Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88a8304d-b13b-3f36-b501-2b390ca536da.roa
File: 88a8304d-b13b-3f36-b501-2b390ca536da.roa (raw, json)
Hash identifier: 3ycSyUoeMIxYsIJ1TerH9iRDt14VRSmPB7IsbuweBiM=
Subject key identifier: 90:39:E2:89:15:FD:5B:5F:81:7F:AB:55:26:32:D7:FA:05:C8:3E:21
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842CA7A3ECD13322DFE84D59700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88a8304d-b13b-3f36-b501-2b390ca536da.roa
Signing time: Sun 06 Aug 2023 04:04:51 +0000
ROA not before: Sun 06 Aug 2023 04:04:51 +0000
ROA not after: Sat 04 Nov 2023 04:04:51 +0000
asID: 11798
IP address blocks: 166.1.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ca:7a:3e:cd:13:32:2d:fe:84:d5:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 6 04:04:51 2023 GMT
Not After : Nov 4 04:04:51 2023 GMT
Subject: CN=732338e6-b5a4-4041-b4e7-8be7060dca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:59:fc:99:39:52:7d:7a:7d:be:6c:4b:5c:
76:d3:da:d3:85:e7:b9:59:8e:12:b9:80:f8:67:8e:
a7:91:63:da:70:e0:de:f5:e3:28:e1:85:f0:90:c0:
b6:0b:ff:ae:b1:40:27:9c:cb:12:1f:64:4c:7f:9a:
f1:8d:71:63:32:f7:4e:3c:b2:bd:f6:97:d3:3c:dc:
08:43:93:43:bd:8c:17:fc:8a:23:b4:d8:37:63:a6:
61:98:6d:bb:04:67:5c:76:05:62:f2:41:64:9a:42:
89:e6:a8:fb:ae:a5:a7:91:86:24:c7:7f:7b:4c:08:
f5:97:06:2a:bb:fd:20:77:fa:89:0d:ce:9c:da:ae:
8d:ca:cc:80:32:c8:ba:26:b0:f9:c6:58:43:f4:96:
18:09:cb:24:21:e1:70:e4:32:db:9e:63:d7:8a:c4:
a2:5d:00:94:c8:74:b6:f4:d4:93:44:94:56:05:cf:
b0:a4:d1:a3:89:d7:99:c3:6c:47:93:17:fc:e9:72:
69:62:e1:37:e8:b3:8d:f7:fc:74:56:55:ad:ff:3e:
07:9a:76:ca:50:fe:ce:e9:53:46:e7:5f:26:e1:26:
b1:3f:d5:c2:e1:4a:30:cd:d2:89:0c:c7:c5:e1:70:
8d:e7:2a:60:4a:74:2b:88:22:c0:04:76:f9:6e:57:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:E2:89:15:FD:5B:5F:81:7F:AB:55:26:32:D7:FA:05:C8:3E:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/88a8304d-b13b-3f36-b501-2b390ca536da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:6a:df:ca:ba:af:69:0d:ba:01:4b:59:e9:5c:9e:87:21:af:
6f:7b:40:77:4c:92:1c:fb:5f:2c:3d:ca:cc:90:64:23:a5:24:
c1:a4:03:36:84:70:cc:f9:82:50:5e:1f:29:3c:ea:59:ae:38:
d3:ed:20:e3:20:56:dd:0a:1c:a2:c5:05:2c:78:f3:cf:66:92:
39:e7:42:ae:f0:fc:3f:55:ba:aa:c9:66:f4:89:da:d5:9b:2f:
0f:eb:45:f9:dd:4a:ed:e8:e6:73:28:98:70:83:0f:54:30:b9:
11:a4:bb:f9:c9:79:cc:79:e4:d2:6d:e5:d4:24:17:94:0e:6a:
84:de:d0:27:29:4c:07:a7:36:81:2b:f7:ba:ca:a9:73:55:b8:
09:83:6b:57:a4:59:1b:6a:f9:25:fb:32:9c:48:fe:76:4a:11:
90:b5:1a:8f:2a:06:bd:ad:1f:f9:5c:4e:96:f7:af:1a:d7:3b:
d1:8a:a6:35:4f:98:69:27:6f:1c:3e:1f:db:92:94:3c:f3:f9:
fd:90:bc:18:74:da:f4:ec:db:f3:e2:1b:8d:72:8a:92:82:d2:
70:14:e9:ed:90:cb:6e:b1:6a:75:ec:9a:e2:27:35:b3:3f:6f:
ee:95:9a:e7:60:34:79:bf:1a:7d:94:2b:ea:80:c5:c3:34:db:
91:9c:79:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELKej7NEzIt/oTVlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgwNjA0MDQ1MVoXDTIzMTEwNDA0MDQ1MVowLzEtMCsGA1UEAxMk
NzMyMzM4ZTYtYjVhNC00MDQxLWI0ZTctOGJlNzA2MGRjYTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTRZ/Jk5Un16fb5sS1x209rThee5WY4SuYD4
Z46nkWPacODe9eMo4YXwkMC2C/+usUAnnMsSH2RMf5rxjXFjMvdOPLK99pfTPNwI
Q5NDvYwX/IojtNg3Y6ZhmG27BGdcdgVi8kFkmkKJ5qj7rqWnkYYkx397TAj1lwYq
u/0gd/qJDc6c2q6NysyAMsi6JrD5xlhD9JYYCcskIeFw5DLbnmPXisSiXQCUyHS2
9NSTRJRWBc+wpNGjideZw2xHkxf86XJpYuE36LON9/x0VlWt/z4HmnbKUP7O6VNG
518m4SaxP9XC4UowzdKJDMfF4XCN5ypgSnQriCLABHb5blfYPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJA54okV/VtfgX+rVSYy1/oFyD4hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODhhODMwNGQtYjEzYi0z
ZjM2LWI1MDEtMmIzOTBjYTUzNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1q38q6r2kNugFLWelcnochr297QHdMkhz7Xyw9ysyQZCOlJMGkAzaE
cMz5glBeHyk86lmuONPtIOMgVt0KHKLFBSx4889mkjnnQq7w/D9VuqrJZvSJ2tWb
Lw/rRfndSu3o5nMomHCDD1QwuRGku/nJecx55NJt5dQkF5QOaoTe0CcpTAenNoEr
97rKqXNVuAmDa1ekWRtq+SX7MpxI/nZKEZC1Go8qBr2tH/lcTpb3rxrXO9GKpjVP
mGknbxw+H9uSlDzz+f2QvBh02vTs2/PiG41yipKC0nAU6e2Qy26xanXsmuInNbM/
b+6VmudgNHm/Gn2UK+qAxcM025GcecM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:56:20 2025 by rpki-client