Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1170725-d8fb-3a5b-9b6d-c533373517b1.roa
File: d1170725-d8fb-3a5b-9b6d-c533373517b1.roa (raw, json)
Hash identifier: KIrNPiDNuBDtHnGxbVUx2sJfjx2omexlqyVHxnAKe40=
Subject key identifier: 66:75:F6:A7:0E:FF:99:41:43:98:BB:E8:B3:3D:C5:DF:63:0F:11:6A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584500F56A4A7AD9D3A287199620
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1170725-d8fb-3a5b-9b6d-c533373517b1.roa
Signing time: Sun 25 Feb 2024 02:00:26 +0000
ROA not before: Sun 25 Feb 2024 02:00:26 +0000
ROA not after: Sat 25 May 2024 01:00:26 +0000
asID: 11798
IP address blocks: 166.1.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:00:f5:6a:4a:7a:d9:d3:a2:87:19:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 25 02:00:26 2024 GMT
Not After : May 25 01:00:26 2024 GMT
Subject: CN=369beb56-b757-4947-ad21-88e0d6f5a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:88:8e:a9:69:67:ce:55:d4:a0:7e:8a:e0:
fc:e4:25:d8:fd:0b:91:49:6c:65:ae:29:83:8a:4e:
1e:f8:2d:23:74:6c:ae:4a:17:e5:a4:f7:cc:be:bc:
59:8b:86:fc:d4:d0:56:3e:b0:c5:cd:5b:fd:b6:45:
f5:76:2b:b3:bb:ef:00:0b:94:41:d7:bb:c9:42:a2:
6a:3d:0f:21:86:9d:f9:0e:85:18:9d:06:bc:3e:21:
81:c3:9b:18:48:f8:9d:10:f2:44:1d:18:42:ba:97:
25:f2:61:48:63:42:06:63:c7:2c:08:62:d9:8d:21:
f6:8f:e0:b7:80:5f:2d:1d:2a:28:60:a6:33:66:98:
06:f3:f9:34:08:fc:bc:9d:08:36:f5:14:26:75:1a:
0d:03:3f:ab:1a:f9:60:3e:22:87:12:8f:12:64:68:
f8:64:c8:0b:20:e5:0e:d8:b8:55:98:e6:72:b9:62:
6c:1f:51:93:4d:d3:cd:91:be:12:ec:4f:17:99:b0:
01:b8:c8:d5:4e:3d:04:56:9c:28:83:65:e4:1a:23:
01:35:f0:54:2b:7f:70:f2:a9:0b:47:73:54:07:f8:
d4:cf:4e:89:d1:89:8f:3e:3a:fb:a2:72:c3:ea:6a:
50:e7:95:23:b3:d6:49:d9:ed:1a:48:cd:05:d8:cd:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:F6:A7:0E:FF:99:41:43:98:BB:E8:B3:3D:C5:DF:63:0F:11:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d1170725-d8fb-3a5b-9b6d-c533373517b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ce:fe:32:5c:7c:cc:fe:0a:06:97:7c:6b:94:9d:dd:3f:4a:
0b:7f:72:40:05:55:5c:d7:cb:af:1a:2f:31:f0:9d:ef:26:56:
5c:04:1e:28:5c:fa:68:89:1f:97:b5:54:d4:3e:12:a7:a0:06:
1c:9d:12:11:2b:c3:7d:ba:f1:bd:f2:bd:6e:34:dc:5c:4b:87:
50:2f:44:ee:ea:a4:fb:7f:0e:fe:20:2a:80:e5:b7:d4:c8:bc:
f8:8c:af:d8:c2:25:f0:8c:77:69:c5:29:05:84:c2:c3:ae:8f:
13:74:4d:5b:da:d0:16:7f:f0:0a:4f:bc:bd:35:8c:93:ee:db:
c0:00:d2:6f:47:7f:0c:3b:cc:16:fe:0b:2f:dd:08:36:8f:a1:
75:d7:c4:cc:99:9a:2e:4b:65:7c:3c:6c:3e:a7:59:a6:85:13:
cd:53:4e:79:1e:28:19:9a:d7:82:e6:96:1a:2a:7a:57:ab:cf:
c6:75:6b:c7:6b:2a:b1:f8:37:f2:ff:33:a7:84:7f:d2:10:1b:
22:a4:1d:38:ea:d0:46:f0:a3:5a:73:b7:ad:dc:ca:d7:8a:a3:
9c:62:a7:f2:a2:eb:21:9c:8a:48:98:20:09:e6:6b:3d:55:de:
fc:6e:1b:e9:12:a9:18:f5:d4:7f:65:a6:1c:6f:3b:78:1a:9a:
2a:ce:e0:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUA9WpKetnToocZliAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDIyNTAyMDAyNloXDTI0MDUyNTAxMDAyNlowLzEtMCsGA1UEAxMk
MzY5YmViNTYtYjc1Ny00OTQ3LWFkMjEtODhlMGQ2ZjVhMjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6yIjqlpZ85V1KB+iuD85CXY/QuRSWxlrimD
ik4e+C0jdGyuShflpPfMvrxZi4b81NBWPrDFzVv9tkX1diuzu+8AC5RB17vJQqJq
PQ8hhp35DoUYnQa8PiGBw5sYSPidEPJEHRhCupcl8mFIY0IGY8csCGLZjSH2j+C3
gF8tHSooYKYzZpgG8/k0CPy8nQg29RQmdRoNAz+rGvlgPiKHEo8SZGj4ZMgLIOUO
2LhVmOZyuWJsH1GTTdPNkb4S7E8XmbABuMjVTj0EVpwog2XkGiMBNfBUK39w8qkL
R3NUB/jUz06J0YmPPjr7onLD6mpQ55Ujs9ZJ2e0aSM0F2M3M4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZ19qcO/5lBQ5i76LM9xd9jDxFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDExNzA3MjUtZDhmYi0z
YTViLTliNmQtYzUzMzM3MzUxN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALO/jJcfMz+CgaXfGuUnd0/Sgt/ckAFVVzXy68aLzHwne8mVlwEHihc
+miJH5e1VNQ+EqegBhydEhErw3268b3yvW403FxLh1AvRO7qpPt/Dv4gKoDlt9TI
vPiMr9jCJfCMd2nFKQWEwsOujxN0TVva0BZ/8ApPvL01jJPu28AA0m9Hfww7zBb+
Cy/dCDaPoXXXxMyZmi5LZXw8bD6nWaaFE81TTnkeKBma14Lmlhoqelerz8Z1a8dr
KrH4N/L/M6eEf9IQGyKkHTjq0Ebwo1pzt63cyteKo5xip/Ki6yGcikiYIAnmaz1V
3vxuG+kSqRj11H9lphxvO3gamirO4H8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:29 2025 by rpki-client