Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7368d789-f298-345d-9506-30b1088b530f.roa
File: 7368d789-f298-345d-9506-30b1088b530f.roa (raw, json)
Hash identifier: LFppXx7+CZrSmpCUgEoIVXepe0vZNy57xl8ThkqejPo=
Subject key identifier: D6:7B:A7:FA:6D:30:15:5D:E9:EA:22:F0:A0:3E:AB:8B:F8:2C:38:0A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858481938FDD4EFC34789DEA13680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7368d789-f298-345d-9506-30b1088b530f.roa
Signing time: Wed 04 Dec 2024 20:56:56 +0000
ROA not before: Wed 04 Dec 2024 20:56:56 +0000
ROA not after: Tue 04 Mar 2025 20:56:56 +0000
asID: 215224
IP address blocks: 166.1.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:38:fd:d4:ef:c3:47:89:de:a1:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 4 20:56:56 2024 GMT
Not After : Mar 4 20:56:56 2025 GMT
Subject: CN=db022ccf-67dc-4cb5-b6c4-8490c38f1e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:b6:3a:18:a6:e0:61:48:3e:be:c2:55:98:
e5:88:31:45:17:1a:31:88:1c:58:72:a1:60:c1:7f:
1f:06:30:f8:fd:98:73:83:79:b9:43:6f:f6:f6:d1:
d3:19:d3:8a:e0:1e:9c:50:25:49:d8:e9:15:a1:28:
9b:a6:21:04:da:01:82:36:e4:ef:45:e2:2b:91:bb:
4b:76:64:41:22:7c:5f:b8:6c:91:00:4d:c5:7b:a7:
1c:27:86:04:6d:59:67:0b:26:20:d1:11:8d:1a:9b:
02:08:ce:b0:5b:24:2c:0e:80:aa:63:62:67:c6:6f:
d4:80:51:ab:80:35:d1:f4:75:fe:d2:ec:14:0f:d1:
ed:f4:dd:35:3e:49:1d:65:66:02:ba:90:5f:82:b0:
2c:23:ec:b9:60:21:13:d4:60:61:a3:ab:ff:8a:26:
3c:ac:67:15:e9:9a:36:31:72:5a:b6:d3:55:69:7d:
a7:91:fd:f6:7a:7f:7f:23:6c:f9:3f:35:e3:23:36:
5a:5d:24:56:03:8d:5d:2f:8b:8f:d6:d8:b4:10:f7:
b3:11:97:b7:f3:c5:73:64:a9:7f:d5:cc:4b:75:af:
29:2b:75:b5:71:0e:83:f8:82:7c:f0:9a:ae:45:f8:
ca:33:47:b7:c8:33:9c:81:21:4c:2c:22:ae:25:97:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:A7:FA:6D:30:15:5D:E9:EA:22:F0:A0:3E:AB:8B:F8:2C:38:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7368d789-f298-345d-9506-30b1088b530f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:4d:16:2d:06:2e:67:fe:75:27:66:d6:48:3b:c8:b0:d4:b4:
f2:05:0c:6e:12:8f:dd:2b:00:ae:73:b8:41:38:33:94:8d:58:
c9:0a:6e:75:49:87:11:f5:8c:91:47:3f:9a:57:86:c4:a8:e5:
0d:9d:9c:99:2d:37:aa:88:e7:8a:59:40:a8:83:c2:d1:a9:93:
0a:65:27:3f:dc:cd:8b:1d:cf:08:7a:5b:6b:43:f0:9c:a6:7e:
9c:8e:53:74:60:a9:9c:f9:01:13:74:43:7f:24:f8:6d:f9:fe:
cb:dc:af:7e:9c:86:50:24:89:24:be:1b:02:01:b5:2a:f7:5f:
fb:83:b2:6f:52:3f:35:81:a5:67:f0:aa:62:97:4f:c2:96:1a:
97:db:87:8b:38:f8:f9:b6:cb:2d:d3:8e:75:70:62:00:9c:7b:
9e:0b:bc:15:b3:78:3b:61:49:86:c8:89:d2:ba:20:d6:14:b3:
bc:41:26:46:e8:86:40:64:91:b2:6a:e8:25:3a:12:9f:0b:8b:
4d:ac:4b:bc:91:af:43:5a:e9:be:01:a7:5d:6c:1b:e0:1a:3c:
80:6f:15:58:84:ab:63:86:09:96:f1:a8:ba:c0:60:e1:cd:6a:
af:d9:da:87:a0:ad:39:ae:8f:82:d9:da:c4:77:ac:f4:7f:ee:
2c:87:9b:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZOP3U78NHid6hNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTIwNDIwNTY1NloXDTI1MDMwNDIwNTY1NlowLzEtMCsGA1UEAxMk
ZGIwMjJjY2YtNjdkYy00Y2I1LWI2YzQtODQ5MGMzOGYxZTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7u2Ohim4GFIPr7CVZjliDFFFxoxiBxYcqFg
wX8fBjD4/Zhzg3m5Q2/29tHTGdOK4B6cUCVJ2OkVoSibpiEE2gGCNuTvReIrkbtL
dmRBInxfuGyRAE3Fe6ccJ4YEbVlnCyYg0RGNGpsCCM6wWyQsDoCqY2Jnxm/UgFGr
gDXR9HX+0uwUD9Ht9N01PkkdZWYCupBfgrAsI+y5YCET1GBho6v/iiY8rGcV6Zo2
MXJattNVaX2nkf32en9/I2z5PzXjIzZaXSRWA41dL4uP1ti0EPezEZe388VzZKl/
1cxLda8pK3W1cQ6D+IJ88JquRfjKM0e3yDOcgSFMLCKuJZeT/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZ7p/ptMBVd6eoi8KA+q4v4LDgKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzM2OGQ3ODktZjI5OC0z
NDVkLTk1MDYtMzBiMTA4OGI1MzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxNFi0GLmf+dSdm1kg7yLDUtPIFDG4Sj90rAK5zuEE4M5SNWMkKbnVJ
hxH1jJFHP5pXhsSo5Q2dnJktN6qI54pZQKiDwtGpkwplJz/czYsdzwh6W2tD8Jym
fpyOU3RgqZz5ARN0Q38k+G35/svcr36chlAkiSS+GwIBtSr3X/uDsm9SPzWBpWfw
qmKXT8KWGpfbh4s4+Pm2yy3TjnVwYgCce54LvBWzeDthSYbIidK6INYUs7xBJkbo
hkBkkbJq6CU6Ep8Li02sS7yRr0Na6b4Bp11sG+AaPIBvFViEq2OGCZbxqLrAYOHN
aq/Z2oegrTmuj4LZ2sR3rPR/7iyHm1g=
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:02:58 2025 by rpki-client