Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c3bc411-5377-3a81-9c50-c8f991ca90a0.roa
File: 1c3bc411-5377-3a81-9c50-c8f991ca90a0.roa (raw, json)
Hash identifier: MlkRfynUJiqVELrTbjuzcMRXk52vKwqmWD8yo4+SQvw=
Subject key identifier: 9C:C5:01:32:CB:25:03:44:E8:62:9C:77:09:9E:59:36:EB:11:0C:BF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842FE242EE77F8C889DD7F15680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c3bc411-5377-3a81-9c50-c8f991ca90a0.roa
Signing time: Thu 24 Aug 2023 16:13:29 +0000
ROA not before: Thu 24 Aug 2023 16:13:29 +0000
ROA not after: Wed 22 Nov 2023 17:13:29 +0000
asID: 11798
IP address blocks: 166.1.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:fe:24:2e:e7:7f:8c:88:9d:d7:f1:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 24 16:13:29 2023 GMT
Not After : Nov 22 17:13:29 2023 GMT
Subject: CN=ec514aaf-6abb-4ca3-879a-3bcce78104e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:fb:8b:5d:63:17:e1:a4:4c:2b:bd:81:90:
5b:40:8b:e6:ce:78:f7:52:77:81:56:a3:0e:b3:12:
7e:a7:93:2b:fc:98:97:ff:20:f7:e0:c0:0c:90:15:
05:23:68:f9:4c:64:f3:d1:39:99:89:42:4d:42:a5:
b1:b6:db:3c:cc:e5:3a:a8:6e:98:98:eb:1c:8a:86:
05:a7:04:ed:e7:93:a3:dd:27:78:98:22:83:70:d8:
ed:c2:07:a2:73:35:09:10:1f:7a:63:00:45:9f:5a:
64:36:54:af:96:22:79:14:3e:1a:9a:4b:61:46:e3:
37:3b:87:3e:d1:fb:52:f4:95:ab:1b:9e:e0:3a:6b:
cd:e0:0c:3b:de:d1:0a:52:60:4c:9e:56:cf:16:8f:
48:21:dd:5f:08:84:80:dc:99:f5:82:19:d2:ac:6c:
78:f0:c9:4c:b7:05:97:8a:73:ae:34:59:aa:d4:08:
27:cc:d2:59:7c:3f:f7:f1:37:0b:2f:c7:cb:86:51:
5e:db:99:e2:6b:f1:7d:55:dd:2d:dc:d1:31:d0:29:
76:d0:9e:c5:09:81:9f:d0:a4:26:ec:b3:9a:f1:b3:
ec:88:f5:14:cd:dd:c7:53:5d:06:e7:88:49:98:d4:
3c:2b:00:2e:c6:1b:04:57:e1:af:70:fc:ec:35:d5:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:01:32:CB:25:03:44:E8:62:9C:77:09:9E:59:36:EB:11:0C:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c3bc411-5377-3a81-9c50-c8f991ca90a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:a2:e2:85:24:02:99:5b:9c:34:2f:39:2b:eb:71:dc:d7:34:
6c:11:a1:d2:7a:54:ba:3c:83:b5:38:a1:32:cc:12:46:63:36:
42:42:54:4f:96:5b:76:33:d7:5e:8d:59:80:d9:40:6f:ec:a7:
0a:30:38:67:6a:04:ba:9b:81:02:6c:2b:33:12:99:24:40:07:
76:ad:b3:5f:8b:98:37:ca:a6:f1:98:17:53:74:f2:e1:70:8f:
f1:91:44:f1:45:f1:70:2c:48:88:a8:30:f1:7b:72:f5:10:7d:
97:16:22:dd:5f:ba:7d:a9:52:93:ef:f5:97:d7:00:61:57:2a:
f0:d9:db:4f:de:4a:8b:01:4e:cf:78:50:b0:25:1c:f5:1b:36:
2a:4e:84:9a:6d:13:1e:59:c7:82:8b:9f:e1:a4:cc:6a:02:12:
81:4e:0e:1b:b7:5f:0f:ed:62:ee:e0:f3:5e:11:89:27:98:74:
ee:7f:64:e3:65:f1:a2:7e:35:bb:90:d8:fd:81:7c:c4:b5:02:
b5:38:7c:25:39:dd:fc:eb:b5:2f:e7:12:32:75:6e:33:83:6f:
4e:1d:88:00:83:49:95:57:9f:17:c0:9e:53:d8:50:59:6e:3e:
06:fc:fb:96:a4:60:e5:0d:2c:8a:55:a4:65:8a:78:ec:29:70:
54:ca:2e:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEL+JC7nf4yIndfxVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgyNDE2MTMyOVoXDTIzMTEyMjE3MTMyOVowLzEtMCsGA1UEAxMk
ZWM1MTRhYWYtNmFiYi00Y2EzLTg3OWEtM2JjY2U3ODEwNGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ND7i11jF+GkTCu9gZBbQIvmznj3UneBVqMO
sxJ+p5Mr/JiX/yD34MAMkBUFI2j5TGTz0TmZiUJNQqWxtts8zOU6qG6YmOscioYF
pwTt55Oj3Sd4mCKDcNjtwgeiczUJEB96YwBFn1pkNlSvliJ5FD4amkthRuM3O4c+
0ftS9JWrG57gOmvN4Aw73tEKUmBMnlbPFo9IId1fCISA3Jn1ghnSrGx48MlMtwWX
inOuNFmq1AgnzNJZfD/38TcLL8fLhlFe25nia/F9Vd0t3NEx0Cl20J7FCYGf0KQm
7LOa8bPsiPUUzd3HU10G54hJmNQ8KwAuxhsEV+GvcPzsNdWhLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzFATLLJQNE6GKcdwmeWTbrEQy/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWMzYmM0MTEtNTM3Ny0z
YTgxLTljNTAtYzhmOTkxY2E5MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyi4oUkAplbnDQvOSvrcdzXNGwRodJ6VLo8g7U4oTLMEkZjNkJCVE+W
W3Yz116NWYDZQG/spwowOGdqBLqbgQJsKzMSmSRAB3ats1+LmDfKpvGYF1N08uFw
j/GRRPFF8XAsSIioMPF7cvUQfZcWIt1fun2pUpPv9ZfXAGFXKvDZ20/eSosBTs94
ULAlHPUbNipOhJptEx5Zx4KLn+GkzGoCEoFODhu3Xw/tYu7g814RiSeYdO5/ZONl
8aJ+NbuQ2P2BfMS1ArU4fCU53fzrtS/nEjJ1bjODb04diACDSZVXnxfAnlPYUFlu
Pgb8+5akYOUNLIpVpGWKeOwpcFTKLso=
-----END CERTIFICATE-----
Generated at Fri Mar 21 22:40:15 2025 by rpki-client