Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f3970b6-04f2-3233-be5b-9e922489f3e8.roa
File: 3f3970b6-04f2-3233-be5b-9e922489f3e8.roa (raw, json)
Hash identifier: uZgCLeTogu55pv2upSA/BjwnA5DxOVt7w74gPjXZz/g=
Subject key identifier: 2A:49:0D:3A:CB:B6:E1:3E:C6:91:0F:FA:F8:D2:1B:54:3C:95:8A:FD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858422CF3EE3CF3F3D8ECE6FF5380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f3970b6-04f2-3233-be5b-9e922489f3e8.roa
Signing time: Sat 10 Jun 2023 17:52:19 +0000
ROA not before: Sat 10 Jun 2023 17:52:19 +0000
ROA not after: Fri 08 Sep 2023 17:52:19 +0000
asID: 11798
IP address blocks: 166.1.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:2c:f3:ee:3c:f3:f3:d8:ec:e6:ff:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 10 17:52:19 2023 GMT
Not After : Sep 8 17:52:19 2023 GMT
Subject: CN=80b6b994-99c7-4cc5-9eea-2a70f5c16c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:78:64:f8:ad:5f:4c:63:7c:30:97:3e:a5:
96:c3:ce:b9:7c:56:d2:c9:96:fc:b2:8a:08:61:56:
83:6a:bd:f1:e3:91:68:12:1e:97:c4:d9:0f:b6:00:
1d:c2:08:9b:15:26:5d:c3:fb:ee:35:6c:1f:76:cc:
e2:b5:75:35:76:51:c2:3d:87:56:11:91:d1:57:2c:
87:3f:28:bc:68:df:0f:e2:2f:40:ec:87:d7:16:3c:
ac:f6:5c:db:ae:c5:ca:9e:05:c7:be:e7:24:b9:7c:
92:06:85:37:e7:c0:57:92:e7:3b:16:02:d8:7b:67:
be:e8:61:81:f5:32:09:69:e6:bf:93:7a:d2:b6:6a:
b5:c7:45:62:58:85:69:26:18:75:98:38:9d:02:1a:
d7:3f:bd:0a:da:f4:b6:6f:66:59:00:a7:3c:a6:3a:
46:86:a7:84:e4:2e:03:9e:11:53:16:5e:05:01:8d:
1d:5b:5a:77:a5:fc:d5:0f:7e:2b:46:d6:61:6f:55:
74:df:0f:cd:67:44:f7:9e:28:34:0d:bf:9c:d2:34:
a9:8c:ac:4a:b1:1b:28:05:3c:3e:67:9f:f5:55:3e:
d4:fb:96:fe:4f:63:6c:09:b3:d9:26:7a:6c:12:83:
16:2c:72:9a:70:f1:2e:c9:b6:f5:e4:92:7b:61:f6:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:0D:3A:CB:B6:E1:3E:C6:91:0F:FA:F8:D2:1B:54:3C:95:8A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f3970b6-04f2-3233-be5b-9e922489f3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:78:9f:f9:3e:d4:5a:bc:07:d4:58:30:45:e2:7a:6a:b6:79:
df:09:65:74:b4:5f:8c:d0:83:5a:5e:47:b1:82:26:63:13:a3:
8e:0c:e9:45:47:4a:ad:13:82:ae:3f:b5:8b:eb:c8:fa:e0:bc:
4a:be:35:03:ac:7c:e3:de:21:a2:ea:bf:eb:90:a8:03:7c:81:
58:40:fd:a5:31:ff:7a:1b:83:b6:98:61:df:14:24:52:36:30:
86:a5:2d:a2:21:21:5c:43:f1:b8:49:b2:e0:8b:f8:6b:53:bc:
7f:4e:02:d5:b3:ad:de:a7:c2:81:b2:d4:78:92:55:4e:fb:36:
46:d9:7e:fb:c5:e2:11:60:a5:59:dd:0f:3d:dc:52:fb:40:b4:
fe:4b:8d:f4:01:50:2e:24:f8:44:64:34:c0:92:cc:e0:4d:28:
3f:91:e3:88:ea:70:8c:9f:53:be:15:2d:f1:c9:bd:c1:dc:36:
62:91:f9:ea:16:86:71:b4:94:89:07:6e:c3:82:3b:ba:62:5b:
2c:fe:f5:d3:7b:67:25:71:f2:ca:6f:3a:19:4b:7e:3c:4e:10:
0b:be:c7:7b:72:d8:59:60:9e:b9:b5:92:a5:08:2d:ca:17:2c:
f3:a4:23:e2:28:55:1e:99:e2:e1:9a:1b:f1:1f:07:35:0a:e9:
fd:b1:74:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIs8+488/PY7Ob/U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxMDE3NTIxOVoXDTIzMDkwODE3NTIxOVowLzEtMCsGA1UEAxMk
ODBiNmI5OTQtOTljNy00Y2M1LTllZWEtMmE3MGY1YzE2YzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgZ4ZPitX0xjfDCXPqWWw865fFbSyZb8sooI
YVaDar3x45FoEh6XxNkPtgAdwgibFSZdw/vuNWwfdszitXU1dlHCPYdWEZHRVyyH
Pyi8aN8P4i9A7IfXFjys9lzbrsXKngXHvuckuXySBoU358BXkuc7FgLYe2e+6GGB
9TIJaea/k3rStmq1x0ViWIVpJhh1mDidAhrXP70K2vS2b2ZZAKc8pjpGhqeE5C4D
nhFTFl4FAY0dW1p3pfzVD34rRtZhb1V03w/NZ0T3nig0Db+c0jSpjKxKsRsoBTw+
Z5/1VT7U+5b+T2NsCbPZJnpsEoMWLHKacPEuybb15JJ7YfZYEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpJDTrLtuE+xpEP+vjSG1Q8lYr9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2YzOTcwYjYtMDRmMi0z
MjMzLWJlNWItOWU5MjI0ODlmM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN4n/k+1Fq8B9RYMEXiemq2ed8JZXS0X4zQg1peR7GCJmMTo44M6UVH
Sq0Tgq4/tYvryPrgvEq+NQOsfOPeIaLqv+uQqAN8gVhA/aUx/3obg7aYYd8UJFI2
MIalLaIhIVxD8bhJsuCL+GtTvH9OAtWzrd6nwoGy1HiSVU77NkbZfvvF4hFgpVnd
Dz3cUvtAtP5LjfQBUC4k+ERkNMCSzOBNKD+R44jqcIyfU74VLfHJvcHcNmKR+eoW
hnG0lIkHbsOCO7piWyz+9dN7ZyVx8spvOhlLfjxOEAu+x3ty2Flgnrm1kqUILcoX
LPOkI+IoVR6Z4uGaG/EfBzUK6f2xdJE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:32 2025 by rpki-client