Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f975b9e-d3a3-3314-bf83-77feafb0e0ec.roa
File: 1f975b9e-d3a3-3314-bf83-77feafb0e0ec.roa (raw, json)
Hash identifier: vIy/f7QJgMn2p1pPEaADepTGsSX8vALPAHEpeP4vwqA=
Subject key identifier: FF:04:02:AC:0B:8D:D5:5A:2E:C3:B0:BC:14:94:7E:65:DD:09:5B:61
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285846518809BE2CEC1A053D2C3D40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f975b9e-d3a3-3314-bf83-77feafb0e0ec.roa
Signing time: Mon 24 Jun 2024 15:27:35 +0000
ROA not before: Mon 24 Jun 2024 15:27:35 +0000
ROA not after: Sun 22 Sep 2024 15:27:35 +0000
asID: 834
IP address blocks: 166.0.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:51:88:09:be:2c:ec:1a:05:3d:2c:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 24 15:27:35 2024 GMT
Not After : Sep 22 15:27:35 2024 GMT
Subject: CN=09d14726-95ee-4e92-9f29-7e4de86fd955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:2d:b6:72:9b:cf:4d:a5:d9:60:cd:69:01:
bf:6e:04:e6:3d:23:16:82:b7:f8:23:43:af:bb:7c:
82:83:f6:37:b6:1c:cf:82:f6:b3:5e:7e:2e:2e:27:
60:a2:6c:a3:5f:09:d3:7e:60:2c:33:02:b9:d3:84:
25:b1:05:b9:f1:e1:97:68:28:f5:f7:63:60:fc:ec:
6e:d6:be:66:07:91:fd:83:6e:ba:7a:96:7c:20:99:
20:e7:de:55:89:63:e6:30:17:f9:3c:56:0b:20:a8:
76:2c:d2:b9:ca:3d:ee:91:3c:ed:31:72:50:12:e9:
69:8c:93:e9:de:e3:32:0e:68:af:b4:8e:d5:bb:e8:
75:77:db:8d:fa:38:89:79:c3:b1:ee:1d:9f:9a:11:
42:5d:74:82:a3:90:61:7c:66:0a:5d:c8:de:8e:d1:
a9:41:a4:57:02:29:04:d4:69:bb:02:5e:0e:08:95:
63:84:1c:e6:7e:25:6d:f2:f9:33:3d:e0:1c:ac:f5:
65:d0:2c:7f:7d:e4:b0:c0:f5:d9:ab:8b:80:99:f3:
12:cf:43:be:f0:66:aa:4a:e6:b2:8e:51:2f:97:54:
bc:99:46:84:55:aa:de:c9:4b:51:ed:45:5a:0a:47:
16:2e:0d:34:60:21:74:1a:3f:ff:af:02:cc:57:9b:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:04:02:AC:0B:8D:D5:5A:2E:C3:B0:BC:14:94:7E:65:DD:09:5B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1f975b9e-d3a3-3314-bf83-77feafb0e0ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:3f:72:45:75:d6:8a:09:81:58:ef:7f:19:ce:bb:15:5a:c8:
24:22:67:fa:31:61:5a:3b:ef:e9:5b:19:30:76:a1:c3:9f:7b:
23:fa:85:fd:4a:b3:f3:2c:50:b5:b3:3b:1a:e6:fd:44:f9:52:
d9:1e:66:cf:c0:86:95:b0:de:bc:47:9d:22:93:19:eb:72:1b:
37:50:61:69:45:d8:1f:d1:18:82:ad:a3:c9:b9:c8:fb:a4:dc:
64:2a:2e:cb:33:06:24:72:3f:ba:a3:aa:e4:50:bc:49:ee:37:
12:00:6d:03:bf:48:a2:15:a0:5b:f2:65:c9:ca:48:e1:03:16:
3a:94:8d:3b:c1:79:72:da:36:97:3d:e2:5f:8b:8a:3c:58:1a:
cc:8a:7a:b2:ac:47:1a:60:34:d0:62:46:ab:80:0c:98:95:1c:
45:e6:5d:55:4b:66:db:cc:62:34:22:5f:2e:2c:40:f1:34:b0:
f9:27:60:ec:7b:55:3e:3f:38:ab:6d:f9:bd:f9:16:f5:f4:ce:
c8:ef:22:b2:40:b2:75:19:c2:98:74:03:82:fa:4d:c0:23:96:
92:15:8c:8f:f9:06:04:d4:4d:35:24:11:75:c5:c8:a9:fe:a3:
bf:89:fb:82:a1:c0:f5:f5:bc:9a:28:a0:51:2d:32:56:35:ac:
a8:fc:f5:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZRiAm+LOwaBT0sPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDYyNDE1MjczNVoXDTI0MDkyMjE1MjczNVowLzEtMCsGA1UEAxMk
MDlkMTQ3MjYtOTVlZS00ZTkyLTlmMjktN2U0ZGU4NmZkOTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaYttnKbz02l2WDNaQG/bgTmPSMWgrf4I0Ov
u3yCg/Y3thzPgvazXn4uLidgomyjXwnTfmAsMwK504QlsQW58eGXaCj192Ng/Oxu
1r5mB5H9g266epZ8IJkg595ViWPmMBf5PFYLIKh2LNK5yj3ukTztMXJQEulpjJPp
3uMyDmivtI7Vu+h1d9uN+jiJecOx7h2fmhFCXXSCo5BhfGYKXcjejtGpQaRXAikE
1Gm7Al4OCJVjhBzmfiVt8vkzPeAcrPVl0Cx/feSwwPXZq4uAmfMSz0O+8GaqSuay
jlEvl1S8mUaEVareyUtR7UVaCkcWLg00YCF0Gj//rwLMV5vArwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8EAqwLjdVaLsOwvBSUfmXdCVthMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWY5NzViOWUtZDNhMy0z
MzE0LWJmODMtNzdmZWFmYjBlMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk/ckV11ooJgVjvfxnOuxVayCQiZ/oxYVo77+lbGTB2ocOfeyP6hf1K
s/MsULWzOxrm/UT5UtkeZs/AhpWw3rxHnSKTGetyGzdQYWlF2B/RGIKto8m5yPuk
3GQqLsszBiRyP7qjquRQvEnuNxIAbQO/SKIVoFvyZcnKSOEDFjqUjTvBeXLaNpc9
4l+LijxYGsyKerKsRxpgNNBiRquADJiVHEXmXVVLZtvMYjQiXy4sQPE0sPknYOx7
VT4/OKtt+b35FvX0zsjvIrJAsnUZwph0A4L6TcAjlpIVjI/5BgTUTTUkEXXFyKn+
o7+J+4KhwPX1vJoooFEtMlY1rKj89ZM=
-----END CERTIFICATE-----
Generated at Fri Mar 28 06:35:20 2025 by rpki-client