Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa
File: 1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa (raw, json)
Hash identifier: K5QLbZc3Wfj1i/9AIngsfvVgc/ckSPzJNy+DrxTjGao=
Subject key identifier: 18:95:E5:89:4B:72:F3:53:BA:94:46:BA:8F:6D:CD:E3:84:BE:25:02
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6E3A96FA13F5AE15DF180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 54288
IP address blocks: 66.160.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:e3:a9:6f:a1:3f:5a:e1:5d:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=decc7789-415a-41a9-ad5f-3284a02704a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:12:0a:42:96:e7:97:ec:d7:d9:81:23:fe:
6e:b2:5f:5b:dc:77:20:ae:5a:b6:54:39:c0:8d:c7:
d6:49:d0:7d:64:96:03:ed:2f:8a:c4:a1:d6:2f:24:
5e:f8:a6:de:9e:b4:fd:54:8b:27:82:3a:c4:6a:8c:
01:43:9b:9c:9a:78:61:75:1d:af:91:3b:df:51:61:
5a:65:60:35:9c:85:26:be:94:b7:4f:3f:70:8c:f8:
68:d4:c3:19:f6:6f:f6:c6:19:86:05:ce:09:43:da:
0c:c2:9b:c2:cb:3f:8d:4a:ec:8d:02:54:f8:61:b3:
1e:02:e0:9e:35:18:0c:b3:88:9f:41:0c:6f:1d:ea:
97:63:64:6f:52:8b:99:5f:34:46:ca:8b:6a:d6:51:
88:bd:c3:ee:77:b3:f4:67:35:05:55:cd:0d:80:51:
ea:f2:30:fa:d5:bc:07:25:0c:b1:3e:8d:44:72:84:
db:06:4a:c2:9f:5b:36:94:db:0c:82:73:a1:0f:dd:
c1:62:c4:5f:e9:7d:8f:4d:c0:37:93:f7:03:9d:e6:
6b:62:98:f9:3b:f1:29:3e:02:a1:57:14:27:ec:47:
d7:67:0c:66:e5:50:b3:8f:0d:09:6d:81:26:ee:6d:
7c:cd:59:98:0e:89:29:00:7b:49:e8:65:13:7a:98:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:E5:89:4B:72:F3:53:BA:94:46:BA:8F:6D:CD:E3:84:BE:25:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f482f48-4d3c-34ec-9ca5-5ccd968e57f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:8a:5e:3a:4b:6e:9d:c9:37:ec:da:be:70:60:29:7b:1d:85:
80:a9:c5:05:21:7e:fc:15:be:f0:8f:9a:2a:56:1b:13:c7:1c:
47:36:24:88:18:4d:57:db:8d:65:2f:21:5a:13:fd:d6:16:63:
eb:0f:ed:06:e3:ca:52:ef:b1:2e:e3:9f:54:a8:c5:76:af:d5:
86:27:16:7d:f3:af:00:ac:0e:c6:5c:cc:40:fa:87:d4:df:1c:
d5:3a:28:0e:2b:eb:ec:26:23:c3:29:0e:23:e7:1e:82:42:4f:
a0:cd:54:d3:e1:42:01:11:f7:d7:7c:b7:8c:1a:1e:09:5c:b2:
37:fe:96:02:5d:cd:28:99:ab:84:92:c1:54:03:62:02:c5:3c:
92:3f:cd:68:f9:fd:de:77:f7:53:9c:c6:f6:90:be:b4:5d:73:
eb:4e:48:d1:21:ad:56:a2:55:9e:f6:20:f7:f2:b6:7a:32:a9:
d6:2d:38:05:d0:84:10:f4:5d:aa:82:b5:f0:e8:d5:11:04:25:
4c:ca:0a:12:2b:16:9c:28:20:08:97:2c:a6:bb:70:7b:34:e7:
c2:f6:36:19:e2:2c:2e:ea:7f:d3:ca:42:0e:f1:6c:cb:38:36:
cc:b1:09:2a:e7:e5:67:32:2b:a6:c6:3b:95:00:c9:1c:63:d8:
38:29:60:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9puOpb6E/WuFd8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGVjYzc3ODktNDE1YS00MWE5LWFkNWYtMzI4NGEwMjcwNGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsQSCkKW55fs19mBI/5usl9b3Hcgrlq2VDnA
jcfWSdB9ZJYD7S+KxKHWLyRe+KbenrT9VIsngjrEaowBQ5ucmnhhdR2vkTvfUWFa
ZWA1nIUmvpS3Tz9wjPho1MMZ9m/2xhmGBc4JQ9oMwpvCyz+NSuyNAlT4YbMeAuCe
NRgMs4ifQQxvHeqXY2RvUouZXzRGyotq1lGIvcPud7P0ZzUFVc0NgFHq8jD61bwH
JQyxPo1EcoTbBkrCn1s2lNsMgnOhD93BYsRf6X2PTcA3k/cDneZrYpj5O/EpPgKh
VxQn7EfXZwxm5VCzjw0JbYEm7m18zVmYDokpAHtJ6GUTepi5ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiV5YlLcvNTupRGuo9tzeOEviUCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWY0ODJmNDgtNGQzYy0z
NGVjLTljYTUtNWNjZDk2OGU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyKXjpLbp3JN+zavnBgKXsdhYCpxQUhfvwVvvCPmipWGxPHHEc2JIgY
TVfbjWUvIVoT/dYWY+sP7QbjylLvsS7jn1SoxXav1YYnFn3zrwCsDsZczED6h9Tf
HNU6KA4r6+wmI8MpDiPnHoJCT6DNVNPhQgER99d8t4waHglcsjf+lgJdzSiZq4SS
wVQDYgLFPJI/zWj5/d5391OcxvaQvrRdc+tOSNEhrVaiVZ72IPfytnoyqdYtOAXQ
hBD0XaqCtfDo1REEJUzKChIrFpwoIAiXLKa7cHs058L2NhniLC7qf9PKQg7xbMs4
NsyxCSrn5WcyK6bGO5UAyRxj2DgpYN8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:42:17 2025 by rpki-client