Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa
File: 5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa (raw, json)
Hash identifier: hgDS67G4/ilJ/N79VsisujLcBnnnWmQ/dOUrK/fToDQ=
Subject key identifier: 77:D6:3B:CC:2A:14:8A:5C:A1:D4:7D:F8:66:17:77:7A:78:C0:46:12
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2E88079E43876D336A5C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa
Signing time: Mon 07 Apr 2025 16:33:10 +0000
ROA not before: Mon 07 Apr 2025 16:33:10 +0000
ROA not after: Sun 06 Jul 2025 16:33:10 +0000
asID: 81
IP address blocks: 152.22.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:e8:80:79:e4:38:76:d3:36:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:10 2025 GMT
Not After : Jul 6 16:33:10 2025 GMT
Subject: CN=10630205-6a91-478e-bd89-3f5470f7c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:af:3b:9f:da:f1:d3:dd:3f:cf:c8:7d:ce:
70:83:ff:76:82:f9:49:af:f3:d6:fb:67:06:3b:8b:
38:14:e9:b1:b6:92:87:00:8d:16:8e:79:2d:2a:a4:
27:f3:c9:ce:3c:82:75:bf:a7:bc:ab:8d:6c:5d:9c:
c6:e0:92:69:20:22:1e:37:83:05:bc:a6:b8:37:b6:
de:f4:41:b5:31:ff:c8:fc:ae:1a:b6:b7:33:9d:ad:
30:cd:6a:b1:1e:56:60:d9:2a:d1:6f:41:50:9a:ba:
a6:84:c8:5a:4d:08:52:9e:bb:f4:18:5c:cc:1b:4f:
aa:f6:9d:e7:5f:41:3b:86:ec:40:53:df:6c:81:d8:
67:92:a6:e0:99:ee:95:a3:07:ae:38:b7:59:9b:0c:
ac:3f:92:9c:e5:94:f4:fc:01:cb:f1:b0:a7:02:bb:
45:33:78:c9:cd:6a:c0:5d:36:89:2c:a0:89:bb:d6:
1b:f7:7c:9e:7e:f9:11:25:f3:c3:96:db:1c:b6:12:
43:6c:05:7e:d3:23:38:a3:68:56:8d:ea:3c:cb:f1:
76:cc:d0:96:ea:8b:3b:4e:9d:21:67:e7:68:b5:fc:
71:83:24:3f:ff:e0:30:64:2e:04:ef:02:aa:83:f9:
18:07:da:1d:50:d3:f7:44:ec:fd:1d:97:25:df:f6:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:3B:CC:2A:14:8A:5C:A1:D4:7D:F8:66:17:77:7A:78:C0:46:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5acfb144-c88e-38e3-b4e4-da6b9daf2f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:13:db:f9:f7:2c:22:89:f7:3a:98:c2:a0:d0:4f:98:15:9c:
33:17:48:11:77:a0:d9:cc:d2:3d:a5:ee:38:74:08:6c:5e:6e:
27:b9:b5:99:91:c3:4b:0e:54:80:f0:10:ad:0f:6e:39:d5:87:
42:82:d4:b7:40:e5:b2:b0:32:aa:0f:4f:18:3d:fe:ab:08:e9:
7c:6f:c7:cb:4a:30:ce:89:90:38:77:1e:eb:42:20:a8:e0:10:
41:49:e7:84:6a:31:a2:74:47:ec:a7:28:58:12:ac:bc:31:2c:
3d:c5:57:f5:40:c0:d5:a7:eb:f5:c1:1d:a5:71:9f:c3:55:0d:
95:a2:64:b6:4b:dc:e8:d9:80:af:8e:1b:c2:fd:62:35:67:fc:
59:1c:44:cd:cf:aa:a6:5a:66:aa:0f:ea:87:a3:04:d6:4c:94:
7c:75:10:0e:11:dd:30:3d:b2:77:68:ab:90:21:ea:e0:cc:5f:
2b:c9:47:2d:45:1a:1f:81:12:05:46:39:6e:7f:a8:24:4a:46:
12:76:d8:d6:45:6e:5c:21:ac:87:4a:5d:f2:34:48:c1:77:f7:
b0:9d:6d:f3:5d:a6:b9:35:8a:64:e9:5b:69:6b:ac:37:2c:7e:
80:4c:bc:3d:ab:79:17:c4:36:e7:9a:70:8b:28:1d:71:05:58:
09:f3:35:72
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEly4uiAeeQ4dtM2pcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxMFoXDTI1MDcwNjE2MzMxMFowLzEtMCsGA1UEAxMk
MTA2MzAyMDUtNmE5MS00NzhlLWJkODktM2Y1NDcwZjdjMWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6evO5/a8dPdP8/Ifc5wg/92gvlJr/PW+2cG
O4s4FOmxtpKHAI0WjnktKqQn88nOPIJ1v6e8q41sXZzG4JJpICIeN4MFvKa4N7be
9EG1Mf/I/K4atrczna0wzWqxHlZg2SrRb0FQmrqmhMhaTQhSnrv0GFzMG0+q9p3n
X0E7huxAU99sgdhnkqbgme6VoweuOLdZmwysP5Kc5ZT0/AHL8bCnArtFM3jJzWrA
XTaJLKCJu9Yb93yefvkRJfPDltscthJDbAV+0yM4o2hWjeo8y/F2zNCW6os7Tp0h
Z+dotfxxgyQ//+AwZC4E7wKqg/kYB9odUNP3ROz9HZcl3/YS7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHfWO8wqFIpcodR9+GYXd3p4wEYSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWFjZmIxNDQtYzg4ZS0z
OGUzLWI0ZTQtZGE2YjlkYWYyZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfBPb+fcsIon3OpjCoNBPmBWcMxdIEXeg2czSPaXuOHQIbF5uJ7m1mZHD
Sw5UgPAQrQ9uOdWHQoLUt0DlsrAyqg9PGD3+qwjpfG/Hy0owzomQOHce60IgqOAQ
QUnnhGoxonRH7KcoWBKsvDEsPcVX9UDA1afr9cEdpXGfw1UNlaJktkvc6NmAr44b
wv1iNWf8WRxEzc+qplpmqg/qh6ME1kyUfHUQDhHdMD2yd2irkCHq4MxfK8lHLUUa
H4ESBUY5bn+oJEpGEnbY1kVuXCGsh0pd8jRIwXf3sJ1t812muTWKZOlbaWusNyx+
gEy8Pat5F8Q255pwiygdcQVYCfM1cg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:08 2025 by rpki-client