Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa
File: a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa (raw, json)
Hash identifier: vNqc/XPzWsKnVcvI9+HjD47JVSc1lD9fC3wpny92Bvk=
Subject key identifier: ED:08:C3:30:46:8D:F2:A7:D3:49:7D:29:D6:D5:A1:4E:3B:D1:A4:9C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858487325B6F5B2353B5BDD10A0E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 20473
IP address blocks: 166.0.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b6:f5:b2:35:3b:5b:dd:10:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=421f65a2-5eff-478b-8d65-30b5a0369e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:28:46:2d:22:2a:a6:5a:22:2d:5e:b8:1d:
89:2d:d4:f0:43:f0:7f:d1:36:d0:42:4f:46:fe:56:
64:8c:03:bd:98:49:e7:02:03:82:44:c1:99:21:aa:
be:fc:e1:1b:92:11:30:c2:f8:dd:8e:7a:b0:f4:ef:
19:2e:95:cc:f8:21:ad:34:15:12:a3:55:88:b2:82:
4d:cb:d0:98:91:43:5b:55:4a:de:ab:e8:75:ae:35:
58:b5:6b:59:f1:a9:d7:42:b4:5f:f8:a6:23:f0:5f:
92:bb:cc:4e:42:f8:54:30:6f:ac:5e:87:69:3e:8e:
83:c7:9e:9e:8e:d6:19:5b:82:eb:5a:80:61:e2:f1:
64:29:0e:28:fe:7b:c9:15:5c:ba:0f:15:9b:b5:a8:
1e:ee:80:82:0c:45:6f:4c:29:54:09:c5:57:2b:4f:
93:82:5c:a3:72:6e:d0:7c:c9:c4:48:3f:9b:52:ad:
a1:d7:57:e1:0b:f7:4f:79:d7:1b:31:b5:60:60:1f:
0d:d8:e5:1f:a1:26:a5:4f:f2:64:0e:09:c0:46:04:
2f:7f:5f:88:cd:fd:33:06:4c:e2:4d:1f:39:38:fe:
02:ee:e8:8c:7d:52:96:25:c2:5d:16:e5:eb:02:78:
56:4d:b7:68:5c:c0:57:60:f4:83:22:53:33:be:d8:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:08:C3:30:46:8D:F2:A7:D3:49:7D:29:D6:D5:A1:4E:3B:D1:A4:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a248c6d8-eab1-3e95-99fb-ed8cd4ebc53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:bd:3f:3c:2f:10:8f:fb:e5:e4:ba:a9:42:b9:40:49:24:47:
3d:8f:be:89:bf:a5:ac:08:a5:4b:bc:0e:0a:01:6a:6d:bb:52:
9d:2e:16:43:ae:0d:7c:9b:2e:4f:3a:4a:34:83:9f:b8:fb:8b:
57:30:55:c5:f0:95:d0:d8:5d:9f:5f:38:23:ba:34:fc:a8:94:
1d:be:18:4a:9c:48:2a:5d:1c:da:b4:14:f0:93:51:02:82:58:
88:80:dc:32:ea:17:95:ed:bd:b6:29:28:19:d8:69:1a:da:0d:
8f:9b:ac:3f:84:96:60:31:af:cf:8f:41:23:38:4b:28:0a:30:
6c:63:21:df:d2:83:db:61:16:15:36:bc:5b:ad:dd:a4:c3:0c:
f3:e6:56:55:0f:fd:d2:9a:bf:8f:0b:9e:60:f9:58:e8:e6:ff:
af:b6:17:68:27:5b:17:b9:a0:53:62:f9:ab:24:fc:1d:62:34:
b0:14:78:17:7c:fc:33:3c:03:25:cd:8e:ad:c5:52:e8:4f:5c:
ce:1c:3a:43:08:9c:44:9b:0d:60:da:4b:73:7f:57:c9:93:3d:
df:ed:21:2a:01:ae:95:5d:fe:f8:99:a2:61:3b:ef:32:12:68:
9a:ea:e7:57:bc:5f:e4:71:70:05:25:45:1e:02:36:a6:4e:5a:
fb:cf:63:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbb1sjU7W90QoOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
NDIxZjY1YTItNWVmZi00NzhiLThkNjUtMzBiNWEwMzY5ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4YoRi0iKqZaIi1euB2JLdTwQ/B/0TbQQk9G
/lZkjAO9mEnnAgOCRMGZIaq+/OEbkhEwwvjdjnqw9O8ZLpXM+CGtNBUSo1WIsoJN
y9CYkUNbVUreq+h1rjVYtWtZ8anXQrRf+KYj8F+Su8xOQvhUMG+sXodpPo6Dx56e
jtYZW4LrWoBh4vFkKQ4o/nvJFVy6DxWbtage7oCCDEVvTClUCcVXK0+Tglyjcm7Q
fMnESD+bUq2h11fhC/dPedcbMbVgYB8N2OUfoSalT/JkDgnARgQvf1+Izf0zBkzi
TR85OP4C7uiMfVKWJcJdFuXrAnhWTbdoXMBXYPSDIlMzvtj3KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0IwzBGjfKn00l9KdbVoU470aScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTI0OGM2ZDgtZWFiMS0z
ZTk1LTk5ZmItZWQ4Y2Q0ZWJjNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgBoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu9PzwvEI/75eS6qUK5QEkkRz2Pvom/pawIpUu8DgoBam27Up0uFkOu
DXybLk86SjSDn7j7i1cwVcXwldDYXZ9fOCO6NPyolB2+GEqcSCpdHNq0FPCTUQKC
WIiA3DLqF5XtvbYpKBnYaRraDY+brD+ElmAxr8+PQSM4SygKMGxjId/Sg9thFhU2
vFut3aTDDPPmVlUP/dKav48LnmD5WOjm/6+2F2gnWxe5oFNi+ask/B1iNLAUeBd8
/DM8AyXNjq3FUuhPXM4cOkMInESbDWDaS3N/V8mTPd/tISoBrpVd/viZomE77zIS
aJrq51e8X+RxcAUlRR4CNqZOWvvPY4I=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:47 2025 by rpki-client