Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e8571b0-fca5-366c-bd2a-6a1553d60dbc.roa
File: 8e8571b0-fca5-366c-bd2a-6a1553d60dbc.roa (raw, json)
Hash identifier: Ftf+dG4Di9hm7M5ds13OOklQBsnpeJiVtCuCpfCkB30=
Subject key identifier: B6:7B:19:98:34:B5:BB:82:DD:93:EE:9C:87:61:62:E7:70:59:DD:59
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843E2CE3B5A131231A897689280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e8571b0-fca5-366c-bd2a-6a1553d60dbc.roa
Signing time: Tue 14 Nov 2023 14:00:20 +0000
ROA not before: Tue 14 Nov 2023 14:00:20 +0000
ROA not after: Mon 12 Feb 2024 14:00:20 +0000
asID: 834
IP address blocks: 166.0.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e2:ce:3b:5a:13:12:31:a8:97:68:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 14 14:00:20 2023 GMT
Not After : Feb 12 14:00:20 2024 GMT
Subject: CN=93cc3d5a-56a8-49a8-80e6-bdc096583c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:32:82:63:64:dc:85:57:f3:f4:40:c1:66:
6b:e9:db:ff:43:7d:7a:50:ac:3c:a5:08:21:36:d0:
7e:17:ec:b4:83:d1:23:56:34:a4:01:a9:ae:2b:17:
b9:52:12:2c:e7:f0:19:fb:fb:be:07:b6:8d:9b:4d:
04:1b:53:65:df:5f:26:70:76:f6:39:3c:17:54:de:
02:64:3c:c7:d1:fa:66:56:f1:10:89:4a:73:27:ce:
91:7b:9a:15:70:48:02:ee:0a:39:ff:67:e5:a3:35:
27:0a:00:f2:12:8e:a6:f7:c1:cc:ac:4e:a4:6d:74:
d9:cb:d1:c6:1e:91:d9:e7:3b:d3:8a:1f:b0:27:ad:
7f:26:22:66:55:bb:23:4e:3a:29:d7:6f:46:e5:e8:
7c:fb:aa:bd:a4:73:87:25:4d:87:2e:a5:01:da:ad:
68:0d:f9:94:bb:6d:2b:8e:58:7d:e1:e7:e1:17:3f:
d5:e3:89:59:98:0d:ae:72:d3:2b:d9:03:2b:74:b9:
f1:aa:7c:3a:bf:3e:a7:8c:5b:0f:77:62:26:fe:5b:
36:37:0b:1e:5f:a0:45:05:e5:7b:cb:20:3c:1f:30:
df:38:4b:d3:6c:39:55:25:a6:da:b7:7b:b2:18:51:
ac:a8:83:6d:66:e1:11:a2:71:c4:c9:31:50:be:b9:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:19:98:34:B5:BB:82:DD:93:EE:9C:87:61:62:E7:70:59:DD:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e8571b0-fca5-366c-bd2a-6a1553d60dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a3:17:45:c6:5f:1a:5f:af:23:14:79:f1:af:70:6f:89:0c:
36:3e:3c:2c:7f:a7:92:17:9c:26:9e:cc:cf:63:ff:1f:1e:c0:
23:54:e6:b5:b2:22:a9:ad:91:dd:f0:c7:87:ab:b0:78:a2:76:
72:87:b1:3f:1d:d7:81:27:81:0d:c5:0e:c0:96:2d:f2:64:e1:
fe:61:73:6a:bc:52:88:d4:a4:d4:30:30:ef:3a:ad:f1:83:78:
ab:92:39:3d:41:39:7f:0b:59:0d:49:dd:d2:3f:c8:fc:36:55:
9f:74:8a:57:1a:1e:99:2c:69:5f:e1:75:6c:df:e1:78:19:45:
1a:15:4e:02:d1:b2:d9:e2:8c:a1:86:20:76:58:fd:9a:e4:2b:
6d:20:ba:e0:28:d9:b8:43:dd:41:97:c3:50:1c:b3:b5:4a:95:
15:8d:11:8e:70:32:55:e0:f9:47:6c:22:c2:66:6b:cd:85:44:
6b:f0:a1:4e:c0:50:53:66:91:96:7e:72:4a:8d:06:33:eb:90:
c1:b9:c6:a9:a2:dd:54:a1:a4:d3:ed:d8:17:b6:ca:d4:91:15:
52:63:70:0f:50:3b:6e:fd:cd:06:00:65:11:cb:b6:1f:f6:64:
58:dc:b7:a7:fc:86:ac:c6:4e:61:38:71:a5:29:14:04:47:2a:
f5:30:33:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPizjtaExIxqJdokoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTExNDE0MDAyMFoXDTI0MDIxMjE0MDAyMFowLzEtMCsGA1UEAxMk
OTNjYzNkNWEtNTZhOC00OWE4LTgwZTYtYmRjMDk2NTgzYzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbgygmNk3IVX8/RAwWZr6dv/Q316UKw8pQgh
NtB+F+y0g9EjVjSkAamuKxe5UhIs5/AZ+/u+B7aNm00EG1Nl318mcHb2OTwXVN4C
ZDzH0fpmVvEQiUpzJ86Re5oVcEgC7go5/2flozUnCgDyEo6m98HMrE6kbXTZy9HG
HpHZ5zvTih+wJ61/JiJmVbsjTjop129G5eh8+6q9pHOHJU2HLqUB2q1oDfmUu20r
jlh94efhFz/V44lZmA2uctMr2QMrdLnxqnw6vz6njFsPd2Im/ls2NwseX6BFBeV7
yyA8HzDfOEvTbDlVJabat3uyGFGsqINtZuERonHEyTFQvrmurwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZ7GZg0tbuC3ZPunIdhYudwWd1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGU4NTcxYjAtZmNhNS0z
NjZjLWJkMmEtNmExNTUzZDYwZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABujF0XGXxpfryMUefGvcG+JDDY+PCx/p5IXnCaezM9j/x8ewCNU5rWy
Iqmtkd3wx4ersHiidnKHsT8d14EngQ3FDsCWLfJk4f5hc2q8UojUpNQwMO86rfGD
eKuSOT1BOX8LWQ1J3dI/yPw2VZ90ilcaHpksaV/hdWzf4XgZRRoVTgLRstnijKGG
IHZY/ZrkK20guuAo2bhD3UGXw1Acs7VKlRWNEY5wMlXg+UdsIsJma82FRGvwoU7A
UFNmkZZ+ckqNBjPrkMG5xqmi3VShpNPt2Be2ytSRFVJjcA9QO279zQYAZRHLth/2
ZFjct6f8hqzGTmE4caUpFARHKvUwM70=
-----END CERTIFICATE-----
Generated at Sun May 11 19:52:28 2025 by rpki-client