Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dcbf488-bcc7-3ae5-9a4c-c9d07255d5e4.roa
File: 7dcbf488-bcc7-3ae5-9a4c-c9d07255d5e4.roa (raw, json)
Hash identifier: yhB4Q/dnfR0f8P/9NYCS7Uz2YhMV+BZdMz3JJa03IMo=
Subject key identifier: 04:FF:5A:85:C2:9A:0E:06:A7:1E:56:EC:C4:A1:04:BD:2A:42:12:4A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844079B9BF3D565B75211DCCD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dcbf488-bcc7-3ae5-9a4c-c9d07255d5e4.roa
Signing time: Mon 27 Nov 2023 18:23:20 +0000
ROA not before: Mon 27 Nov 2023 18:23:20 +0000
ROA not after: Sun 25 Feb 2024 18:23:20 +0000
asID: 399045
IP address blocks: 166.1.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:07:9b:9b:f3:d5:65:b7:52:11:dc:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 27 18:23:20 2023 GMT
Not After : Feb 25 18:23:20 2024 GMT
Subject: CN=33ff3288-75af-4538-abda-98a86d90cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:5f:ba:d6:1b:1b:f8:9f:d2:c3:78:5d:01:
d7:c1:2c:09:60:fa:a4:67:89:05:3d:3a:10:fb:5c:
6b:20:ec:cf:63:a0:e2:c3:55:a0:e2:0f:86:8c:6e:
4c:f1:e4:13:cd:8d:e4:54:6b:64:24:34:fe:bd:b6:
b8:4c:ae:a9:98:9e:43:60:da:15:97:96:ad:e2:1c:
be:3c:0c:48:9c:e1:50:2b:33:fe:70:3a:97:b1:2d:
8e:e9:0f:35:79:83:1b:51:07:ce:3e:b9:7e:bb:8f:
c1:3e:84:90:b1:93:94:d6:c8:e4:1f:0a:1f:8f:24:
68:be:c3:8f:72:31:27:21:52:be:9f:d8:ab:01:c3:
33:31:d4:6d:4a:ea:f1:cc:d7:2b:25:04:d4:bd:9e:
33:a7:aa:74:f9:66:33:8b:6f:62:ac:ee:9b:d0:13:
e3:19:f4:3c:c1:a8:ed:ee:82:49:4b:97:8f:54:65:
ee:6c:90:cb:20:76:62:7f:de:a2:d4:69:0d:cc:c0:
23:79:f7:5f:a2:e3:5d:7f:96:28:bc:b4:28:b0:ea:
47:f5:8e:1f:2b:81:62:08:b9:35:8d:a5:f2:f9:36:
0a:e0:be:5b:a9:27:ff:a3:a3:31:8f:e0:e6:4e:c1:
ff:c3:8f:fd:ba:c3:d7:dd:0e:33:68:bd:90:4d:58:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:5A:85:C2:9A:0E:06:A7:1E:56:EC:C4:A1:04:BD:2A:42:12:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dcbf488-bcc7-3ae5-9a4c-c9d07255d5e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:42:d3:57:59:10:6c:2f:30:37:67:2d:fa:9e:94:05:ec:02:
29:e4:da:71:b2:21:d3:2d:09:4b:3f:4b:95:70:a9:36:be:6c:
37:c9:14:50:95:81:49:9e:5e:27:20:83:8a:d3:ac:a8:f4:81:
a6:0f:58:c6:8a:0d:a6:1a:76:bb:61:60:ad:73:45:a3:27:0a:
59:65:83:29:5e:e8:87:f2:55:66:72:f1:72:17:ee:ae:93:6f:
8d:85:38:3a:40:bc:81:88:da:0f:ea:ef:fd:d9:49:1c:57:9d:
95:70:49:40:e8:4d:a9:ba:33:e6:3a:93:0f:94:7b:b6:9d:3a:
09:19:79:5c:23:f8:56:9b:ea:4e:c8:37:b1:75:d7:b5:12:9d:
74:d2:b5:e5:e9:d3:8b:10:cf:c5:1f:89:30:9b:77:24:2e:64:
30:bd:8a:af:93:8a:4a:09:e6:93:2c:98:1f:eb:1f:41:c9:25:
aa:c6:3a:7b:0f:dc:b1:67:0b:69:ab:d1:33:27:fb:36:88:17:
d3:90:39:70:50:48:56:42:c1:aa:1e:2c:55:f7:6c:8f:00:d5:
4c:40:28:3c:41:ed:98:ad:fb:5b:d0:21:ca:31:92:61:df:49:
e5:51:6c:e1:d7:fb:9a:ed:a4:a2:3f:1d:47:2a:6e:d8:d1:78:
ae:3b:e3:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQHm5vz1WW3UhHczQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTEyNzE4MjMyMFoXDTI0MDIyNTE4MjMyMFowLzEtMCsGA1UEAxMk
MzNmZjMyODgtNzVhZi00NTM4LWFiZGEtOThhODZkOTBjZjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygVfutYbG/if0sN4XQHXwSwJYPqkZ4kFPToQ
+1xrIOzPY6Diw1Wg4g+GjG5M8eQTzY3kVGtkJDT+vba4TK6pmJ5DYNoVl5at4hy+
PAxInOFQKzP+cDqXsS2O6Q81eYMbUQfOPrl+u4/BPoSQsZOU1sjkHwofjyRovsOP
cjEnIVK+n9irAcMzMdRtSurxzNcrJQTUvZ4zp6p0+WYzi29irO6b0BPjGfQ8wajt
7oJJS5ePVGXubJDLIHZif96i1GkNzMAjefdfouNdf5YovLQosOpH9Y4fK4FiCLk1
jaXy+TYK4L5bqSf/o6Mxj+DmTsH/w4/9usPX3Q4zaL2QTVhyDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAT/WoXCmg4Gpx5W7MShBL0qQhJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2RjYmY0ODgtYmNjNy0z
YWU1LTlhNGMtYzlkMDcyNTVkNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpC01dZEGwvMDdnLfqelAXsAink2nGyIdMtCUs/S5VwqTa+bDfJFFCV
gUmeXicgg4rTrKj0gaYPWMaKDaYadrthYK1zRaMnClllgyle6IfyVWZy8XIX7q6T
b42FODpAvIGI2g/q7/3ZSRxXnZVwSUDoTam6M+Y6kw+Ue7adOgkZeVwj+Fab6k7I
N7F117USnXTSteXp04sQz8UfiTCbdyQuZDC9iq+TikoJ5pMsmB/rH0HJJarGOnsP
3LFnC2mr0TMn+zaIF9OQOXBQSFZCwaoeLFX3bI8A1UxAKDxB7Zit+1vQIcoxkmHf
SeVRbOHX+5rtpKI/HUcqbtjReK4748Q=
-----END CERTIFICATE-----
Generated at Sun May 11 17:10:31 2025 by rpki-client