Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38844f44-3770-3afd-a5ee-a09e4a08a65b.roa
File: 38844f44-3770-3afd-a5ee-a09e4a08a65b.roa (raw, json)
Hash identifier: yRBuAizyv81tUUnuLWQ+t5kv2N2NR2x16SHIgrD1pvI=
Subject key identifier: 0D:DB:35:DB:1D:65:31:DA:98:E7:9E:9D:F9:00:B0:A4:E7:07:3D:13
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584709E3FF32F14FAE7069FA6380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38844f44-3770-3afd-a5ee-a09e4a08a65b.roa
Signing time: Thu 29 Aug 2024 16:21:37 +0000
ROA not before: Thu 29 Aug 2024 16:21:37 +0000
ROA not after: Wed 27 Nov 2024 17:21:37 +0000
asID: 834
IP address blocks: 166.0.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:09:e3:ff:32:f1:4f:ae:70:69:fa:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 29 16:21:37 2024 GMT
Not After : Nov 27 17:21:37 2024 GMT
Subject: CN=9901c93c-dfc6-4cc9-b390-23880634c4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:dc:e8:c5:bc:37:04:d6:cd:01:59:1f:69:
1d:1e:de:0a:ad:b3:46:46:5d:bb:34:2a:96:43:ab:
b3:8c:8d:e8:ac:f6:0c:c7:0c:61:ca:02:4a:78:c6:
42:73:6b:e0:cd:99:68:df:95:b2:bb:aa:96:d3:d9:
a3:84:82:75:9f:06:35:e1:22:16:76:7f:a1:d6:0e:
04:41:53:56:c1:43:c4:4e:a2:6a:14:ff:d6:ae:ed:
cc:ab:6d:70:78:64:d8:83:7e:f2:79:18:3b:59:9c:
10:6f:79:1a:61:68:f6:cd:38:ab:1f:f7:f9:bd:9c:
e7:bc:f6:7f:9a:1b:20:08:ce:cc:7e:13:03:6b:73:
93:fe:69:28:59:37:86:a4:0c:b4:7d:58:d0:4c:b1:
32:d3:fc:93:d6:82:72:e6:38:66:4f:a6:fd:1d:b4:
f8:c4:d9:8e:82:88:fc:cc:00:a1:4c:75:b5:6a:96:
fb:ab:96:6d:07:45:e4:b3:98:44:96:ac:fb:1e:76:
ac:ef:8b:b8:f1:63:4a:8d:94:fd:df:74:dc:e7:ed:
81:f8:3f:2c:03:d0:41:ea:bc:07:0f:b1:a1:98:00:
8d:42:61:a7:21:e3:6f:41:59:ca:f7:38:e2:71:5e:
5a:d5:c3:9d:75:76:fc:f0:b7:80:c9:c1:11:d6:ec:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:35:DB:1D:65:31:DA:98:E7:9E:9D:F9:00:B0:A4:E7:07:3D:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38844f44-3770-3afd-a5ee-a09e4a08a65b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:1f:f9:21:10:66:d2:ce:83:32:4f:10:87:ae:bf:a7:d2:38:
d0:73:07:4f:81:05:08:b5:d0:05:80:10:16:ca:95:a7:93:ac:
90:f5:52:31:2e:08:e2:b5:7b:8d:ec:1d:d6:ae:f5:bb:ab:8a:
2a:f5:44:6e:44:13:f4:71:d1:a5:9f:7a:c4:73:5f:e9:87:3a:
a3:af:6e:d9:93:26:f2:aa:ae:01:c2:b9:52:e0:97:be:81:cf:
65:71:cd:89:90:ba:ad:65:03:f3:6a:22:01:76:d0:17:3e:b6:
c4:9e:37:31:a8:a4:0c:e0:72:d5:db:83:7c:7e:a0:e1:3f:83:
63:c5:6e:9a:69:59:c5:77:ed:90:89:d9:e3:43:5f:e8:de:f7:
5d:87:af:4d:e9:ec:cc:2c:7a:2c:55:b7:69:04:e7:33:ff:a2:
43:c0:2b:7d:f8:6d:c8:fe:2b:cd:5e:38:45:53:be:2f:c8:49:
b5:18:68:62:59:47:a1:bd:ce:56:43:99:08:3c:2e:8c:0b:d8:
91:02:5c:ff:a0:b1:9e:ba:1e:f7:fb:b2:23:0b:ab:4f:28:fd:
92:d9:4e:2b:b7:43:0e:6c:ed:38:07:20:bd:96:dd:e3:54:66:
eb:28:ea:56:23:53:0b:97:03:03:10:7d:9c:f5:00:ea:8c:49:
1d:fc:6a:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcJ4/8y8U+ucGn6Y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDgyOTE2MjEzN1oXDTI0MTEyNzE3MjEzN1owLzEtMCsGA1UEAxMk
OTkwMWM5M2MtZGZjNi00Y2M5LWIzOTAtMjM4ODA2MzRjNGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwHc6MW8NwTWzQFZH2kdHt4KrbNGRl27NCqW
Q6uzjI3orPYMxwxhygJKeMZCc2vgzZlo35Wyu6qW09mjhIJ1nwY14SIWdn+h1g4E
QVNWwUPETqJqFP/Wru3Mq21weGTYg37yeRg7WZwQb3kaYWj2zTirH/f5vZznvPZ/
mhsgCM7MfhMDa3OT/mkoWTeGpAy0fVjQTLEy0/yT1oJy5jhmT6b9HbT4xNmOgoj8
zAChTHW1apb7q5ZtB0Xks5hElqz7Hnas74u48WNKjZT933Tc5+2B+D8sA9BB6rwH
D7GhmACNQmGnIeNvQVnK9zjicV5a1cOddXb88LeAycER1uwvrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3bNdsdZTHamOeenfkAsKTnBz0TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzg4NDRmNDQtMzc3MC0z
YWZkLWE1ZWUtYTA5ZTRhMDhhNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsf+SEQZtLOgzJPEIeuv6fSONBzB0+BBQi10AWAEBbKlaeTrJD1UjEu
COK1e43sHdau9buriir1RG5EE/Rx0aWfesRzX+mHOqOvbtmTJvKqrgHCuVLgl76B
z2VxzYmQuq1lA/NqIgF20Bc+tsSeNzGopAzgctXbg3x+oOE/g2PFbpppWcV37ZCJ
2eNDX+je912Hr03p7MwseixVt2kE5zP/okPAK334bcj+K81eOEVTvi/ISbUYaGJZ
R6G9zlZDmQg8LowL2JECXP+gsZ66Hvf7siMLq08o/ZLZTiu3Qw5s7TgHIL2W3eNU
Zuso6lYjUwuXAwMQfZz1AOqMSR38ahU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:05:59 2025 by rpki-client