Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/604d3b35-9444-3e92-a556-641999cbfae6.roa
File: 604d3b35-9444-3e92-a556-641999cbfae6.roa (raw, json)
Hash identifier: H/Urp3+vo+2wLPTey2I6Cfe9qAKm0HKVhXIENGKCs3o=
Subject key identifier: 7A:CD:A5:0B:63:E3:6F:8B:C4:20:B7:B4:6F:78:D7:A5:FB:BE:8E:EA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446F64BD2726104C2E15B50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/604d3b35-9444-3e92-a556-641999cbfae6.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Fri 04 Aug 2023 11:01:53 +0000
asID: 60721
IP address blocks: 166.0.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:f6:4b:d2:72:61:04:c2:e1:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 4 11:01:53 2023 GMT
Subject: CN=e04db4fa-f059-4d4c-b37b-2acc7d9d647e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:fd:47:06:56:5c:0c:0c:84:4b:37:fc:da:
b4:db:8b:d0:13:bb:77:e9:6f:18:a1:70:2d:5d:2d:
5d:c6:9a:9d:3a:54:2b:dd:34:11:10:68:72:0f:c2:
24:59:df:0e:1c:fe:2e:00:7b:57:e0:c6:d2:8f:b4:
f0:7b:b7:98:43:f1:5b:ca:de:fb:3a:e4:1d:8b:18:
15:fd:ce:b0:69:71:86:b5:50:0d:ed:93:32:8f:ce:
3d:19:91:e3:89:75:83:6a:f1:b4:5b:ff:49:82:3b:
ad:c1:78:68:cb:45:60:ae:b9:e3:d2:b7:a4:c9:1b:
19:26:47:be:90:e1:5b:65:01:73:02:90:f9:36:66:
12:f7:99:aa:ed:ea:07:b3:c9:6f:4b:50:e8:7d:01:
fc:b0:d9:dc:37:ec:22:fc:12:51:09:ba:83:81:84:
54:88:f4:42:84:17:08:7c:36:cf:54:07:e1:7b:a3:
f3:25:26:37:27:39:57:72:6b:a5:fa:2c:01:3f:46:
ee:68:66:4f:4e:5c:58:62:41:d8:ba:43:3e:38:f3:
89:60:e6:c2:fd:53:74:01:25:08:5e:68:21:96:bc:
69:b9:cc:35:2f:3c:ce:c7:36:de:7e:33:6e:dd:7e:
56:36:d2:12:7e:0c:07:ea:79:4d:13:05:7c:81:41:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:A5:0B:63:E3:6F:8B:C4:20:B7:B4:6F:78:D7:A5:FB:BE:8E:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/604d3b35-9444-3e92-a556-641999cbfae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:89:f6:e0:1d:43:98:06:ca:3c:3a:74:6b:5f:0e:39:90:c0:
05:8c:b1:fa:d5:cc:48:dd:56:98:b2:e0:4c:6e:2c:d5:33:11:
50:21:25:bd:e6:31:1a:12:4b:17:0b:be:9b:94:50:b5:b6:a9:
eb:89:e1:13:72:7f:ef:c8:37:66:6b:c4:e0:07:9c:6e:5f:56:
f8:5c:36:7d:6a:06:60:be:0a:6a:6d:cf:2a:70:34:6a:fd:61:
4f:d0:9e:97:86:a4:cf:ab:ef:b5:dd:e9:3b:9a:16:42:4b:df:
20:c6:c0:be:24:3e:0d:43:3a:d7:96:dd:f7:a8:f7:ae:bd:70:
67:4c:b3:b3:b0:a3:2f:a2:34:e5:d9:09:1e:90:af:39:b6:0f:
d7:ae:25:71:bc:34:4b:37:15:d8:ca:23:f3:20:71:7b:8a:c4:
bd:80:f6:09:3c:0b:ee:42:ff:a1:bc:06:6e:9c:a2:ac:9a:ce:
1c:03:e3:e5:30:af:be:ad:3f:c1:e1:ff:49:bf:77:6c:51:48:
a3:63:3f:a0:ad:a2:a9:7a:95:c7:66:d2:b8:8a:90:ec:45:9e:
2e:54:1b:0b:43:ee:e2:92:01:0c:a5:0a:d4:ab:96:42:ad:19:
dd:c0:47:2a:8f:aa:86:39:9e:a7:47:03:7d:e3:8a:2e:c6:e0:
a9:3d:51:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRvZL0nJhBMLhW1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwNDExMDE1M1owLzEtMCsGA1UEAxMk
ZTA0ZGI0ZmEtZjA1OS00ZDRjLWIzN2ItMmFjYzdkOWQ2NDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDX9RwZWXAwMhEs3/Nq024vQE7t36W8YoXAt
XS1dxpqdOlQr3TQREGhyD8IkWd8OHP4uAHtX4MbSj7Twe7eYQ/Fbyt77OuQdixgV
/c6waXGGtVAN7ZMyj849GZHjiXWDavG0W/9JgjutwXhoy0Vgrrnj0rekyRsZJke+
kOFbZQFzApD5NmYS95mq7eoHs8lvS1DofQH8sNncN+wi/BJRCbqDgYRUiPRChBcI
fDbPVAfhe6PzJSY3JzlXcmul+iwBP0buaGZPTlxYYkHYukM+OPOJYObC/VN0ASUI
Xmghlrxpucw1LzzOxzbefjNu3X5WNtISfgwH6nlNEwV8gUHaRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrNpQtj42+LxCC3tG9416X7vo7qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjA0ZDNiMzUtOTQ0NC0z
ZTkyLWE1NTYtNjQxOTk5Y2JmYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWJ9uAdQ5gGyjw6dGtfDjmQwAWMsfrVzEjdVpiy4ExuLNUzEVAhJb3m
MRoSSxcLvpuUULW2qeuJ4RNyf+/IN2ZrxOAHnG5fVvhcNn1qBmC+CmptzypwNGr9
YU/QnpeGpM+r77Xd6TuaFkJL3yDGwL4kPg1DOteW3feo9669cGdMs7Owoy+iNOXZ
CR6Qrzm2D9euJXG8NEs3FdjKI/MgcXuKxL2A9gk8C+5C/6G8Bm6coqyazhwD4+Uw
r76tP8Hh/0m/d2xRSKNjP6Ctoql6lcdm0riKkOxFni5UGwtD7uKSAQylCtSrlkKt
Gd3ARyqPqoY5nqdHA33jii7G4Kk9Uf4=
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:05:21 2025 by rpki-client