Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96ae9c6a-c0ee-3d68-97e3-bc376f8b6ae4.roa
File: 96ae9c6a-c0ee-3d68-97e3-bc376f8b6ae4.roa (raw, json)
Hash identifier: ndWd6KnJlyqw3sfkm4A46dUyOE4q+SF/Pk/NnMuxZhQ=
Subject key identifier: 0A:4E:03:BA:21:9F:57:B3:4A:26:3C:BA:EB:2D:12:6A:36:3D:E4:B4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A1933C984CE0A3F2CFEB4A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96ae9c6a-c0ee-3d68-97e3-bc376f8b6ae4.roa
Signing time: Wed 22 Jan 2025 17:08:42 +0000
ROA not before: Wed 22 Jan 2025 17:08:42 +0000
ROA not after: Tue 22 Apr 2025 16:08:42 +0000
asID: 834
IP address blocks: 166.0.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:93:3c:98:4c:e0:a3:f2:cf:eb:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 22 17:08:42 2025 GMT
Not After : Apr 22 16:08:42 2025 GMT
Subject: CN=35211ea6-028a-448a-9c80-37e0296675b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:89:4f:8a:22:ae:c3:89:74:ef:01:2f:b4:
9c:08:3b:86:09:63:22:b9:e8:25:13:9e:6a:01:64:
d0:68:1c:55:c5:21:d2:35:9d:50:f9:c3:9d:4a:76:
c8:72:3f:d3:95:fe:b4:81:89:7a:6b:df:37:d4:82:
6e:b3:04:62:7e:b1:87:41:e7:1f:1f:6a:d2:39:38:
a6:c8:cc:ab:b6:50:8a:03:0a:f8:26:33:f3:5f:a4:
1d:1e:ce:87:3e:56:78:12:8a:95:0e:70:ac:0f:55:
76:37:d8:b2:7f:4d:ba:97:95:38:1e:a1:33:2b:64:
25:3b:a7:36:63:2c:0f:d1:e5:8b:19:8b:b1:68:80:
d4:79:0e:18:a2:8e:56:93:71:2e:0e:b5:81:3c:c8:
67:05:ae:67:95:e1:d6:0f:7d:27:86:84:d5:8a:ad:
93:7d:c0:dc:e4:5f:ed:52:36:06:b2:99:b3:63:f6:
2d:52:b1:29:ab:ec:da:bc:d2:bf:37:b3:68:77:7c:
3a:7c:5d:f7:3e:6c:47:de:f5:19:bd:a8:2f:69:a2:
ff:96:1b:12:71:cd:71:ec:6b:88:5f:73:75:c0:a7:
c6:0b:41:eb:03:51:47:86:61:e8:1b:54:11:64:28:
b9:1a:e8:7e:71:e7:42:0f:e6:a0:d8:ad:46:7b:7d:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:03:BA:21:9F:57:B3:4A:26:3C:BA:EB:2D:12:6A:36:3D:E4:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96ae9c6a-c0ee-3d68-97e3-bc376f8b6ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d5:c3:68:95:43:d3:d0:84:f1:0a:08:85:ed:e8:5a:81:94:
94:d6:65:eb:1e:7c:d1:97:df:c9:74:f3:60:20:a0:8b:70:fa:
61:7b:fd:e4:f8:f6:0d:ec:15:62:54:9f:49:2d:13:3d:46:b6:
d1:56:e5:1f:a0:82:4d:cd:f0:a8:67:df:04:fc:7e:6a:20:6b:
e7:72:45:d5:b5:a8:55:da:1b:71:4e:ca:c1:09:33:76:d6:ae:
17:8e:2e:0f:3a:30:61:45:dd:4a:4b:88:10:be:d9:d1:27:df:
9a:fc:96:cc:b1:6c:fe:ce:9d:6a:6b:b0:b4:ea:8d:be:c6:3f:
4b:f6:9d:ab:43:45:f9:fe:b8:18:86:f6:89:7c:88:b2:f2:b9:
6e:08:92:93:08:b2:41:4b:cd:fe:fb:f5:95:49:16:b8:1e:55:
8a:e5:25:da:2b:ab:37:7b:66:c6:59:6e:3b:14:a5:37:85:bc:
64:50:27:81:3d:b5:50:be:c6:99:52:37:e7:95:1f:e7:1e:c0:
2f:c1:80:b2:52:e5:15:e5:76:a5:50:5f:d0:35:70:fd:71:91:
ef:2d:27:02:6a:6f:c3:d5:2d:03:30:e8:93:b2:ea:d3:8a:95:
51:4d:53:6d:ef:2a:fa:70:c0:2d:16:43:13:d0:f7:4f:31:5d:
d6:2b:df:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihkzyYTOCj8s/rSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyMjE3MDg0MloXDTI1MDQyMjE2MDg0MlowLzEtMCsGA1UEAxMk
MzUyMTFlYTYtMDI4YS00NDhhLTljODAtMzdlMDI5NjY3NWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGiJT4oirsOJdO8BL7ScCDuGCWMiueglE55q
AWTQaBxVxSHSNZ1Q+cOdSnbIcj/Tlf60gYl6a9831IJuswRifrGHQecfH2rSOTim
yMyrtlCKAwr4JjPzX6QdHs6HPlZ4EoqVDnCsD1V2N9iyf026l5U4HqEzK2QlO6c2
YywP0eWLGYuxaIDUeQ4Yoo5Wk3EuDrWBPMhnBa5nleHWD30nhoTViq2TfcDc5F/t
UjYGspmzY/YtUrEpq+zavNK/N7Nod3w6fF33PmxH3vUZvagvaaL/lhsScc1x7GuI
X3N1wKfGC0HrA1FHhmHoG1QRZCi5Guh+cedCD+ag2K1Ge33o2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApOA7ohn1ezSiY8uustEmo2PeS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTZhZTljNmEtYzBlZS0z
ZDY4LTk3ZTMtYmMzNzZmOGI2YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHVw2iVQ9PQhPEKCIXt6FqBlJTWZesefNGX38l082AgoItw+mF7/eT4
9g3sFWJUn0ktEz1GttFW5R+ggk3N8Khn3wT8fmoga+dyRdW1qFXaG3FOysEJM3bW
rheOLg86MGFF3UpLiBC+2dEn35r8lsyxbP7OnWprsLTqjb7GP0v2natDRfn+uBiG
9ol8iLLyuW4IkpMIskFLzf779ZVJFrgeVYrlJdorqzd7ZsZZbjsUpTeFvGRQJ4E9
tVC+xplSN+eVH+cewC/BgLJS5RXldqVQX9A1cP1xke8tJwJqb8PVLQMw6JOy6tOK
lVFNU23vKvpwwC0WQxPQ908xXdYr36c=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:24 2025 by rpki-client