6:9f:50:b8:0b:9a:4a:d5:66:
b8:d5:7a:8d:b7:58:54:37:b8:ff:60:2b:c5:8d:bb:31:bf:14:
91:3c:3e:55:2b:a0:eb:6c:f9:ed:9a:86:54:b9:9b:f3:2f:b5:
1c:1f:82:80:bd:fc:d3:30:e0:2b:91:30:0d:80:f3:a0:b7:8b:
59:93:da:9c:df:3c:7b:92:1c:29:04:5a:fe:e9:67:59:a2:b1:
69:37:2f:57:e8:57:91:ec:0c:1d:ca:90:d9:ee:a6:ec:d2:41:
85:ab:e6:0e:b3:ea:16:76:16:40:ce:71:7d:27:35:53:bf:b8:
66:a2:cb:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYmcZylKZIWy2jUoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDYwOTA1MDIzOVoXDTI0MDkwNzA1MDIzOVowLzEtMCsGA1UEAxMk
Y2U4NzA0ZjQtNDE5Yi00OTNjLTliZmYtMTdlNDczNjM1NzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBgOwKci8GjcgjuwpHFnJ9zlygte9PoQ73CT
3wYuV9RC1h4orACZv0k3FMmqTC2Xc/QlVDymyTXXbHdt0hlWh9gsJrWBU20QSD3D
ncX8djNgQHO1pDRonefoi1HE0PAK0sAWWrxR0XtAd4AiqFUwr2ntgsasd9ENcI5a
lKRsGaFifLNRfG4+a17IbMIDt5SkCwlB5nWGhY/SAL2NjjLX5b/eXfaIapHNUVpA
BZIlB7FP1SY2Imu9A2Lyt9dNog/WPxtg3fUegO2t14pk85RI/waX0SEqIa2O8okF
3jQw/0dzJMwVpMUGKTp//XUWtw7MEXeMKxV8/fd3RuLhz0ZGYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0lfO6hIwSFs1uMJVO/6i3Ye9ZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmI1MTU4YzAtOGU0MC0z
NTAxLWJlNGMtOTRiNWNmZjJhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERnJUmEBLTBn7BmiZHFw1AIOqCZXbUIsxQj086OKBbjESPz4ZvYznT8
w95S9vnqL82zZkB+4EOtmwoItDRrO9csQwnaU/RqXLmburhJzGBjc1RTkAEQuxEj
gRjpXH0DseK8ZkqMPiqoE9xJsIf76+R2cUXAzaaFOwLBXvSk3jYs5PlkS9d3cvaf
ULgLmkrVZrjVeo23WFQ3uP9gK8WNuzG/FJE8PlUroOts+e2ahlS5m/MvtRwfgoC9
/NMw4CuRMA2A86C3i1mT2pzfPHuSHCkEWv7pZ1misWk3L1foV5HsDB3KkNnupuzS
QYWr5g6z6hZ2FkDOcX0nNVO/uGaiy7Y=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:29 2025 by rpki-client