Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d29bcd4d-50ac-3faf-b1b8-91894ca50d6c.roa
File: d29bcd4d-50ac-3faf-b1b8-91894ca50d6c.roa (raw, json)
Hash identifier: LgIc0zGj+McEF9Jc0tXmk6BgsZy+2RDEW5+F4W4uyWk=
Subject key identifier: 08:79:35:7A:9A:FB:6B:95:21:8C:B3:D6:90:6B:37:9B:A0:7F:B7:77
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BDF1AA834DEF2AFA0E544F90
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d29bcd4d-50ac-3faf-b1b8-91894ca50d6c.roa
Signing time: Tue 01 Aug 2023 16:19:58 +0000
ROA not before: Tue 01 Aug 2023 16:19:58 +0000
ROA not after: Mon 30 Oct 2023 16:19:58 +0000
asID: 11798
IP address blocks: 166.1.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bd:f1:aa:83:4d:ef:2a:fa:0e:54:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 1 16:19:58 2023 GMT
Not After : Oct 30 16:19:58 2023 GMT
Subject: CN=cc32e042-d767-49db-ae8d-f5c39df2bf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:e2:be:4b:ce:b6:6d:7d:1c:08:96:4c:6a:
39:0a:af:6f:25:95:43:ec:64:4b:ab:01:ea:a4:11:
6c:bd:ee:77:69:29:8f:cc:62:81:47:48:26:ad:b7:
b1:09:59:b9:3c:73:de:1a:fd:c6:17:ca:bf:5c:f8:
57:b0:ad:51:9b:c4:47:7e:45:04:30:d7:dd:a6:75:
3f:5c:d3:06:17:00:fb:3a:8f:4e:8d:78:2e:54:0a:
39:6f:61:a7:32:09:98:72:fa:02:c1:32:bb:b9:37:
6d:50:af:52:d8:65:fc:ba:3e:78:2d:11:4a:6d:a5:
3e:8e:73:77:29:f1:42:be:52:4e:c6:88:3b:43:90:
67:ec:61:ad:16:62:1c:52:fe:68:cd:1c:42:14:a9:
f4:64:07:88:1e:fe:0b:0a:7e:31:77:e0:f7:7c:69:
27:aa:b3:24:3f:35:ff:e0:9a:d1:32:e7:c9:a0:b6:
fe:c6:04:20:ff:86:7e:80:ee:4f:56:35:c0:8b:60:
57:a9:a5:c8:91:11:0c:4a:69:15:bf:c5:be:b8:3c:
33:ad:ca:09:29:8e:1e:a1:e8:cc:bf:dc:e9:42:4d:
82:ac:22:26:8e:cd:0c:9f:1f:cc:24:29:24:91:e3:
9e:db:47:ce:6f:a7:93:1b:cc:7a:8d:78:60:03:60:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:35:7A:9A:FB:6B:95:21:8C:B3:D6:90:6B:37:9B:A0:7F:B7:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d29bcd4d-50ac-3faf-b1b8-91894ca50d6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:0a:f2:eb:52:f7:75:7f:e0:43:a4:fd:f3:52:d9:f3:fe:6f:
73:60:7d:7a:a1:38:4d:b8:c4:b6:f6:2c:af:49:60:d0:0b:32:
1a:b0:36:11:93:6f:97:0d:6d:df:51:e5:ba:36:83:96:11:60:
e0:b6:dd:3b:87:28:c1:1f:c3:d8:84:20:e7:2c:92:4a:1a:d0:
0a:05:de:03:fd:2f:89:b4:99:4e:5d:4f:9d:91:1b:52:91:77:
f4:d9:c5:69:87:07:ea:9d:1d:61:07:02:8b:2e:00:62:50:ff:
71:8c:74:00:82:ca:47:e6:c4:87:a1:c0:05:50:fe:b0:3f:a7:
ef:34:dd:92:87:2b:b4:4e:9f:a0:96:d2:d9:34:21:b7:a5:c5:
c8:84:b8:2f:b9:25:49:7a:9d:37:3a:67:f0:5c:41:98:90:78:
39:24:ea:ee:1f:70:91:79:cd:fe:9b:c5:87:be:9e:e0:bc:02:
d9:b4:6b:55:15:c7:50:e0:67:92:bb:64:28:70:ca:c4:3f:f2:
05:da:02:23:99:97:48:4a:0e:09:8f:7e:ca:3f:54:b1:85:c5:
84:ca:f0:5c:58:71:82:ed:bf:38:49:56:51:74:06:e0:08:6d:
21:6f:56:bf:93:9d:d3:c1:49:a3:6d:f6:4f:be:d1:8b:8c:61:
4d:aa:2a:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK98aqDTe8q+g5UT5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgwMTE2MTk1OFoXDTIzMTAzMDE2MTk1OFowLzEtMCsGA1UEAxMk
Y2MzMmUwNDItZDc2Ny00OWRiLWFlOGQtZjVjMzlkZjJiZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PvivkvOtm19HAiWTGo5Cq9vJZVD7GRLqwHq
pBFsve53aSmPzGKBR0gmrbexCVm5PHPeGv3GF8q/XPhXsK1Rm8RHfkUEMNfdpnU/
XNMGFwD7Oo9OjXguVAo5b2GnMgmYcvoCwTK7uTdtUK9S2GX8uj54LRFKbaU+jnN3
KfFCvlJOxog7Q5Bn7GGtFmIcUv5ozRxCFKn0ZAeIHv4LCn4xd+D3fGknqrMkPzX/
4JrRMufJoLb+xgQg/4Z+gO5PVjXAi2BXqaXIkREMSmkVv8W+uDwzrcoJKY4eoejM
v9zpQk2CrCImjs0Mnx/MJCkkkeOe20fOb6eTG8x6jXhgA2DKOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAh5NXqa+2uVIYyz1pBrN5ugf7d3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDI5YmNkNGQtNTBhYy0z
ZmFmLWIxYjgtOTE4OTRjYTUwZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcK8utS93V/4EOk/fNS2fP+b3NgfXqhOE24xLb2LK9JYNALMhqwNhGT
b5cNbd9R5bo2g5YRYOC23TuHKMEfw9iEIOcskkoa0AoF3gP9L4m0mU5dT52RG1KR
d/TZxWmHB+qdHWEHAosuAGJQ/3GMdACCykfmxIehwAVQ/rA/p+803ZKHK7ROn6CW
0tk0IbelxciEuC+5JUl6nTc6Z/BcQZiQeDkk6u4fcJF5zf6bxYe+nuC8Atm0a1UV
x1DgZ5K7ZChwysQ/8gXaAiOZl0hKDgmPfso/VLGFxYTK8FxYcYLtvzhJVlF0BuAI
bSFvVr+TndPBSaNt9k++0YuMYU2qKk4=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:30 2025 by rpki-client