Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd56788f-6973-39d7-baa8-2c44d69fe469.roa
File: dd56788f-6973-39d7-baa8-2c44d69fe469.roa (raw, json)
Hash identifier: O6CzLRwRQOdm8z+pdzNk7annAcAEbFHwHrxvH8FAWC0=
Subject key identifier: 91:06:EC:3A:72:68:0E:49:56:25:F0:B2:03:9E:99:29:53:C5:D2:1A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842218BDF447A9FB9EF6F7EE180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd56788f-6973-39d7-baa8-2c44d69fe469.roa
Signing time: Tue 06 Jun 2023 15:48:46 +0000
ROA not before: Tue 06 Jun 2023 15:48:46 +0000
ROA not after: Mon 04 Sep 2023 15:48:46 +0000
asID: 38337
IP address blocks: 166.1.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:21:8b:df:44:7a:9f:b9:ef:6f:7e:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 6 15:48:46 2023 GMT
Not After : Sep 4 15:48:46 2023 GMT
Subject: CN=a371d80b-6006-479d-81c7-b826791464ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:f0:79:2a:92:ee:f9:c1:40:9d:48:55:c2:
2c:e6:3d:29:94:d8:e4:b7:24:2b:5e:65:83:d7:e5:
db:45:4a:df:88:b3:43:08:19:54:5c:5f:6d:43:4b:
5b:9f:d6:fb:31:78:2a:11:5e:83:3d:ec:45:81:be:
9d:c2:8c:da:c3:6e:56:81:b2:ca:90:75:15:fb:31:
b2:35:46:ce:c5:4d:bf:5b:c2:8e:d2:cf:52:99:13:
ed:78:25:88:64:2d:37:71:a4:f4:40:38:9b:28:d9:
fb:42:19:2f:fa:29:d8:52:e1:f3:05:c9:87:0c:9b:
2e:62:53:89:0e:a0:df:e3:91:06:1e:72:5a:b8:17:
d1:5b:00:ed:7b:92:17:ee:68:71:19:60:84:ab:0d:
70:98:00:c5:76:bb:df:a1:05:07:7c:3b:e2:0a:e6:
d2:ff:52:26:e1:61:61:e0:12:04:ff:ce:87:5c:d6:
65:36:c7:ea:9d:c4:4e:c4:53:b1:d8:2c:6e:68:1b:
c0:9f:8d:70:54:ec:24:e6:f5:ef:c3:9b:a7:c5:fb:
fd:fb:d8:35:71:61:91:2d:10:28:af:53:26:bc:d2:
af:59:18:c9:89:dd:04:9d:f1:53:55:9c:85:47:d0:
73:f1:59:7c:d9:a0:af:a4:2d:57:08:e7:47:8f:01:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:06:EC:3A:72:68:0E:49:56:25:F0:B2:03:9E:99:29:53:C5:D2:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd56788f-6973-39d7-baa8-2c44d69fe469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:b1:21:fa:63:54:fb:c3:44:68:28:7f:26:7c:35:fd:5e:d3:
79:18:a0:c5:72:8a:6b:10:19:05:7d:9f:11:5a:41:ee:ac:24:
4d:82:1b:32:7e:19:44:ea:21:ef:99:4f:e1:01:f5:96:8f:e9:
0f:b3:39:bd:3a:32:69:23:88:84:d7:40:be:45:8e:d3:c7:3d:
70:03:de:3e:e5:a1:b6:96:e9:1a:92:c6:5d:02:32:6e:4c:a7:
3e:15:9e:1c:78:ed:c1:4d:ef:2a:1e:79:f4:a8:a6:b1:d2:c3:
a7:60:ce:c6:61:03:be:a6:36:06:d9:62:96:a5:5a:38:01:f2:
db:04:2e:6c:f9:46:5d:69:53:cf:57:e0:4c:f1:6c:38:08:fc:
e9:cb:ad:39:a5:3e:2d:9b:c3:4b:92:c7:77:1c:05:f2:72:cc:
0f:43:bd:35:7d:24:1b:03:1d:50:e0:c8:04:c6:26:15:7e:5a:
79:35:50:06:d1:c9:d3:e4:5f:f4:11:07:70:72:b7:32:27:6e:
ec:4c:54:f8:99:d5:46:fc:e2:ff:88:bf:9a:60:c2:ba:9b:2a:
d7:74:06:53:8c:ea:2f:f9:91:9f:a9:a5:ad:92:ef:80:11:ca:
68:37:d2:16:8e:f8:4b:34:01:07:84:fa:f2:23:16:06:ea:78:
a1:d6:cb:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIhi99Eep+5729+4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYwNjE1NDg0NloXDTIzMDkwNDE1NDg0NlowLzEtMCsGA1UEAxMk
YTM3MWQ4MGItNjAwNi00NzlkLTgxYzctYjgyNjc5MTQ2NGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPHweSqS7vnBQJ1IVcIs5j0plNjktyQrXmWD
1+XbRUrfiLNDCBlUXF9tQ0tbn9b7MXgqEV6DPexFgb6dwozaw25WgbLKkHUV+zGy
NUbOxU2/W8KO0s9SmRPteCWIZC03caT0QDibKNn7Qhkv+inYUuHzBcmHDJsuYlOJ
DqDf45EGHnJauBfRWwDte5IX7mhxGWCEqw1wmADFdrvfoQUHfDviCubS/1Im4WFh
4BIE/86HXNZlNsfqncROxFOx2CxuaBvAn41wVOwk5vXvw5unxfv9+9g1cWGRLRAo
r1MmvNKvWRjJid0EnfFTVZyFR9Bz8Vl82aCvpC1XCOdHjwHkDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJEG7DpyaA5JViXwsgOemSlTxdIaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGQ1Njc4OGYtNjk3My0z
OWQ3LWJhYTgtMmM0NGQ2OWZlNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAexIfpjVPvDRGgofyZ8Nf1e03kYoMVyimsQGQV9nxFaQe6sJE2CGzJ+
GUTqIe+ZT+EB9ZaP6Q+zOb06MmkjiITXQL5FjtPHPXAD3j7lobaW6RqSxl0CMm5M
pz4Vnhx47cFN7yoeefSoprHSw6dgzsZhA76mNgbZYpalWjgB8tsELmz5Rl1pU89X
4EzxbDgI/OnLrTmlPi2bw0uSx3ccBfJyzA9DvTV9JBsDHVDgyATGJhV+Wnk1UAbR
ydPkX/QRB3BytzInbuxMVPiZ1Ub84v+Iv5pgwrqbKtd0BlOM6i/5kZ+ppa2S74AR
ymg30haO+Es0AQeE+vIjFgbqeKHWy/U=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:22:59 2025 by rpki-client