Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb063345-2ff8-3e37-971f-0a3d24442ab0.roa
File: bb063345-2ff8-3e37-971f-0a3d24442ab0.roa (raw, json)
Hash identifier: xTRAga7ebVXZUe2Bee7euUQwFYsR7TTNBLxkZ3VTtO0=
Subject key identifier: 3F:C2:5A:F9:AB:98:4E:A8:E8:08:8C:60:16:62:AA:D7:35:D2:E5:4D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842727B6D2B63597714D3D82700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb063345-2ff8-3e37-971f-0a3d24442ab0.roa
Signing time: Wed 05 Jul 2023 15:36:06 +0000
ROA not before: Wed 05 Jul 2023 15:36:06 +0000
ROA not after: Tue 03 Oct 2023 15:36:06 +0000
asID: 11798
IP address blocks: 166.1.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:72:7b:6d:2b:63:59:77:14:d3:d8:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 5 15:36:06 2023 GMT
Not After : Oct 3 15:36:06 2023 GMT
Subject: CN=106b3acb-e968-4653-b5b0-1ff5c4a25b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:42:bd:d1:42:6c:59:9c:1d:a2:ca:e8:b5:
d6:9a:a6:86:18:85:73:ea:dc:e4:4c:7f:a1:3f:55:
be:ad:82:93:0d:b1:e1:85:df:5e:ac:f0:ce:7b:84:
79:b3:06:57:26:21:5d:70:fe:f7:27:00:8b:d6:58:
97:16:20:99:b7:74:dd:c3:6b:2a:b4:e6:24:45:6a:
d3:67:4c:b8:d3:4c:66:a7:3a:e4:39:22:6f:49:d3:
25:e4:63:17:f7:a0:ca:f7:d6:2c:80:5a:16:b2:40:
25:e7:7d:5a:56:a0:d1:04:2a:69:df:10:1c:59:c9:
f0:d6:87:48:29:10:7e:45:d0:14:44:d4:f5:26:e5:
ff:22:f2:7f:a7:9f:08:9b:fa:a5:b4:82:02:69:a1:
e0:7b:a8:dd:c1:b2:d0:95:c5:b8:96:0d:c9:86:50:
e0:f7:13:20:0b:d4:37:e5:53:ae:c3:7a:d3:ba:b3:
a9:b0:29:c1:52:96:13:8b:84:13:19:96:05:45:90:
bd:6f:16:c1:1a:53:a8:b4:7d:37:0c:46:7c:95:d9:
d1:28:d8:cc:be:70:fb:93:b0:4e:f4:3d:b4:4a:4d:
56:04:bd:2f:64:ef:6b:11:e1:14:28:e8:34:c4:28:
19:61:b5:a9:71:13:8d:8d:5b:81:e7:28:55:cc:f2:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:5A:F9:AB:98:4E:A8:E8:08:8C:60:16:62:AA:D7:35:D2:E5:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb063345-2ff8-3e37-971f-0a3d24442ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:17:41:03:e9:7f:55:0c:47:0e:8a:ec:9f:77:1e:46:cf:78:
e6:6e:40:c8:d6:ca:f4:7e:f9:6a:dd:7e:86:86:8d:7d:66:63:
5c:85:36:9b:6a:63:33:18:53:44:b1:fb:10:d4:96:d1:19:21:
a2:0b:00:53:2a:5b:ba:89:bb:c1:a2:11:52:8f:eb:3c:37:2f:
42:20:81:4f:af:3c:23:54:35:4a:03:f1:dc:53:2f:e6:2c:b0:
5f:bd:8b:db:98:e2:cb:72:7d:05:42:64:d9:c5:9a:0b:3a:13:
d1:09:93:6a:a7:22:23:cd:e8:2b:0b:6c:ec:43:b7:8f:bc:92:
a0:0e:f8:f0:93:07:30:ce:aa:0d:8a:f7:e6:d9:f0:8a:e1:28:
2f:b2:5f:86:9b:ad:45:ea:77:b0:dc:40:16:d5:ac:47:38:b0:
ae:07:a9:d3:61:57:03:54:3f:49:39:45:9e:5b:be:4a:e6:12:
27:ae:b3:74:83:9a:eb:bb:58:08:0c:9d:97:2a:43:46:0d:e7:
93:a8:a9:ed:31:63:21:c1:75:72:ad:63:7d:7b:cf:9a:6b:08:
e4:fa:50:aa:a7:9c:74:b4:9e:00:e4:99:03:c7:b4:11:3a:dd:
5c:af:aa:36:74:26:9b:bb:fb:af:ba:4d:44:90:d9:48:bf:44:
b5:c7:88:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJye20rY1l3FNPYJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcwNTE1MzYwNloXDTIzMTAwMzE1MzYwNlowLzEtMCsGA1UEAxMk
MTA2YjNhY2ItZTk2OC00NjUzLWI1YjAtMWZmNWM0YTI1YjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh1CvdFCbFmcHaLK6LXWmqaGGIVz6tzkTH+h
P1W+rYKTDbHhhd9erPDOe4R5swZXJiFdcP73JwCL1liXFiCZt3Tdw2sqtOYkRWrT
Z0y400xmpzrkOSJvSdMl5GMX96DK99YsgFoWskAl531aVqDRBCpp3xAcWcnw1odI
KRB+RdAURNT1JuX/IvJ/p58Im/qltIICaaHge6jdwbLQlcW4lg3JhlDg9xMgC9Q3
5VOuw3rTurOpsCnBUpYTi4QTGZYFRZC9bxbBGlOotH03DEZ8ldnRKNjMvnD7k7BO
9D20Sk1WBL0vZO9rEeEUKOg0xCgZYbWpcRONjVuB5yhVzPJlawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/CWvmrmE6o6AiMYBZiqtc10uVNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmIwNjMzNDUtMmZmOC0z
ZTM3LTk3MWYtMGEzZDI0NDQyYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoXQQPpf1UMRw6K7J93HkbPeOZuQMjWyvR++WrdfoaGjX1mY1yFNptq
YzMYU0Sx+xDUltEZIaILAFMqW7qJu8GiEVKP6zw3L0IggU+vPCNUNUoD8dxTL+Ys
sF+9i9uY4styfQVCZNnFmgs6E9EJk2qnIiPN6CsLbOxDt4+8kqAO+PCTBzDOqg2K
9+bZ8IrhKC+yX4abrUXqd7DcQBbVrEc4sK4HqdNhVwNUP0k5RZ5bvkrmEieus3SD
muu7WAgMnZcqQ0YN55Ooqe0xYyHBdXKtY317z5prCOT6UKqnnHS0ngDkmQPHtBE6
3VyvqjZ0Jpu7+6+6TUSQ2Ui/RLXHiBI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:25 2025 by rpki-client