Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c217cf9-433a-3fa8-98d3-f5e5e1fb474b.roa
File: 6c217cf9-433a-3fa8-98d3-f5e5e1fb474b.roa (raw, json)
Hash identifier: L2buzxzHH9/FRS54Shrhr1lLmtduF71DBKmKxGp1z0E=
Subject key identifier: E7:CC:FB:B7:71:54:72:8D:32:E6:DF:06:47:06:E3:FC:69:C1:64:98
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E447071C261843B9E19BA180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c217cf9-433a-3fa8-98d3-f5e5e1fb474b.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 12 Aug 2023 08:10:48 +0000
asID: 205220
IP address blocks: 166.1.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:07:1c:26:18:43:b9:e1:9b:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 12 08:10:48 2023 GMT
Subject: CN=cd5df729-dff0-47d1-a679-d691c3a0b8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:a8:8d:3a:1d:20:55:86:87:cf:5b:48:5e:
ab:da:df:d7:c8:1c:ca:e9:c5:5d:59:45:6b:69:51:
d8:5d:5c:4f:58:e1:5d:dd:d8:99:3d:eb:14:c7:35:
2e:b1:27:bd:11:9c:09:98:a3:d4:a2:13:e2:60:17:
59:e3:dc:59:7f:ed:05:da:1d:f7:d2:46:2d:d2:06:
b3:f1:ab:d9:70:1b:85:69:63:3a:f5:5d:bf:f1:7b:
b8:10:70:7b:0f:a7:46:c2:b6:13:60:6e:88:66:e8:
1c:1e:cb:24:ed:d3:36:8f:4f:cc:46:ce:1c:17:72:
71:33:8e:d5:a8:90:2f:df:ca:f8:81:e1:61:85:07:
23:04:4e:dd:87:27:43:c5:d5:9c:cb:f5:35:c3:d9:
b3:ee:b6:15:4d:6f:c3:e6:6b:49:2f:d1:c9:70:e7:
54:98:1a:c8:31:ab:13:98:9a:a3:f4:8e:72:c9:59:
9b:3d:48:bb:59:14:fb:29:f6:40:aa:8e:a7:8e:84:
01:48:b6:0c:5d:23:49:57:e1:cf:04:13:b0:37:f4:
2c:44:39:b7:1b:5c:09:15:42:b5:58:71:6f:24:c6:
f7:a3:9e:fd:6f:cb:46:45:56:ca:91:01:a2:88:f9:
fd:cd:1d:8e:91:7a:07:8b:4e:cd:b7:b6:96:e9:df:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CC:FB:B7:71:54:72:8D:32:E6:DF:06:47:06:E3:FC:69:C1:64:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6c217cf9-433a-3fa8-98d3-f5e5e1fb474b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e4:c1:31:8e:7b:6e:15:ea:18:22:84:f6:9d:e4:0b:3d:30:
11:ca:41:b7:ca:1f:d0:fb:74:83:6b:e0:37:3d:19:73:3d:6d:
75:a8:8d:b2:1f:51:5d:f7:fc:80:b3:c3:9f:2a:81:f1:8b:03:
a6:94:c3:62:d4:fa:f5:54:54:75:40:17:a7:22:d0:43:10:38:
34:03:e3:39:78:6f:87:e2:6e:4c:9d:4b:1a:dd:45:c0:e8:9f:
3a:e1:9d:41:1d:05:c0:22:2d:c3:fa:4a:93:37:25:26:9e:53:
b3:63:9e:b3:7d:4a:68:ab:f9:ae:d2:27:6a:bb:e6:74:c4:10:
85:b8:8f:7a:47:2c:ee:a2:72:b7:ce:7a:0f:1b:e5:eb:c6:bc:
6e:2a:54:d6:2e:66:63:9a:cd:6e:e6:6e:ad:69:9d:80:86:ea:
77:6b:f6:3e:ba:3c:1b:a1:79:2c:ca:f3:ae:a7:d2:59:d3:74:
98:04:fe:9c:84:24:fb:05:6a:ad:f3:5e:f5:85:9b:44:62:21:
19:8e:22:c5:97:e1:a2:bb:d9:3b:0c:8d:98:53:43:5b:ac:02:
8a:79:b9:a2:4f:7f:87:52:4f:50:91:e1:43:ba:66:15:b8:a3:
44:c7:7b:92:c7:74:59:b4:fa:4f:bb:72:bf:b1:6d:39:b1:24:
bf:94:dc:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRwccJhhDueGboYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgxMjA4MTA0OFowLzEtMCsGA1UEAxMk
Y2Q1ZGY3MjktZGZmMC00N2QxLWE2NzktZDY5MWMzYTBiOGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBqojTodIFWGh89bSF6r2t/XyBzK6cVdWUVr
aVHYXVxPWOFd3diZPesUxzUusSe9EZwJmKPUohPiYBdZ49xZf+0F2h330kYt0gaz
8avZcBuFaWM69V2/8Xu4EHB7D6dGwrYTYG6IZugcHssk7dM2j0/MRs4cF3JxM47V
qJAv38r4geFhhQcjBE7dhydDxdWcy/U1w9mz7rYVTW/D5mtJL9HJcOdUmBrIMasT
mJqj9I5yyVmbPUi7WRT7KfZAqo6njoQBSLYMXSNJV+HPBBOwN/QsRDm3G1wJFUK1
WHFvJMb3o579b8tGRVbKkQGiiPn9zR2OkXoHi07Nt7aW6d+cjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfM+7dxVHKNMubfBkcG4/xpwWSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmMyMTdjZjktNDMzYS0z
ZmE4LTk4ZDMtZjVlNWUxZmI0NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpgFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHkwTGOe24V6hgihPad5As9MBHKQbfKH9D7dINr4Dc9GXM9bXWojbIf
UV33/ICzw58qgfGLA6aUw2LU+vVUVHVAF6ci0EMQODQD4zl4b4fibkydSxrdRcDo
nzrhnUEdBcAiLcP6SpM3JSaeU7NjnrN9Smir+a7SJ2q75nTEEIW4j3pHLO6icrfO
eg8b5evGvG4qVNYuZmOazW7mbq1pnYCG6ndr9j66PBuheSzK866n0lnTdJgE/pyE
JPsFaq3zXvWFm0RiIRmOIsWX4aK72TsMjZhTQ1usAop5uaJPf4dST1CR4UO6ZhW4
o0THe5LHdFm0+k+7cr+xbTmxJL+U3Go=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:21:07 2025 by rpki-client