Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7456124e-8db8-3b1a-befa-0a5f50d43f1d.roa
File: 7456124e-8db8-3b1a-befa-0a5f50d43f1d.roa (raw, json)
Hash identifier: EidHoCS8MOpRrsznFEpII0PL8dbd+rLJLSoPh96puAw=
Subject key identifier: 1B:BE:1D:F0:C8:6B:ED:4F:3E:AA:C3:4A:FB:5A:70:F1:1C:AA:BC:F8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584052D2ECA6C15E116C921E3400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7456124e-8db8-3b1a-befa-0a5f50d43f1d.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Wed 26 Mar 2025 04:00:00 +0000
asID: 63023
IP address blocks: 166.0.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:52:d2:ec:a6:c1:5e:11:6c:92:1e:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Mar 26 04:00:00 2025 GMT
Subject: CN=1d244c05-8bcf-495f-ae2b-99225d6a0841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:69:ad:d3:c6:e0:10:57:c7:d3:40:11:a0:
ff:31:a6:f9:80:19:df:46:23:d5:09:95:a4:16:8b:
bc:a6:50:24:c5:69:93:eb:48:02:68:97:2f:46:6b:
3b:c2:64:d5:2a:3f:eb:89:ff:86:e2:ec:bf:5d:c7:
46:81:f5:41:7b:3c:93:cc:1b:b1:09:51:33:0c:dc:
53:c9:32:27:b7:68:06:5f:9b:32:3c:9a:91:83:c4:
36:90:73:ab:bf:64:12:34:0a:ce:86:42:5b:13:19:
f3:e9:a5:55:74:aa:70:b9:46:99:93:85:0e:25:82:
ba:57:e7:e9:06:32:05:15:ff:40:8f:a2:d5:13:68:
ff:6c:e0:cc:3e:93:41:5f:f8:1a:1b:8d:d7:1b:d2:
85:7c:50:9c:5d:f6:c1:9d:56:f7:64:16:c2:71:46:
ae:52:d6:e5:f9:25:ec:ba:c3:7f:4c:40:e7:d4:ce:
21:08:71:2a:4f:04:dd:47:6f:ea:22:29:97:f1:62:
58:10:32:81:ca:f3:86:00:05:d6:ee:e8:bc:88:1c:
c1:e1:0f:f6:d9:3e:22:ae:da:8a:ad:90:40:58:66:
a1:4b:d6:8c:11:19:3b:41:7b:fc:b3:5b:82:54:9b:
a3:17:bf:28:85:79:57:08:4d:23:0b:75:33:32:be:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:1D:F0:C8:6B:ED:4F:3E:AA:C3:4A:FB:5A:70:F1:1C:AA:BC:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7456124e-8db8-3b1a-befa-0a5f50d43f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:b8:4b:61:17:f5:e1:14:48:58:5b:c5:91:94:f9:27:45:a7:
0c:07:02:f6:66:34:4c:30:ba:8c:d6:fb:96:53:6b:f6:9c:51:
70:c8:1a:85:0c:b0:0d:f2:e6:5c:91:6b:8b:3f:75:21:7b:66:
f0:d8:2a:5e:24:71:93:fd:21:15:7e:ae:2d:5c:03:81:26:78:
ec:ee:28:42:87:05:4e:01:75:af:ea:06:79:35:bb:d6:ef:0b:
5d:e1:84:e6:fd:36:ad:5b:5e:68:77:5c:2d:e8:15:b8:ae:2c:
4c:cf:99:f5:ef:5a:3a:ee:90:76:1b:a6:bd:cc:e2:d6:60:2f:
e6:27:eb:05:27:a9:74:89:2b:6e:47:d0:cb:51:52:34:26:91:
e3:58:b8:74:ee:e3:be:8b:8d:46:46:d0:0a:60:f7:85:3e:7d:
8c:fd:5a:ca:ad:7d:7b:8d:e0:1a:35:d4:8d:b9:b0:c7:3c:8d:
00:0f:dc:5f:78:37:1d:84:0d:75:ca:4a:c9:9e:b7:1c:ff:29:
e9:63:f4:3a:02:04:dc:6b:5e:35:d0:6d:06:8b:00:3d:05:8d:
ba:84:c7:4f:a0:d8:74:4b:ae:79:d8:c6:c0:33:a9:6d:e6:8b:
4e:e1:51:1b:b5:3b:c8:02:46:5e:01:a4:68:90:a5:7d:83:a1:
92:79:51:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBS0uymwV4RbJIeNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWQyNDRjMDUtOGJjZi00OTVmLWFlMmItOTkyMjVkNmEwODQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslZprdPG4BBXx9NAEaD/Mab5gBnfRiPVCZWk
Fou8plAkxWmT60gCaJcvRms7wmTVKj/rif+G4uy/XcdGgfVBezyTzBuxCVEzDNxT
yTInt2gGX5syPJqRg8Q2kHOrv2QSNArOhkJbExnz6aVVdKpwuUaZk4UOJYK6V+fp
BjIFFf9Aj6LVE2j/bODMPpNBX/gaG43XG9KFfFCcXfbBnVb3ZBbCcUauUtbl+SXs
usN/TEDn1M4hCHEqTwTdR2/qIimX8WJYEDKByvOGAAXW7ui8iBzB4Q/22T4irtqK
rZBAWGahS9aMERk7QXv8s1uCVJujF78ohXlXCE0jC3UzMr5RHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBu+HfDIa+1PPqrDSvtacPEcqrz4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzQ1NjEyNGUtOGRiOC0z
YjFhLWJlZmEtMGE1ZjUwZDQzZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJW4S2EX9eEUSFhbxZGU+SdFpwwHAvZmNEwwuozW+5ZTa/acUXDIGoUM
sA3y5lyRa4s/dSF7ZvDYKl4kcZP9IRV+ri1cA4EmeOzuKEKHBU4Bda/qBnk1u9bv
C13hhOb9Nq1bXmh3XC3oFbiuLEzPmfXvWjrukHYbpr3M4tZgL+Yn6wUnqXSJK25H
0MtRUjQmkeNYuHTu476LjUZG0Apg94U+fYz9WsqtfXuN4Bo11I25sMc8jQAP3F94
Nx2EDXXKSsmetxz/Kelj9DoCBNxrXjXQbQaLAD0FjbqEx0+g2HRLrnnYxsAzqW3m
i07hURu1O8gCRl4BpGiQpX2DoZJ5UV4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:41 2025 by rpki-client