Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e63ad9a1-95a5-326c-99d1-4f8e18f8c9d7.roa
File: e63ad9a1-95a5-326c-99d1-4f8e18f8c9d7.roa (raw, json)
Hash identifier: e6FiiaKCKRJXOMdJ2MMkrNLUawgD20lHSuW6Iaod49Y=
Subject key identifier: F3:02:65:DA:97:FA:46:D6:F5:92:CE:49:34:78:43:16:FD:A3:8C:A2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328583DD3CB5C261D3D25D717FB5389
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e63ad9a1-95a5-326c-99d1-4f8e18f8c9d7.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Fri 09 Aug 2024 04:00:00 +0000
asID: 49999
IP address blocks: 166.0.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d3:cb:5c:26:1d:3d:25:d7:17:fb:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Aug 9 04:00:00 2024 GMT
Subject: CN=bb8d01d9-52b8-40cf-bfdf-926206799b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:cc:80:87:a7:62:b5:21:ae:17:9b:b0:e9:
9e:68:df:ca:11:48:45:33:9e:a8:04:f6:f9:39:24:
69:d4:53:8c:28:5d:51:c7:33:fe:0f:5c:0f:c7:7b:
e7:6f:b5:e4:1b:ab:6a:38:8e:a6:ed:96:08:4a:55:
a5:9e:8f:39:e1:b7:d3:df:8b:b9:3c:a0:f9:38:02:
64:b3:d0:9e:6f:c7:43:c9:3f:ec:8a:42:a9:d4:b8:
0b:ee:e3:58:2d:2d:0a:5b:7d:26:a7:34:de:b1:6b:
7b:c3:6d:b5:43:89:8f:6e:0f:b5:7b:32:81:91:15:
79:74:14:30:69:1a:46:56:40:e7:cf:67:62:60:1f:
0c:dd:29:a6:45:81:1b:05:05:17:8f:a0:14:99:49:
b6:18:c6:2e:ba:28:58:91:6f:0b:f7:2c:83:80:9c:
34:35:46:15:92:e8:c6:7d:6a:8f:36:4c:fb:38:d1:
6a:b1:f2:22:f4:e5:11:a1:48:48:78:39:a6:d0:24:
d9:fe:18:7b:7c:22:eb:25:42:16:9d:60:11:fd:e2:
68:fc:4a:bc:5e:08:3d:63:e9:be:70:3a:e9:c0:ef:
74:4e:f8:bf:55:83:25:32:92:b6:23:6d:2f:c2:15:
26:1d:bb:28:57:8f:32:a9:ef:ae:f0:32:bd:6d:f4:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:65:DA:97:FA:46:D6:F5:92:CE:49:34:78:43:16:FD:A3:8C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e63ad9a1-95a5-326c-99d1-4f8e18f8c9d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:99:0d:dd:18:58:a4:e3:7b:f8:cf:d7:3a:49:7f:02:85:e0:
1a:60:c0:02:20:6b:d2:fb:16:c8:e7:d6:c5:ea:d0:e2:ae:4e:
29:02:10:e6:18:72:0b:16:94:81:98:25:1f:ab:ed:a9:bf:12:
d2:8f:39:38:06:dd:5e:31:6f:ad:96:68:99:51:90:6b:8d:a5:
33:98:bc:b5:e7:12:13:73:c8:9c:da:e9:91:b5:19:20:57:5c:
2d:e4:68:cc:b9:7e:0c:74:52:e0:5c:9f:7d:55:f8:ff:18:2a:
3c:81:10:e3:bd:67:88:ea:45:f9:f7:92:c9:7d:11:01:97:cf:
90:fa:67:57:43:6b:d2:aa:d0:a0:c1:ae:58:26:0b:52:0a:b1:
26:8b:97:e7:22:e4:9a:a5:ca:36:3c:60:1e:4a:4d:99:10:c8:
00:02:91:1f:48:ea:fe:f7:aa:e2:1c:c3:6b:13:34:e6:26:68:
e8:af:f6:21:bb:9a:32:be:01:e6:9a:04:bf:18:94:9d:b7:f9:
54:92:7d:d0:af:2f:18:f0:c1:45:2e:8e:b5:19:90:57:a8:a4:
e2:7a:39:cf:9c:eb:3f:26:aa:9a:a5:a4:1a:7a:c2:1a:e6:d7:
45:26:07:b3:a5:bf:81:b9:fb:fd:ca:56:38:73:6c:c8:4a:db:
13:c4:75:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3Ty1wmHT0l1xf7U4kwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI0MDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YmI4ZDAxZDktNTJiOC00MGNmLWJmZGYtOTI2MjA2Nzk5YjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoPMgIenYrUhrhebsOmeaN/KEUhFM56oBPb5
OSRp1FOMKF1RxzP+D1wPx3vnb7XkG6tqOI6m7ZYISlWlno854bfT34u5PKD5OAJk
s9Ceb8dDyT/sikKp1LgL7uNYLS0KW30mpzTesWt7w221Q4mPbg+1ezKBkRV5dBQw
aRpGVkDnz2diYB8M3SmmRYEbBQUXj6AUmUm2GMYuuihYkW8L9yyDgJw0NUYVkujG
fWqPNkz7ONFqsfIi9OURoUhIeDmm0CTZ/hh7fCLrJUIWnWAR/eJo/Eq8Xgg9Y+m+
cDrpwO90Tvi/VYMlMpK2I20vwhUmHbsoV48yqe+u8DK9bfTdwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMCZdqX+kbW9ZLOSTR4Qxb9o4yiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTYzYWQ5YTEtOTVhNS0z
MjZjLTk5ZDEtNGY4ZTE4ZjhjOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqZDd0YWKTje/jP1zpJfwKF4BpgwAIga9L7Fsjn1sXq0OKuTikCEOYY
cgsWlIGYJR+r7am/EtKPOTgG3V4xb62WaJlRkGuNpTOYvLXnEhNzyJza6ZG1GSBX
XC3kaMy5fgx0UuBcn31V+P8YKjyBEOO9Z4jqRfn3ksl9EQGXz5D6Z1dDa9Kq0KDB
rlgmC1IKsSaLl+ci5JqlyjY8YB5KTZkQyAACkR9I6v73quIcw2sTNOYmaOiv9iG7
mjK+AeaaBL8YlJ23+VSSfdCvLxjwwUUujrUZkFeopOJ6Oc+c6z8mqpqlpBp6whrm
10UmB7Olv4G5+/3KVjhzbMhK2xPEdao=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:46 2025 by rpki-client