Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a960207-9782-33c4-ba7d-66d06dfea40d.roa
File: 7a960207-9782-33c4-ba7d-66d06dfea40d.roa (raw, json)
Hash identifier: ibrIKoxyUT4+Lm7gp7EGfkwTx7t8TS0ajbjMZfz3jtE=
Subject key identifier: 4B:C0:8E:C0:DE:52:62:E2:CB:41:B0:E8:08:56:DA:96:BB:85:5F:35
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584412C8ADC7330BFDCC7EFDDA10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a960207-9782-33c4-ba7d-66d06dfea40d.roa
Signing time: Fri 01 Dec 2023 18:28:02 +0000
ROA not before: Fri 01 Dec 2023 18:28:02 +0000
ROA not after: Thu 29 Feb 2024 18:28:02 +0000
asID: 834
IP address blocks: 166.0.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:12:c8:ad:c7:33:0b:fd:cc:7e:fd:da:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 1 18:28:02 2023 GMT
Not After : Feb 29 18:28:02 2024 GMT
Subject: CN=b78fc96b-dd9c-4f41-9158-d1b999a73cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:e6:c0:be:af:b9:f0:23:41:65:66:f5:88:
68:92:12:6e:f9:07:d2:a0:02:9f:30:6d:80:59:c3:
de:3e:2f:36:b2:dd:08:68:22:a5:aa:8a:36:08:db:
ec:ac:55:6c:e0:85:57:76:65:23:d8:ac:a3:cc:ff:
cf:74:e1:85:7d:11:61:da:ab:c6:05:c2:ad:05:8a:
2a:73:3f:e8:4e:e9:4d:d3:d3:64:d3:b2:37:bf:dc:
aa:97:b4:fd:fb:07:23:b5:81:61:5b:64:6b:8c:06:
a2:c5:eb:8f:3a:2b:28:14:a0:59:9a:1c:d3:d9:e3:
8c:0d:d5:21:6b:69:e5:84:38:11:38:52:f9:c3:bb:
7a:9a:63:b8:c0:df:02:f1:23:d5:76:98:3d:61:84:
b0:a2:37:98:5f:cc:87:66:95:6b:29:11:73:b8:36:
26:0c:64:b6:30:4d:12:59:35:ad:ad:65:46:00:62:
c1:e7:c3:f0:89:c7:1b:a3:78:63:16:0e:04:1b:2b:
65:9e:5a:5a:eb:95:09:b8:31:66:c4:57:4a:c2:4b:
d5:0a:be:aa:ee:64:73:32:17:ef:49:7f:0f:77:4a:
58:a7:d3:16:7d:d7:81:94:2c:39:8a:13:8e:8e:9c:
8b:b3:d9:f5:cf:b0:6e:c0:d1:16:b6:2e:95:d0:6a:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:8E:C0:DE:52:62:E2:CB:41:B0:E8:08:56:DA:96:BB:85:5F:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a960207-9782-33c4-ba7d-66d06dfea40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:f6:49:bd:e7:21:7e:f6:a8:f9:df:90:56:29:33:fc:fb:1d:
c7:be:59:74:68:7b:d1:91:96:e0:dd:7d:be:b2:4a:d4:eb:6f:
b5:e2:b7:c3:1f:dd:7b:3e:1b:e5:06:60:11:8f:c4:b9:a6:da:
50:db:16:5c:30:43:91:9f:3e:72:6c:7e:90:bf:fa:4d:e8:6a:
a7:5e:18:03:17:72:57:57:89:52:ba:f3:d6:58:3e:43:d5:0b:
56:1c:cb:ac:a2:4e:b3:32:61:81:fb:bf:ce:12:75:a5:38:b9:
85:97:99:8d:c7:af:3c:3d:70:1b:7c:4c:99:8e:43:35:c8:ec:
c3:9b:df:23:10:04:f4:df:94:3e:1f:b9:2f:3a:86:1c:0a:5b:
43:23:45:c7:d5:bd:25:f0:46:82:a1:cf:35:c1:af:ec:ab:75:
25:34:6a:bb:4b:fa:61:36:55:92:b0:79:36:e8:df:5b:be:22:
2c:e5:0b:81:93:09:01:e5:f1:d6:57:ea:11:fb:35:7d:81:90:
79:28:ef:93:1a:98:55:fa:2d:02:a2:31:e9:3a:ed:14:46:41:
d3:41:cf:3e:ec:8f:32:3b:37:36:da:ca:50:6d:0a:ff:33:82:
01:bc:c7:d0:92:cc:2d:c2:f2:36:25:67:7d:61:a2:c8:db:92:
a2:f5:d9:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQSyK3HMwv9zH792hAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTIwMTE4MjgwMloXDTI0MDIyOTE4MjgwMlowLzEtMCsGA1UEAxMk
Yjc4ZmM5NmItZGQ5Yy00ZjQxLTkxNTgtZDFiOTk5YTczY2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28zmwL6vufAjQWVm9YhokhJu+QfSoAKfMG2A
WcPePi82st0IaCKlqoo2CNvsrFVs4IVXdmUj2KyjzP/PdOGFfRFh2qvGBcKtBYoq
cz/oTulN09Nk07I3v9yql7T9+wcjtYFhW2RrjAaixeuPOisoFKBZmhzT2eOMDdUh
a2nlhDgROFL5w7t6mmO4wN8C8SPVdpg9YYSwojeYX8yHZpVrKRFzuDYmDGS2ME0S
WTWtrWVGAGLB58Pwiccbo3hjFg4EGytlnlpa65UJuDFmxFdKwkvVCr6q7mRzMhfv
SX8Pd0pYp9MWfdeBlCw5ihOOjpyLs9n1z7BuwNEWti6V0Gri/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvAjsDeUmLiy0Gw6AhW2pa7hV81MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2E5NjAyMDctOTc4Mi0z
M2M0LWJhN2QtNjZkMDZkZmVhNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgA6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJb2Sb3nIX72qPnfkFYpM/z7Hce+WXRoe9GRluDdfb6yStTrb7Xit8Mf
3Xs+G+UGYBGPxLmm2lDbFlwwQ5GfPnJsfpC/+k3oaqdeGAMXcldXiVK689ZYPkPV
C1Ycy6yiTrMyYYH7v84SdaU4uYWXmY3Hrzw9cBt8TJmOQzXI7MOb3yMQBPTflD4f
uS86hhwKW0MjRcfVvSXwRoKhzzXBr+yrdSU0artL+mE2VZKweTbo31u+IizlC4GT
CQHl8dZX6hH7NX2BkHko75MamFX6LQKiMek67RRGQdNBzz7sjzI7NzbaylBtCv8z
ggG8x9CSzC3C8jYlZ31hosjbkqL12aI=
-----END CERTIFICATE-----
Generated at Sun May 11 20:25:49 2025 by rpki-client