Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/6d5b0b43-3b95-3e0b-a2eb-05f59cb9f246.roa
File: 6d5b0b43-3b95-3e0b-a2eb-05f59cb9f246.roa (raw, json)
Hash identifier: jNluFEhHeZOG0eKghyj/Urvxo9seWykTWo/uSFsw1LU=
Subject key identifier: D8:C3:D8:2F:E4:6F:14:91:29:FC:15:83:B4:93:2E:C4:0C:DD:63:0A
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F4328584A8A4E23BB674D879810E002C0
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/6d5b0b43-3b95-3e0b-a2eb-05f59cb9f246.roa
Signing time: Sat 17 May 2025 13:01:02 +0000
ROA not before: Sat 17 May 2025 13:01:02 +0000
ROA not after: Fri 15 Aug 2025 13:01:02 +0000
asID: 14618
IP address blocks: 161.38.192.0/22 maxlen: 22
161.38.196.0/22 maxlen: 22
161.38.200.0/22 maxlen: 22
161.38.204.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:8a:4e:23:bb:67:4d:87:98:10:e0:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: May 17 13:01:02 2025 GMT
Not After : Aug 15 13:01:02 2025 GMT
Subject: CN=101a7c80-c384-475c-90e9-6abfcec598ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:bf:bd:66:1f:c3:8c:40:04:8d:88:1d:3c:
46:a8:54:a2:46:62:33:e1:be:6c:fa:1c:17:e6:aa:
3f:00:30:a4:82:5f:ff:cf:ed:c3:37:1e:59:92:ab:
ed:e3:d1:9c:17:4a:f8:4d:60:67:92:79:b7:56:51:
a2:ae:65:d9:29:49:c0:02:7e:e1:ec:1e:b0:24:87:
ee:ac:5a:68:22:e3:2e:2e:51:a9:b5:da:1d:80:16:
2d:09:b0:6f:b9:c1:ef:2a:38:fb:cf:81:2c:f8:7e:
dd:7e:6e:de:e9:6a:e1:57:8c:a0:5f:f9:64:e2:86:
9f:f5:a3:61:48:77:72:a1:7b:8d:b6:e5:27:66:d9:
06:36:d5:5c:a6:76:05:f3:00:e9:31:c2:69:12:6e:
6d:62:2f:5d:2f:70:87:6a:cf:68:9e:6d:57:56:4a:
13:07:1d:8f:66:82:2f:3d:23:a6:4e:ac:8c:d8:2b:
7f:b6:73:9f:f2:b0:39:0d:de:84:50:b1:ce:a5:4f:
42:7d:4d:99:ec:94:ea:cd:94:5c:cd:4a:f3:98:55:
de:e4:46:a2:2a:ff:89:8c:f0:c5:29:6b:b3:da:d6:
9a:da:b3:0a:9f:7f:17:eb:cb:eb:f6:9a:7c:d6:74:
f3:6e:85:e8:da:06:f7:90:d3:4f:f7:cd:af:85:f4:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:D8:2F:E4:6F:14:91:29:FC:15:83:B4:93:2E:C4:0C:DD:63:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/6d5b0b43-3b95-3e0b-a2eb-05f59cb9f246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:fb:02:a7:41:a0:1e:23:59:b1:df:db:0f:2b:16:48:05:84:
7f:9b:4c:f4:d5:84:e7:ec:86:70:55:1a:90:1e:15:96:6d:83:
82:58:4e:cd:20:2b:a2:72:81:19:b5:46:34:e6:72:0a:76:50:
00:bf:a9:90:0f:f1:a1:44:24:00:c7:ad:2c:1a:f9:1c:08:da:
12:4a:ba:d5:ea:00:38:9f:c8:66:e0:f9:34:1f:3b:dc:a6:dc:
79:89:03:52:27:e0:90:7b:fd:d7:41:1b:36:54:1d:b7:c8:86:
d2:8e:b5:22:77:fe:0d:8e:94:dc:4d:9b:ad:50:b8:2c:5a:80:
44:3f:a8:f8:f0:07:32:de:c7:1d:37:e0:93:ca:ad:a2:b8:88:
1d:9f:fb:4c:4a:54:18:10:1a:66:cc:96:87:df:ad:ef:cd:1c:
8f:4b:d9:a2:49:94:7f:48:7a:ed:68:a5:53:66:df:a9:dd:a1:
fa:47:8a:5a:8e:e5:53:09:31:ac:c7:20:11:31:d0:f5:6f:d0:
80:5c:e0:7f:5e:e7:89:82:b0:27:da:74:bc:7c:2d:c9:18:87:
90:b0:5c:72:c7:12:66:3b:6d:5d:a2:58:94:de:cd:78:75:c1:
c4:bd:65:74:15:a5:6e:08:56:94:57:c3:ba:80:02:34:33:e8:
d2:f4:cc:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqKTiO7Z02HmBDgAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3
OTI4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MTAxYTdjODAtYzM4NC00NzVjLTkwZTktNmFiZmNlYzU5OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvy/vWYfw4xABI2IHTxGqFSiRmIz4b5s+hwX
5qo/ADCkgl//z+3DNx5Zkqvt49GcF0r4TWBnknm3VlGirmXZKUnAAn7h7B6wJIfu
rFpoIuMuLlGptdodgBYtCbBvucHvKjj7z4Es+H7dfm7e6WrhV4ygX/lk4oaf9aNh
SHdyoXuNtuUnZtkGNtVcpnYF8wDpMcJpEm5tYi9dL3CHas9onm1XVkoTBx2PZoIv
PSOmTqyM2Ct/tnOf8rA5Dd6EULHOpU9CfU2Z7JTqzZRczUrzmFXe5EaiKv+JjPDF
KWuz2taa2rMKn38X68vr9pp81nTzboXo2gb3kNNP982vhfRBLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjD2C/kbxSRKfwVg7STLsQM3WMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi
MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvNmQ1YjBiNDMtM2I5NS0z
ZTBiLWEyZWItMDVmNTljYjlmMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1
MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy
NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2
ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf7AqdBoB4jWbHf2w8rFkgFhH+bTPTVhOfshnBVGpAeFZZtg4JYTs0g
K6JygRm1RjTmcgp2UAC/qZAP8aFEJADHrSwa+RwI2hJKutXqADifyGbg+TQfO9ym
3HmJA1In4JB7/ddBGzZUHbfIhtKOtSJ3/g2OlNxNm61QuCxagEQ/qPjwBzLexx03
4JPKraK4iB2f+0xKVBgQGmbMloffre/NHI9L2aJJlH9Ieu1opVNm36ndofpHilqO
5VMJMazHIBEx0PVv0IBc4H9e54mCsCfadLx8LckYh5CwXHLHEmY7bV2iWJTezXh1
wcS9ZXQVpW4IVpRXw7qAAjQz6NL0zEk=
-----END CERTIFICATE-----
Generated at Sat Sep 13 23:08:18 2025 by rpki-client