Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dc7922b9-79b0-3dbb-ab7c-99e8f03f4818.roa
File: dc7922b9-79b0-3dbb-ab7c-99e8f03f4818.roa (raw, json)
Hash identifier: rzURNVRD0MTSy8mzw/m65GNpfO8KKMX9jc492RtU4Qk=
Subject key identifier: EE:43:35:D8:2B:8A:74:D4:15:A0:B0:74:1F:64:55:B0:A3:62:59:95
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844079B3A9C7BDAF4D2FFAB3AD8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dc7922b9-79b0-3dbb-ab7c-99e8f03f4818.roa
Signing time: Mon 27 Nov 2023 18:22:34 +0000
ROA not before: Mon 27 Nov 2023 18:22:34 +0000
ROA not after: Sun 25 Feb 2024 18:22:34 +0000
asID: 399045
IP address blocks: 166.1.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:07:9b:3a:9c:7b:da:f4:d2:ff:ab:3a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 27 18:22:34 2023 GMT
Not After : Feb 25 18:22:34 2024 GMT
Subject: CN=e0bce0fb-a897-459d-96b4-6dc432da51a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:d4:aa:89:37:3d:3d:e6:28:1a:b5:42:4a:
19:8f:90:f0:45:69:42:37:ab:f2:07:03:32:6c:2a:
07:b2:7d:03:71:93:a7:20:b8:14:a6:3b:5e:3d:83:
90:da:2d:a2:d9:86:7f:ad:3e:c8:73:a7:e6:45:fb:
5c:44:e4:ed:c8:fa:9a:75:b7:e5:5a:52:50:e6:6a:
15:36:a2:d3:0b:a0:e7:fc:41:a6:a5:ff:ba:48:f5:
e3:0b:65:4c:88:24:8b:b0:e2:99:5e:ae:a2:23:c8:
41:b9:12:75:55:ca:5e:54:22:fb:a6:15:c5:f2:cb:
56:d8:05:4c:c2:3b:ff:42:00:80:9c:fe:87:63:1d:
f0:df:49:9b:b0:f3:a8:46:44:b3:c2:55:69:06:98:
75:9d:f1:ba:fd:3c:aa:3b:84:ea:76:22:aa:11:18:
78:80:d7:3f:fb:2f:8a:e6:52:06:d1:ce:9a:07:12:
7c:40:0b:56:8d:a8:ba:04:66:97:b3:4f:8f:43:23:
16:d4:b0:7e:e4:1c:c0:4c:fc:55:5f:5c:99:a2:c9:
6a:2a:80:a9:04:92:56:11:fb:d0:91:af:ee:75:67:
aa:da:98:af:ce:09:c3:ca:18:53:22:1e:9a:85:8d:
cd:31:1e:83:1f:2b:0f:27:c1:57:f3:b6:db:8c:61:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:35:D8:2B:8A:74:D4:15:A0:B0:74:1F:64:55:B0:A3:62:59:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dc7922b9-79b0-3dbb-ab7c-99e8f03f4818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:c2:54:09:10:7c:52:70:ef:34:3c:f6:d4:4e:53:e5:47:6b:
ab:38:fb:84:68:99:5f:3e:78:ec:4f:d4:b6:dc:4f:7e:23:3c:
b1:c1:ac:c1:c0:e1:6b:ae:d7:ec:48:1d:be:9f:f5:f1:7f:27:
91:d1:45:30:99:32:38:16:6c:98:45:70:38:18:71:f2:27:60:
da:bf:58:e5:9c:5c:b8:30:eb:9d:4b:7c:c3:aa:54:63:04:36:
e8:75:2e:12:d4:2e:d6:02:9f:81:94:08:bb:fa:bb:b0:76:32:
2a:e6:57:6a:69:b4:82:5e:05:ae:1b:02:4f:de:24:b4:92:b6:
a0:db:e0:db:e8:d9:32:26:b5:dd:d2:26:7d:02:13:06:c5:a8:
62:53:4d:c3:a7:5a:fc:54:59:4d:ab:f4:1f:1b:9f:5d:21:22:
37:e1:51:ed:83:38:eb:45:9f:4c:9a:da:d2:9d:54:73:18:52:
a3:30:14:93:b3:65:24:77:08:a4:bb:68:ed:93:33:61:82:a0:
da:2c:94:77:dc:15:a7:c1:ee:0c:df:6f:dc:26:01:f1:8e:0e:
d3:78:bf:7f:b1:f4:da:33:f4:2a:e6:68:dc:00:3f:e3:b6:6d:
7f:f5:d6:40:aa:4a:20:20:ba:c9:cb:ce:d8:78:c2:40:13:ec:
af:7d:98:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQHmzqce9r00v+rOtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTEyNzE4MjIzNFoXDTI0MDIyNTE4MjIzNFowLzEtMCsGA1UEAxMk
ZTBiY2UwZmItYTg5Ny00NTlkLTk2YjQtNmRjNDMyZGE1MWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6rUqok3PT3mKBq1QkoZj5DwRWlCN6vyBwMy
bCoHsn0DcZOnILgUpjtePYOQ2i2i2YZ/rT7Ic6fmRftcROTtyPqadbflWlJQ5moV
NqLTC6Dn/EGmpf+6SPXjC2VMiCSLsOKZXq6iI8hBuRJ1VcpeVCL7phXF8stW2AVM
wjv/QgCAnP6HYx3w30mbsPOoRkSzwlVpBph1nfG6/TyqO4TqdiKqERh4gNc/+y+K
5lIG0c6aBxJ8QAtWjai6BGaXs0+PQyMW1LB+5BzATPxVX1yZoslqKoCpBJJWEfvQ
ka/udWeq2pivzgnDyhhTIh6ahY3NMR6DHysPJ8FX87bbjGHi2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5DNdgrinTUFaCwdB9kVbCjYlmVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGM3OTIyYjktNzliMC0z
ZGJiLWFiN2MtOTllOGYwM2Y0ODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7CVAkQfFJw7zQ89tROU+VHa6s4+4RomV8+eOxP1LbcT34jPLHBrMHA
4Wuu1+xIHb6f9fF/J5HRRTCZMjgWbJhFcDgYcfInYNq/WOWcXLgw651LfMOqVGME
Nuh1LhLULtYCn4GUCLv6u7B2MirmV2pptIJeBa4bAk/eJLSStqDb4Nvo2TImtd3S
Jn0CEwbFqGJTTcOnWvxUWU2r9B8bn10hIjfhUe2DOOtFn0ya2tKdVHMYUqMwFJOz
ZSR3CKS7aO2TM2GCoNoslHfcFafB7gzfb9wmAfGODtN4v3+x9Noz9CrmaNwAP+O2
bX/11kCqSiAgusnLzth4wkAT7K99mAo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:04 2025 by rpki-client