Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/912d66c4-50c8-36d4-b206-b19a951ce59d.roa
File: 912d66c4-50c8-36d4-b206-b19a951ce59d.roa (raw, json)
Hash identifier: n3xhFCtfeB0lSvUSm+PVY0zQSDvhlpSplh4APVsHrVg=
Subject key identifier: 75:80:2C:BE:D1:82:CC:85:67:29:C6:E8:04:90:7E:AE:AF:B6:A5:7A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584972E2F1E17425690F8F471C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/912d66c4-50c8-36d4-b206-b19a951ce59d.roa
Signing time: Mon 07 Apr 2025 16:33:15 +0000
ROA not before: Mon 07 Apr 2025 16:33:15 +0000
ROA not after: Sun 06 Jul 2025 16:33:15 +0000
asID: 36850
IP address blocks: 198.85.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:e2:f1:e1:74:25:69:0f:8f:47:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Apr 7 16:33:15 2025 GMT
Not After : Jul 6 16:33:15 2025 GMT
Subject: CN=ab46a82c-07b8-4d69-8bcd-0fa696d43476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:0a:ef:5a:80:97:05:b4:ea:89:c8:c2:ed:
fa:88:67:97:1b:72:7d:0f:df:7a:63:40:96:8e:c4:
36:6d:d2:b0:2c:60:45:bb:2d:15:e9:27:58:24:1c:
de:e8:1d:50:d9:1d:e9:4c:fb:1f:43:c8:77:35:62:
59:ba:30:80:31:2d:c5:02:e6:9f:8a:a1:5c:86:98:
17:c8:42:95:6c:35:f8:95:c9:ce:b9:b3:e9:52:f6:
ed:6f:23:7e:cc:42:16:65:83:09:b5:15:ae:38:92:
07:1d:3c:36:bd:cb:ec:cf:7c:c2:4f:07:a2:48:ad:
b6:51:70:a4:00:b0:cb:7d:d6:01:07:3a:ed:d2:25:
34:4f:70:87:94:3f:d2:49:31:5a:42:61:21:8a:b2:
45:d6:37:10:49:f1:c7:1a:86:9b:d1:ed:9f:06:07:
b0:e1:90:99:51:be:be:f6:86:56:b9:bd:3d:1a:ca:
5c:35:28:2a:2b:b0:04:05:9f:b5:96:87:0f:06:ec:
f1:f4:0d:a9:22:3e:06:24:48:3c:ab:93:89:f8:81:
dd:af:d3:0f:55:84:c8:8e:15:fd:ef:e6:ea:df:d1:
c2:08:cb:5d:ac:61:05:b4:46:bb:12:43:9e:81:94:
34:f6:a2:c9:f1:e5:87:74:9e:a3:b1:c4:ce:80:3f:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:80:2C:BE:D1:82:CC:85:67:29:C6:E8:04:90:7E:AE:AF:B6:A5:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/912d66c4-50c8-36d4-b206-b19a951ce59d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:11:16:8a:d9:53:93:a1:9e:1b:de:3d:12:e0:e8:61:a0:60:
06:c4:3f:ed:c3:3a:e6:f5:61:da:fb:32:43:3f:d0:9b:46:18:
cf:cc:07:33:c2:df:33:69:08:2f:9b:08:8b:f2:fb:1f:24:f1:
fd:0b:13:6f:89:7a:66:34:b4:cd:b3:02:f2:77:45:f4:9f:9a:
0f:6d:54:a8:f8:8a:bc:30:fc:23:20:f2:b1:a1:66:1d:f3:bc:
bc:4f:22:f0:ac:cd:de:c5:9e:a1:92:5a:fa:4a:62:41:b7:bb:
d8:2f:5b:ab:f5:5f:df:26:20:56:0f:77:f4:03:42:33:6c:8b:
a7:df:35:cf:cc:56:7f:36:3a:fd:c4:1c:6c:88:55:02:62:91:
53:f5:b9:cd:8a:1b:1b:30:53:50:03:f2:35:36:fb:eb:99:2e:
57:82:6d:d7:b9:93:0f:e7:35:3e:d3:d4:d4:75:7e:aa:90:78:
bf:af:87:19:59:79:9c:b1:29:1f:50:77:fb:25:ae:e6:02:6e:
d7:35:8e:8a:71:4f:73:52:37:15:04:d0:ef:ae:20:2f:54:9b:
96:10:0b:c3:99:6e:6d:c3:8b:51:89:ab:32:45:be:5c:e1:fc:
98:63:37:7b:5e:90:8f:b3:96:73:68:3f:84:e8:31:cc:91:d3:
05:b5:69:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4vHhdCVpD49HHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxNVoXDTI1MDcwNjE2MzMxNVowLzEtMCsGA1UEAxMk
YWI0NmE4MmMtMDdiOC00ZDY5LThiY2QtMGZhNjk2ZDQzNDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd0K71qAlwW06onIwu36iGeXG3J9D996Y0CW
jsQ2bdKwLGBFuy0V6SdYJBze6B1Q2R3pTPsfQ8h3NWJZujCAMS3FAuafiqFchpgX
yEKVbDX4lcnOubPpUvbtbyN+zEIWZYMJtRWuOJIHHTw2vcvsz3zCTweiSK22UXCk
ALDLfdYBBzrt0iU0T3CHlD/SSTFaQmEhirJF1jcQSfHHGoab0e2fBgew4ZCZUb6+
9oZWub09GspcNSgqK7AEBZ+1locPBuzx9A2pIj4GJEg8q5OJ+IHdr9MPVYTIjhX9
7+bq39HCCMtdrGEFtEa7EkOegZQ09qLJ8eWHdJ6jscTOgD+BmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWALL7RgsyFZynG6ASQfq6vtqV6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTEyZDY2YzQtNTBjOC0z
NmQ0LWIyMDYtYjE5YTk1MWNlNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlXmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcRForZU5OhnhvePRLg6GGgYAbEP+3DOub1Ydr7MkM/0JtGGM/MBzPC
3zNpCC+bCIvy+x8k8f0LE2+JemY0tM2zAvJ3RfSfmg9tVKj4irww/CMg8rGhZh3z
vLxPIvCszd7FnqGSWvpKYkG3u9gvW6v1X98mIFYPd/QDQjNsi6ffNc/MVn82Ov3E
HGyIVQJikVP1uc2KGxswU1AD8jU2++uZLleCbde5kw/nNT7T1NR1fqqQeL+vhxlZ
eZyxKR9Qd/slruYCbtc1jopxT3NSNxUE0O+uIC9Um5YQC8OZbm3Di1GJqzJFvlzh
/JhjN3tekI+zlnNoP4ToMcyR0wW1aRE=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:31 2025 by rpki-client