Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/943363bd-1238-31ad-bc89-8cebbdd88eef.roa
File: 943363bd-1238-31ad-bc89-8cebbdd88eef.roa (raw, json)
Hash identifier: yZkuc551OG4zcFB0eske1JwgP4yYqcS8X+sDc7d+DLk=
Subject key identifier: 58:62:94:75:2E:A2:0A:85:68:0A:3B:33:CA:A0:EE:86:63:29:FB:5D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446E59EC7AC7A199235D340
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/943363bd-1238-31ad-bc89-8cebbdd88eef.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 08 Aug 2023 08:03:27 +0000
asID: 834
IP address blocks: 166.0.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:e5:9e:c7:ac:7a:19:92:35:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 8 08:03:27 2023 GMT
Subject: CN=34f5d8fc-38d5-4a43-9ae6-837519439ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:95:ba:7e:4f:d8:71:37:34:d1:30:c0:fa:
3c:d7:76:da:2b:fa:b5:17:ef:85:4a:31:8d:5b:3c:
8d:6e:17:67:fb:67:c2:5c:9d:88:01:f1:3d:c3:2f:
01:f4:76:4d:2d:af:79:79:50:43:62:17:ff:d6:af:
4f:86:d0:5c:35:cc:12:0b:f5:9a:af:dc:5c:09:3e:
f4:38:e8:54:35:ec:af:19:ef:f4:b5:01:cf:1d:f2:
10:a9:90:82:2d:79:58:9c:0d:cc:79:0a:ba:5a:cb:
d5:2b:e3:a5:8d:bf:2e:7a:10:91:fe:ff:11:ab:8f:
b3:df:0b:be:17:5d:53:c3:c6:e6:20:0c:c0:4d:cd:
c6:94:4a:fc:6b:e6:ef:51:b7:43:68:24:8a:b0:1d:
35:75:7f:4f:ab:f9:79:c9:d6:77:df:29:91:43:29:
58:2b:9c:dc:1f:af:a2:5c:a8:7d:de:79:d0:57:44:
09:11:fa:4a:22:c2:e6:a8:1c:81:62:59:85:21:31:
d8:0d:b9:85:37:57:67:01:11:ff:86:d6:c2:50:09:
06:dc:c2:11:0e:27:e9:73:cd:46:c2:74:6b:24:b8:
46:26:4f:e1:dd:c7:26:98:db:fd:44:ab:f5:0c:d0:
34:fa:df:99:b9:a1:b0:f0:f8:a3:1e:ab:98:85:9a:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:94:75:2E:A2:0A:85:68:0A:3B:33:CA:A0:EE:86:63:29:FB:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/943363bd-1238-31ad-bc89-8cebbdd88eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a9:d8:88:51:23:d5:0b:56:9e:5e:a7:ec:cc:87:8e:84:90:
1f:30:14:35:3a:4e:51:3f:d0:ff:12:17:3e:cf:5d:0c:92:47:
0d:75:9f:9c:68:7a:a6:6e:6b:e0:32:9c:28:0e:53:0d:5e:5f:
aa:3b:6f:fc:83:81:0d:a4:e1:cc:b9:f5:9f:8a:6e:bd:ae:e6:
4c:00:27:2b:11:81:dd:bc:46:38:ab:ef:89:fc:44:68:fe:db:
8d:d3:04:be:b1:d7:5f:0d:c1:c0:da:35:d3:ab:8a:99:a0:73:
e8:57:c2:8e:79:77:de:23:47:46:70:40:bb:6c:89:eb:23:f9:
66:09:45:c0:c8:c9:d2:3b:28:9e:05:fd:d9:7e:2d:12:b7:01:
20:5b:18:7c:4c:16:e9:6f:f3:4c:78:3b:a1:35:52:18:d1:33:
f7:41:f9:80:c5:3d:8f:9c:72:5a:4a:81:db:c8:75:b0:19:be:
f7:95:2c:2c:28:1f:8d:5d:d4:e3:3c:dc:4a:c6:7a:09:ba:05:
76:7f:7c:6a:5a:86:a7:75:09:93:90:1c:ea:94:9d:d5:29:46:
63:3d:0b:54:68:01:68:f9:ae:5b:70:b1:df:f3:ca:8c:0a:9f:
61:98:39:ed:3e:34:fb:37:cd:b8:18:68:a7:28:44:95:dd:ff:
4a:74:4f:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRuWex6x6GZI100AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwODA4MDMyN1owLzEtMCsGA1UEAxMk
MzRmNWQ4ZmMtMzhkNS00YTQzLTlhZTYtODM3NTE5NDM5YmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBKVun5P2HE3NNEwwPo813baK/q1F++FSjGN
WzyNbhdn+2fCXJ2IAfE9wy8B9HZNLa95eVBDYhf/1q9PhtBcNcwSC/War9xcCT70
OOhUNeyvGe/0tQHPHfIQqZCCLXlYnA3MeQq6WsvVK+Oljb8uehCR/v8Rq4+z3wu+
F11Tw8bmIAzATc3GlEr8a+bvUbdDaCSKsB01dX9Pq/l5ydZ33ymRQylYK5zcH6+i
XKh93nnQV0QJEfpKIsLmqByBYlmFITHYDbmFN1dnARH/htbCUAkG3MIRDifpc81G
wnRrJLhGJk/h3ccmmNv9RKv1DNA0+t+ZuaGw8PijHquYhZqK8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhilHUuogqFaAo7M8qg7oZjKftdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTQzMzYzYmQtMTIzOC0z
MWFkLWJjODktOGNlYmJkZDg4ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgATMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABip2IhRI9ULVp5ep+zMh46EkB8wFDU6TlE/0P8SFz7PXQySRw11n5xo
eqZua+AynCgOUw1eX6o7b/yDgQ2k4cy59Z+Kbr2u5kwAJysRgd28Rjir74n8RGj+
243TBL6x118NwcDaNdOripmgc+hXwo55d94jR0ZwQLtsiesj+WYJRcDIydI7KJ4F
/dl+LRK3ASBbGHxMFulv80x4O6E1UhjRM/dB+YDFPY+cclpKgdvIdbAZvveVLCwo
H41d1OM83ErGegm6BXZ/fGpahqd1CZOQHOqUndUpRmM9C1RoAWj5rltwsd/zyowK
n2GYOe0+NPs3zbgYaKcoRJXd/0p0T6g=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:40 2025 by rpki-client