Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d9c2548-6f60-3789-887c-61de2290e90a.roa
File: 4d9c2548-6f60-3789-887c-61de2290e90a.roa (raw, json)
Hash identifier: tP4UxZIIfDk4IgrzSbHFvlZJENKMBrQME+ayvX5dC4M=
Subject key identifier: DA:D7:C7:13:70:10:C6:0A:60:36:FD:5F:70:4E:5A:CC:D5:1A:BB:15
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848AAE5FB8D07C4A0F1E01C7EA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d9c2548-6f60-3789-887c-61de2290e90a.roa
Signing time: Sun 26 Jan 2025 01:17:42 +0000
ROA not before: Sun 26 Jan 2025 01:17:42 +0000
ROA not after: Sat 26 Apr 2025 00:17:42 +0000
asID: 834
IP address blocks: 166.0.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:e5:fb:8d:07:c4:a0:f1:e0:1c:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 26 01:17:42 2025 GMT
Not After : Apr 26 00:17:42 2025 GMT
Subject: CN=aa7e2ec6-cfa8-423b-9ae6-aafdd6b6e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:f8:ea:f5:39:65:3a:3c:3b:7d:19:41:1c:
ad:a0:fd:74:f1:57:af:58:61:d7:7c:9d:e4:a5:94:
61:d0:41:c6:36:2a:9f:b9:a6:c7:b5:42:1a:39:00:
bd:e3:61:23:7a:f7:ee:fd:38:44:d2:7f:1e:6a:01:
5c:e5:01:60:68:18:92:d9:88:04:e7:79:71:e0:d8:
4d:0d:f2:52:d6:3c:96:fa:83:85:93:90:29:d7:ec:
cc:43:dd:bb:d5:41:64:99:1f:08:a5:21:e5:04:bc:
26:8e:b6:2c:05:97:18:64:68:9f:cd:b1:cf:4a:68:
28:b8:57:9d:b4:7f:94:82:cf:d5:05:6b:94:91:e1:
2f:57:45:aa:09:6f:d3:07:35:19:45:06:46:89:5d:
fe:ec:d2:37:f3:a1:51:65:bc:12:45:3c:da:0a:5e:
61:c3:9f:2f:93:f0:12:4d:d6:0a:1b:4c:cc:d1:d8:
17:3f:d5:76:48:b6:52:6c:55:5a:9f:3c:c9:cc:5c:
46:4f:75:ca:04:63:26:5e:f7:12:87:33:67:47:f2:
aa:71:f2:c8:0c:c8:87:51:e5:67:65:3f:47:88:6c:
5c:f5:52:b1:b0:6c:7d:6e:3a:c5:6c:bb:b6:e5:0f:
9a:14:e3:15:8b:47:21:39:70:14:29:7b:a8:24:68:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:C7:13:70:10:C6:0A:60:36:FD:5F:70:4E:5A:CC:D5:1A:BB:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d9c2548-6f60-3789-887c-61de2290e90a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:66:67:f1:49:a7:4b:24:2b:7f:dc:7a:0a:01:78:48:a9:07:
dd:67:e5:36:48:7d:66:bc:2c:76:f7:ee:00:93:29:f5:37:90:
4d:48:e5:ce:2f:af:ac:e2:f6:2d:00:dc:e7:b7:d9:ed:a5:9e:
65:ef:8c:18:51:a0:2c:62:1c:c9:57:d9:4a:ca:09:68:ba:bd:
6b:0b:9c:1c:57:26:ab:43:a3:9e:77:cc:a6:a5:9a:3e:14:8a:
9b:59:6a:85:b2:05:87:51:e7:5c:b5:f0:60:fd:c9:41:6f:03:
8a:52:55:93:0e:a8:0c:f5:5c:49:98:d0:ab:ea:69:ba:61:f3:
02:25:01:d0:f9:8e:20:92:d8:38:79:82:20:7c:e7:a1:42:ef:
aa:84:6f:7c:83:cc:92:06:8e:ec:7a:57:f0:1d:26:aa:6e:f8:
d8:74:24:36:ff:27:5b:0a:34:50:ba:f9:08:61:36:9c:7a:15:
98:73:76:e1:4d:8b:03:c7:ae:45:d5:19:ee:ec:3c:97:fc:cc:
8e:33:a7:2d:78:e9:66:34:74:12:8a:cd:f5:9a:a2:85:a7:76:
ab:82:5b:75:c3:d9:a0:5a:2c:9f:df:d6:49:fa:51:aa:cb:f9:
23:a3:81:b2:19:51:31:4d:59:ec:cc:e3:e8:f6:9a:f4:01:35:
12:ae:13:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq5fuNB8Sg8eAcfqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyNjAxMTc0MloXDTI1MDQyNjAwMTc0MlowLzEtMCsGA1UEAxMk
YWE3ZTJlYzYtY2ZhOC00MjNiLTlhZTYtYWFmZGQ2YjZlM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30X46vU5ZTo8O30ZQRytoP108VevWGHXfJ3k
pZRh0EHGNiqfuabHtUIaOQC942Ejevfu/ThE0n8eagFc5QFgaBiS2YgE53lx4NhN
DfJS1jyW+oOFk5Ap1+zMQ9271UFkmR8IpSHlBLwmjrYsBZcYZGifzbHPSmgouFed
tH+Ugs/VBWuUkeEvV0WqCW/TBzUZRQZGiV3+7NI386FRZbwSRTzaCl5hw58vk/AS
TdYKG0zM0dgXP9V2SLZSbFVanzzJzFxGT3XKBGMmXvcShzNnR/KqcfLIDMiHUeVn
ZT9HiGxc9VKxsGx9bjrFbLu25Q+aFOMVi0chOXAUKXuoJGi/0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrXxxNwEMYKYDb9X3BOWszVGrsVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGQ5YzI1NDgtNmY2MC0z
Nzg5LTg4N2MtNjFkZTIyOTBlOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKxmZ/FJp0skK3/cegoBeEipB91n5TZIfWa8LHb37gCTKfU3kE1I5c4v
r6zi9i0A3Oe32e2lnmXvjBhRoCxiHMlX2UrKCWi6vWsLnBxXJqtDo553zKalmj4U
iptZaoWyBYdR51y18GD9yUFvA4pSVZMOqAz1XEmY0Kvqabph8wIlAdD5jiCS2Dh5
giB856FC76qEb3yDzJIGjux6V/AdJqpu+Nh0JDb/J1sKNFC6+QhhNpx6FZhzduFN
iwPHrkXVGe7sPJf8zI4zpy146WY0dBKKzfWaooWndquCW3XD2aBaLJ/f1kn6UarL
+SOjgbIZUTFNWezM4+j2mvQBNRKuE8k=
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:53:15 2025 by rpki-client