Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb551a76-228a-3ce4-98db-48a2ddc796d2.roa
File: fb551a76-228a-3ce4-98db-48a2ddc796d2.roa (raw, json)
Hash identifier: FlNagHI9o05O3OFh5Ux5pTt6N+Wv065c2s5rmLr+jD0=
Subject key identifier: 37:03:24:38:36:3E:5B:71:E0:EF:8C:07:D8:B8:FB:B2:C2:A3:8A:98
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425C725C0FB09178449D554F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb551a76-228a-3ce4-98db-48a2ddc796d2.roa
Signing time: Tue 27 Jun 2023 18:10:03 +0000
ROA not before: Tue 27 Jun 2023 18:10:03 +0000
ROA not after: Mon 25 Sep 2023 18:10:03 +0000
asID: 11798
IP address blocks: 166.1.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:5c:72:5c:0f:b0:91:78:44:9d:55:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 27 18:10:03 2023 GMT
Not After : Sep 25 18:10:03 2023 GMT
Subject: CN=0211448b-96a1-4c03-a5f7-d615e12e60c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:6b:5c:7a:b9:ec:1a:0e:ea:ee:ce:cc:cb:
7a:b9:07:e1:d3:c0:91:c6:a0:52:b4:b1:b5:ea:17:
5c:0b:c8:66:99:1d:76:ac:02:63:4d:d4:62:fd:bb:
ae:78:4b:a0:73:c2:90:cd:9c:3d:2f:17:dd:9e:cc:
db:ee:ca:0b:69:b5:cc:76:13:88:3f:9d:25:69:c6:
38:96:f9:9e:52:a4:9d:98:2f:24:d5:f9:2e:97:c9:
e4:fc:06:bd:17:3a:0a:83:71:b6:21:22:80:c2:e1:
f9:79:a8:56:8a:d4:ae:48:b2:7f:2d:1b:bc:f8:f8:
db:e7:a1:f2:63:c1:ca:7d:b5:44:22:d1:59:d8:7c:
ff:e3:ca:2c:93:d5:12:0a:42:e6:b8:c6:b7:9b:8d:
90:04:e9:f3:14:70:d3:52:98:c4:ae:0b:c9:7a:fe:
dc:c7:cb:92:81:96:a0:cc:a1:43:92:f0:f0:d0:ef:
f9:96:17:d3:42:ca:af:1e:4d:1f:bf:29:bc:ba:a9:
9c:4f:dd:39:13:1d:61:cd:59:fe:2d:fa:a6:0d:93:
ff:88:38:da:a7:9b:c7:f6:7b:33:2f:60:4e:c2:b5:
07:c3:40:0c:db:84:d8:ad:02:77:f5:0e:85:25:67:
db:03:89:7b:f3:3a:4f:88:db:49:72:e0:a5:92:df:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:24:38:36:3E:5B:71:E0:EF:8C:07:D8:B8:FB:B2:C2:A3:8A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb551a76-228a-3ce4-98db-48a2ddc796d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:8b:9f:10:59:13:f0:66:8f:55:00:45:51:fd:08:1d:6a:be:
9b:2f:17:aa:93:34:2e:fc:d1:b6:d6:97:0b:91:61:2a:74:f7:
18:c3:4f:86:55:2d:1b:db:35:4b:99:c0:87:d2:5f:53:9b:ab:
6b:2a:f0:24:f1:25:ef:02:53:53:b9:67:24:20:03:ae:df:0e:
b4:24:49:87:77:b5:6c:ee:34:db:84:4d:1e:8e:d6:00:92:b1:
4d:00:00:12:6a:0a:5d:61:73:ef:63:a0:f2:10:db:25:4c:d8:
2e:88:a4:ea:59:9d:e8:3a:b3:0c:b0:ef:dc:f8:ce:9c:dd:17:
32:29:48:43:e1:f3:cc:1e:fe:81:9a:c1:8c:90:5e:b7:18:97:
5d:3f:6c:7d:88:21:62:04:fe:3b:d8:2d:46:35:de:19:74:a2:
9d:c9:21:0e:a6:f1:7d:41:47:32:c2:77:f8:fd:ab:ef:10:d2:
19:19:33:d7:e7:59:5c:ea:0c:d5:70:91:3d:d0:79:6b:4a:a7:
15:a7:f2:4b:f3:18:e1:1c:d4:ec:38:2c:41:c5:20:93:be:87:
1a:94:55:8f:fc:7d:93:3c:8f:12:c9:7d:cf:79:1b:da:e3:12:
20:46:b4:01:08:ec:c4:c4:27:40:3e:64:e3:93:a4:d2:f6:3e:
b5:64:61:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJcclwPsJF4RJ1VTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYyNzE4MTAwM1oXDTIzMDkyNTE4MTAwM1owLzEtMCsGA1UEAxMk
MDIxMTQ0OGItOTZhMS00YzAzLWE1ZjctZDYxNWUxMmU2MGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog1rXHq57BoO6u7OzMt6uQfh08CRxqBStLG1
6hdcC8hmmR12rAJjTdRi/buueEugc8KQzZw9Lxfdnszb7soLabXMdhOIP50lacY4
lvmeUqSdmC8k1fkul8nk/Aa9FzoKg3G2ISKAwuH5eahWitSuSLJ/LRu8+Pjb56Hy
Y8HKfbVEItFZ2Hz/48osk9USCkLmuMa3m42QBOnzFHDTUpjErgvJev7cx8uSgZag
zKFDkvDw0O/5lhfTQsqvHk0fvym8uqmcT905Ex1hzVn+LfqmDZP/iDjap5vH9nsz
L2BOwrUHw0AM24TYrQJ39Q6FJWfbA4l78zpPiNtJcuClkt+Y4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcDJDg2Pltx4O+MB9i4+7LCo4qYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmI1NTFhNzYtMjI4YS0z
Y2U0LTk4ZGItNDhhMmRkYzc5NmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKLnxBZE/Bmj1UARVH9CB1qvpsvF6qTNC780bbWlwuRYSp09xjDT4ZV
LRvbNUuZwIfSX1Obq2sq8CTxJe8CU1O5ZyQgA67fDrQkSYd3tWzuNNuETR6O1gCS
sU0AABJqCl1hc+9joPIQ2yVM2C6IpOpZneg6swyw79z4zpzdFzIpSEPh88we/oGa
wYyQXrcYl10/bH2IIWIE/jvYLUY13hl0op3JIQ6m8X1BRzLCd/j9q+8Q0hkZM9fn
WVzqDNVwkT3QeWtKpxWn8kvzGOEc1Ow4LEHFIJO+hxqUVY/8fZM8jxLJfc95G9rj
EiBGtAEI7MTEJ0A+ZOOTpNL2PrVkYSM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:11:23 2025 by rpki-client