Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/372b5738-48e9-3943-9667-3bdae2157e17.roa
File: 372b5738-48e9-3943-9667-3bdae2157e17.roa (raw, json)
Hash identifier: yQQicXcbLOwnIXtYfOS1rz3AEOWwb1u+tbJU1FL7dBU=
Subject key identifier: 2C:3C:3C:38:74:6B:53:BB:C4:87:96:A8:C1:0A:85:BC:81:30:EC:E6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858439E4AA0CF87D3681C96D99C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/372b5738-48e9-3943-9667-3bdae2157e17.roa
Signing time: Sat 21 Oct 2023 01:00:16 +0000
ROA not before: Sat 21 Oct 2023 01:00:16 +0000
ROA not after: Fri 19 Jan 2024 02:00:16 +0000
asID: 834
IP address blocks: 166.0.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9e:4a:a0:cf:87:d3:68:1c:96:d9:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 21 01:00:16 2023 GMT
Not After : Jan 19 02:00:16 2024 GMT
Subject: CN=a2d57f68-7552-4b5f-8f34-f4f9fd4395d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:dd:ca:0d:20:5d:e7:ac:a5:62:c7:73:de:
cc:b0:1f:fc:1c:78:ee:86:5b:b1:e4:2c:38:d5:8e:
24:4f:bf:04:e0:19:f0:71:c0:7c:d7:e3:b8:97:b1:
36:61:97:f5:1c:c2:94:ac:a6:30:db:fb:dc:60:0a:
cc:09:1c:40:a0:89:eb:72:f2:50:b6:7f:9a:52:0e:
51:1b:6b:5e:01:58:c4:b8:8a:8b:8d:25:f0:51:7f:
b5:a6:c2:8a:0a:d4:e1:7a:a6:16:18:ee:2a:8a:b1:
7d:12:6c:ac:c4:14:68:f8:c4:42:85:77:af:ef:c8:
c2:9e:56:bd:d6:7e:4c:26:eb:e6:67:b1:8a:c8:f2:
69:93:69:08:bc:7a:86:47:08:66:a0:f6:bf:b2:1e:
e3:f9:fa:fc:40:76:c2:fb:89:eb:9e:a4:1d:5f:0c:
ca:1b:24:49:bf:86:a0:da:e0:58:23:33:d6:32:26:
2f:b8:bd:64:f3:94:e8:64:f4:26:cb:ca:73:91:fd:
ff:a5:e2:2a:3f:c0:ed:8a:35:c8:7b:af:f1:88:cb:
6e:6c:6d:d9:56:c1:e2:83:d4:20:be:1b:00:be:9b:
9d:73:cc:d4:22:24:35:d3:0d:d8:75:5f:cf:b8:7b:
bd:65:83:18:6b:c5:e3:63:86:86:ce:b2:82:1c:28:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:3C:38:74:6B:53:BB:C4:87:96:A8:C1:0A:85:BC:81:30:EC:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/372b5738-48e9-3943-9667-3bdae2157e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:6b:44:33:6c:c6:d1:50:51:90:e5:3f:d8:09:c4:a6:6c:08:
58:3b:aa:dd:19:8e:57:8d:b0:9d:07:1f:a8:a2:b5:9e:b2:86:
70:3c:46:3c:79:d6:41:59:9f:f8:9c:52:aa:36:e6:2a:0e:98:
e8:fc:2a:2d:c8:6d:18:52:f8:36:2a:85:f3:22:b9:ab:19:e2:
04:d9:26:9d:0c:de:03:29:fc:a6:8e:3c:df:b3:2c:39:c4:de:
2f:7b:2f:d8:64:92:52:54:96:73:d6:ac:4d:77:e5:17:05:4c:
2f:fa:56:34:92:50:6c:7b:0b:ae:c4:75:de:f1:e4:90:eb:ab:
fb:54:4e:38:88:c7:28:48:21:ee:b2:21:5a:39:ed:02:c7:68:
67:f2:b8:92:ac:d3:b3:3d:54:2e:55:5d:f8:9b:c9:37:a3:81:
47:2d:eb:63:9e:67:7f:ea:90:1f:8c:fd:2c:ef:90:86:0f:ee:
19:de:5b:b2:dc:15:47:5f:17:d6:98:c7:5d:d5:b3:72:4f:bf:
a3:88:0e:2a:d8:a7:6f:47:48:b7:35:5d:e3:d6:7b:3a:5a:c2:
0d:e9:84:b0:1b:ea:8f:12:1a:2c:2f:69:bd:9b:41:71:64:a8:
02:f5:dc:5d:27:bb:15:d4:da:16:88:e1:e6:52:87:f8:50:63:
77:ea:44:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOeSqDPh9NoHJbZnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTAyMTAxMDAxNloXDTI0MDExOTAyMDAxNlowLzEtMCsGA1UEAxMk
YTJkNTdmNjgtNzU1Mi00YjVmLThmMzQtZjRmOWZkNDM5NWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwzdyg0gXeespWLHc97MsB/8HHjuhlux5Cw4
1Y4kT78E4BnwccB81+O4l7E2YZf1HMKUrKYw2/vcYArMCRxAoInrcvJQtn+aUg5R
G2teAVjEuIqLjSXwUX+1psKKCtTheqYWGO4qirF9EmysxBRo+MRChXev78jCnla9
1n5MJuvmZ7GKyPJpk2kIvHqGRwhmoPa/sh7j+fr8QHbC+4nrnqQdXwzKGyRJv4ag
2uBYIzPWMiYvuL1k85ToZPQmy8pzkf3/peIqP8DtijXIe6/xiMtubG3ZVsHig9Qg
vhsAvpudc8zUIiQ10w3YdV/PuHu9ZYMYa8XjY4aGzrKCHCgdjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCw8PDh0a1O7xIeWqMEKhbyBMOzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzcyYjU3MzgtNDhlOS0z
OTQzLTk2NjctM2JkYWUyMTU3ZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1rRDNsxtFQUZDlP9gJxKZsCFg7qt0ZjleNsJ0HH6iitZ6yhnA8Rjx5
1kFZn/icUqo25ioOmOj8Ki3IbRhS+DYqhfMiuasZ4gTZJp0M3gMp/KaOPN+zLDnE
3i97L9hkklJUlnPWrE135RcFTC/6VjSSUGx7C67Edd7x5JDrq/tUTjiIxyhIIe6y
IVo57QLHaGfyuJKs07M9VC5VXfibyTejgUct62OeZ3/qkB+M/SzvkIYP7hneW7Lc
FUdfF9aYx13Vs3JPv6OIDirYp29HSLc1XePWezpawg3phLAb6o8SGiwvab2bQXFk
qAL13F0nuxXU2haI4eZSh/hQY3fqRN4=
-----END CERTIFICATE-----
Generated at Sun May 11 20:30:49 2025 by rpki-client