Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/25be50cf-9e09-3d2a-b3a2-7b521b7cf69c.roa
File: 25be50cf-9e09-3d2a-b3a2-7b521b7cf69c.roa (raw, json)
Hash identifier: 48L9h2/7xlr9ctFW8VdmzlqaAYcmrStCbmys8IwW3Qw=
Subject key identifier: 26:46:FC:B3:10:B7:8C:57:7B:5F:8A:0B:00:02:17:43:22:78:AA:55
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858436B1DF9057309670A7EC48900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/25be50cf-9e09-3d2a-b3a2-7b521b7cf69c.roa
Signing time: Mon 02 Oct 2023 17:04:05 +0000
ROA not before: Mon 02 Oct 2023 17:04:05 +0000
ROA not after: Sun 31 Dec 2023 18:04:05 +0000
asID: 43180
IP address blocks: 166.0.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:6b:1d:f9:05:73:09:67:0a:7e:c4:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 2 17:04:05 2023 GMT
Not After : Dec 31 18:04:05 2023 GMT
Subject: CN=b8b7b02e-1d26-4bf1-b0b2-7efbf90be38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:8f:d6:0f:1a:53:03:cc:9b:c0:1a:0d:be:
48:9b:29:a5:40:db:60:91:e6:74:6a:50:f0:8a:63:
35:22:dd:14:c2:59:bb:00:ef:32:93:1a:01:8b:bb:
5c:c0:9f:f2:d0:8c:d5:91:e1:ae:90:69:a5:c8:f5:
bf:d5:59:28:ac:e3:38:1a:50:d3:2f:17:9c:0f:35:
f8:02:97:7e:9c:4b:b9:09:cd:26:bf:fa:48:9f:b1:
94:a1:00:79:1c:58:10:b2:05:c0:9c:89:cb:55:d6:
c9:c3:e3:03:6c:3a:e4:36:5a:4e:e4:fa:9e:42:7e:
c7:16:f8:76:24:e2:f6:44:aa:f6:a3:e3:d8:e8:76:
83:24:00:13:6c:3d:65:6d:9f:88:f4:9b:dc:76:52:
81:e6:7c:e4:ec:47:ac:3f:4c:cf:b5:fd:75:4f:da:
c4:19:f9:8d:80:4e:c6:39:96:46:9c:65:20:60:2f:
8e:29:41:ed:7f:7e:65:ee:55:f7:03:c6:ee:26:15:
f2:7a:58:5c:1b:28:65:e0:81:19:7c:8a:67:00:27:
69:9e:6a:cc:8f:f3:f6:60:30:17:4f:e2:4e:bc:bb:
41:80:ff:e0:49:be:82:eb:82:87:4f:b9:41:53:59:
ef:47:a8:a4:9c:57:ba:7d:a1:ef:37:9d:f3:7f:c1:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:46:FC:B3:10:B7:8C:57:7B:5F:8A:0B:00:02:17:43:22:78:AA:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/25be50cf-9e09-3d2a-b3a2-7b521b7cf69c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:8d:9a:b7:1d:c7:b2:cc:65:db:02:55:23:a7:69:ae:ca:10:
3e:cd:c4:0f:66:01:ad:8c:3d:c3:2a:f6:72:26:55:93:42:65:
bd:bb:fe:7d:b8:6b:cf:56:70:0c:4a:f8:cb:97:6f:cf:71:98:
7a:9a:88:33:79:a4:83:fa:37:ad:12:48:37:a3:54:b8:ef:bf:
11:4b:7b:2f:3f:ea:43:da:ea:93:15:1e:fd:4d:17:ec:d7:a5:
4c:3a:d8:1e:ae:a9:f5:5b:4a:e5:29:45:17:02:ca:cb:4a:3a:
70:7c:e0:5d:e5:7c:31:73:c9:3d:46:45:a5:0e:84:ba:12:99:
0c:ed:a9:8d:18:2b:40:26:cc:73:b4:a4:4a:08:c5:3a:bb:37:
0b:6c:50:c0:3a:a5:1f:07:39:37:5a:76:71:6b:11:ce:0c:52:
e1:9a:a2:2c:54:00:4d:2a:a9:aa:c5:1a:c0:ad:01:56:13:f8:
7a:e5:e3:28:06:1e:c2:4d:bd:99:c8:a9:de:4f:d1:b3:f9:a3:
d6:3c:95:46:4b:14:b2:68:3c:4b:d2:0c:f9:da:2e:46:cd:1b:
a4:7d:dd:1f:5f:b5:e5:37:66:d2:dd:0c:89:5b:07:e7:40:de:
ad:32:20:ee:ba:be:fc:f1:20:54:ce:20:b9:f1:ec:c3:09:76:
c1:10:cb:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENrHfkFcwlnCn7EiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTAwMjE3MDQwNVoXDTIzMTIzMTE4MDQwNVowLzEtMCsGA1UEAxMk
YjhiN2IwMmUtMWQyNi00YmYxLWIwYjItN2VmYmY5MGJlMzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTiP1g8aUwPMm8AaDb5ImymlQNtgkeZ0alDw
imM1It0Uwlm7AO8ykxoBi7tcwJ/y0IzVkeGukGmlyPW/1VkorOM4GlDTLxecDzX4
Apd+nEu5Cc0mv/pIn7GUoQB5HFgQsgXAnInLVdbJw+MDbDrkNlpO5PqeQn7HFvh2
JOL2RKr2o+PY6HaDJAATbD1lbZ+I9JvcdlKB5nzk7EesP0zPtf11T9rEGfmNgE7G
OZZGnGUgYC+OKUHtf35l7lX3A8buJhXyelhcGyhl4IEZfIpnACdpnmrMj/P2YDAX
T+JOvLtBgP/gSb6C64KHT7lBU1nvR6iknFe6faHvN53zf8ETfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZG/LMQt4xXe1+KCwACF0MieKpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjViZTUwY2YtOWUwOS0z
ZDJhLWIzYTItN2I1MjFiN2NmNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgC6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyNmrcdx7LMZdsCVSOnaa7KED7NxA9mAa2MPcMq9nImVZNCZb27/n24
a89WcAxK+MuXb89xmHqaiDN5pIP6N60SSDejVLjvvxFLey8/6kPa6pMVHv1NF+zX
pUw62B6uqfVbSuUpRRcCystKOnB84F3lfDFzyT1GRaUOhLoSmQztqY0YK0AmzHO0
pEoIxTq7NwtsUMA6pR8HOTdadnFrEc4MUuGaoixUAE0qqarFGsCtAVYT+Hrl4ygG
HsJNvZnIqd5P0bP5o9Y8lUZLFLJoPEvSDPnaLkbNG6R93R9fteU3ZtLdDIlbB+dA
3q0yIO66vvzxIFTOILnx7MMJdsEQy2Q=
-----END CERTIFICATE-----
Generated at Fri Mar 28 02:00:49 2025 by rpki-client