Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48d593d6-5f59-3c77-99a0-06db996f68ba.roa
File: 48d593d6-5f59-3c77-99a0-06db996f68ba.roa (raw, json)
Hash identifier: ynpg4J0IGH2Ci+R35a7L4Z33qllCYc5FWOOz5ETamWI=
Subject key identifier: 6E:7F:32:FC:26:29:C8:CE:1C:6E:42:CB:4D:5E:60:11:94:D9:64:53
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584354FE181FFACAD9EBA3633E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48d593d6-5f59-3c77-99a0-06db996f68ba.roa
Signing time: Sun 24 Sep 2023 18:52:04 +0000
ROA not before: Sun 24 Sep 2023 18:52:04 +0000
ROA not after: Sat 23 Dec 2023 19:52:04 +0000
asID: 11798
IP address blocks: 166.1.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:54:fe:18:1f:fa:ca:d9:eb:a3:63:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 24 18:52:04 2023 GMT
Not After : Dec 23 19:52:04 2023 GMT
Subject: CN=455474e1-70dc-4dd2-ad16-19055c6f5c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:d6:63:02:05:20:7d:2f:bb:e5:8b:d9:5f:
27:f3:28:6f:c2:9c:e7:4e:f2:ca:a1:a0:37:a0:32:
e3:c3:ff:da:b5:b5:fb:cf:b5:51:e2:30:b2:e3:81:
9e:66:01:44:7f:78:5d:99:dd:ca:90:89:e4:97:49:
19:bc:5a:db:5b:ee:08:47:24:af:03:8c:1c:51:75:
96:67:5f:5f:fe:f8:4e:08:d1:69:05:11:83:6c:64:
df:b0:69:ea:8c:2a:d3:5f:d3:21:17:88:ce:aa:91:
80:2e:c6:d7:2e:f4:8f:60:9a:fe:ba:e0:89:81:85:
73:21:da:22:17:e6:e8:24:f4:b6:28:94:bc:09:b5:
85:f1:16:5e:6f:b9:26:24:54:19:e2:29:bf:36:0f:
1c:b0:49:3f:e4:c6:c9:64:8d:23:c1:a9:f4:bd:6f:
54:57:b5:31:7e:33:92:86:b3:77:3d:a9:3e:5e:aa:
6e:a7:74:ca:f9:a4:9b:73:9f:76:b4:9a:e3:4f:0c:
7d:ea:09:cf:c5:78:5c:8c:10:4b:3a:a9:d4:26:39:
f1:ec:fa:24:84:dd:b9:87:49:2b:e8:4e:d9:38:7c:
8d:b5:c0:ce:3f:3e:bd:6c:12:2e:a4:09:fc:b5:0e:
43:95:b8:0c:f1:9a:f9:c8:98:28:d3:53:3a:97:66:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7F:32:FC:26:29:C8:CE:1C:6E:42:CB:4D:5E:60:11:94:D9:64:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48d593d6-5f59-3c77-99a0-06db996f68ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:2c:0d:c5:85:85:07:40:fc:50:77:1c:8e:14:e4:24:8b:4a:
20:f9:35:c6:65:0a:5a:a3:d0:a4:c0:1e:e4:73:03:31:84:1b:
0e:e6:db:8d:a7:3f:42:25:a8:52:40:dc:92:ff:64:ca:53:5f:
8a:d4:a0:0f:0e:7e:4e:9b:55:c4:8a:72:b8:b4:9d:56:5d:a6:
e0:46:05:1d:c6:17:37:70:59:d8:61:bd:4e:40:76:8f:35:2a:
61:28:75:3e:bf:39:74:ce:2d:c4:71:a5:57:f7:4b:02:2c:4f:
10:d2:31:2c:91:3c:65:78:4a:61:e6:7f:42:7c:c7:cf:3b:32:
3f:32:2b:f1:29:81:eb:03:c3:6c:3d:12:66:4e:cb:80:1e:60:
d2:ac:06:e3:ba:85:b2:63:76:04:ba:51:98:81:63:b0:a4:17:
64:3a:1d:0e:f4:bc:13:1e:a5:2c:32:34:5d:1a:9a:e5:33:10:
a3:55:4b:28:e6:cb:ec:b4:7a:99:38:32:8c:3e:c7:f2:a6:a2:
d6:dc:dd:7f:37:e7:a3:9e:59:86:34:40:c4:c0:dd:cf:04:43:
2f:25:0a:7b:53:78:48:00:ae:98:ae:a3:41:15:a7:2c:9f:9c:
08:92:f7:75:36:7a:ec:e5:8d:c2:77:9e:a7:0d:57:fe:ab:dd:
ee:f7:af:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENU/hgf+srZ66NjPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDkyNDE4NTIwNFoXDTIzMTIyMzE5NTIwNFowLzEtMCsGA1UEAxMk
NDU1NDc0ZTEtNzBkYy00ZGQyLWFkMTYtMTkwNTVjNmY1YzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8vWYwIFIH0vu+WL2V8n8yhvwpznTvLKoaA3
oDLjw//atbX7z7VR4jCy44GeZgFEf3hdmd3KkInkl0kZvFrbW+4IRySvA4wcUXWW
Z19f/vhOCNFpBRGDbGTfsGnqjCrTX9MhF4jOqpGALsbXLvSPYJr+uuCJgYVzIdoi
F+boJPS2KJS8CbWF8RZeb7kmJFQZ4im/Ng8csEk/5MbJZI0jwan0vW9UV7UxfjOS
hrN3Pak+Xqpup3TK+aSbc592tJrjTwx96gnPxXhcjBBLOqnUJjnx7PokhN25h0kr
6E7ZOHyNtcDOPz69bBIupAn8tQ5DlbgM8Zr5yJgo01M6l2b0iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5/MvwmKcjOHG5Cy01eYBGU2WRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDhkNTkzZDYtNWY1OS0z
Yzc3LTk5YTAtMDZkYjk5NmY2OGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4sDcWFhQdA/FB3HI4U5CSLSiD5NcZlClqj0KTAHuRzAzGEGw7m242n
P0IlqFJA3JL/ZMpTX4rUoA8Ofk6bVcSKcri0nVZdpuBGBR3GFzdwWdhhvU5Ado81
KmEodT6/OXTOLcRxpVf3SwIsTxDSMSyRPGV4SmHmf0J8x887Mj8yK/EpgesDw2w9
EmZOy4AeYNKsBuO6hbJjdgS6UZiBY7CkF2Q6HQ70vBMepSwyNF0amuUzEKNVSyjm
y+y0epk4Mow+x/Kmotbc3X8356OeWYY0QMTA3c8EQy8lCntTeEgArpiuo0EVpyyf
nAiS93U2euzljcJ3nqcNV/6r3e73r8I=
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:41:21 2025 by rpki-client