Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b78bbdac-89a6-3c60-93a0-ab9405601434.roa
File: b78bbdac-89a6-3c60-93a0-ab9405601434.roa (raw, json)
Hash identifier: 0PifIPK8tQqxpB05DVqSmslVzTZom2WMRuPVikrtUts=
Subject key identifier: 60:A2:99:F8:0F:AF:22:02:86:29:38:39:57:4D:E4:AC:13:BC:64:97
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A702E10B9EC47A68BF9880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b78bbdac-89a6-3c60-93a0-ab9405601434.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a7:02:e1:0b:9e:c4:7a:68:bf:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bed5c013-7972-42a6-b3ae-e16fc2e19e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:5c:be:9f:b3:b8:bd:da:a5:b9:68:97:31:
34:ff:d8:22:65:30:dd:f4:36:9b:d1:5a:3f:ca:00:
a0:50:cf:d3:0b:f0:ac:ae:63:b4:e7:95:da:37:46:
64:80:eb:68:de:91:ae:20:d7:cf:0e:5a:b8:14:c2:
08:08:d3:91:5c:7a:9a:e6:3f:41:85:ec:cd:8e:3c:
42:5f:bb:3b:7c:6b:fa:fa:28:dc:4d:b1:39:31:00:
c4:60:bb:f3:d2:31:8e:39:fa:02:5d:fd:42:fd:de:
56:7f:ef:b3:09:3e:60:b2:b1:56:57:ad:e2:98:72:
1c:2d:2d:63:fd:cf:04:03:e2:65:e6:67:52:e9:ee:
a4:cd:16:20:d7:cf:8b:da:66:bb:b8:4c:0b:db:45:
47:e0:65:2c:f5:e0:2c:10:7a:51:8b:9b:4d:01:09:
0c:3a:d1:71:c8:3f:5b:0e:a5:ad:ea:1c:10:a5:5b:
d3:15:81:c7:a5:1f:c3:91:98:a7:65:af:4a:90:e4:
ec:24:bc:4c:37:98:17:0a:81:0f:7f:47:7f:9e:da:
8b:08:83:13:d6:63:69:be:f6:2c:6a:25:56:52:4e:
ed:70:60:83:a3:75:7a:87:5f:c4:3f:42:73:29:55:
80:7e:d9:a3:f3:98:02:7b:9a:9b:7e:fe:13:03:e1:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:99:F8:0F:AF:22:02:86:29:38:39:57:4D:E4:AC:13:BC:64:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b78bbdac-89a6-3c60-93a0-ab9405601434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:1b:6d:f0:d8:4b:dc:47:2d:d4:74:a0:44:dc:b7:2b:84:5c:
52:df:85:4d:d6:c5:d8:76:7b:9d:37:1a:f6:2b:29:42:11:e9:
f6:6e:0f:52:10:2e:d6:82:d0:57:b3:48:0e:31:fe:68:4d:89:
c8:82:a7:1d:72:1b:f8:ef:84:e0:8b:ac:ef:fb:a7:b0:42:e2:
9d:fd:5b:1a:f7:87:3d:82:d4:88:89:61:52:5c:ad:bb:7e:b4:
06:5f:5c:69:a5:28:b7:d7:1c:c9:eb:17:2c:d1:5a:28:15:b3:
45:61:0b:10:91:cc:d6:ea:eb:18:02:8c:22:25:35:72:82:a5:
0a:0d:f5:f9:9e:0d:6f:e7:ec:c4:b4:4a:b2:01:1b:73:12:f9:
67:99:a8:7d:0d:e2:0f:4d:0b:f2:a2:21:4d:4f:59:59:bc:45:
c5:fd:c1:9d:61:f7:24:81:98:7f:e7:f0:8e:96:0d:b0:b5:a1:
cb:f3:8d:9c:94:fe:03:ee:db:9d:24:29:2d:ea:fb:4e:73:73:
74:a9:a3:bc:2a:66:76:22:6f:a6:91:62:c1:63:5a:58:1b:63:
93:04:b4:bb:a7:36:22:3d:fe:df:6b:07:08:b2:63:62:27:de:
67:d9:ee:cd:1f:31:4e:d5:f5:ab:c3:13:e4:4c:0d:82:2c:6c:
77:cc:39:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpwLhC57Eemi/mIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YmVkNWMwMTMtNzk3Mi00MmE2LWIzYWUtZTE2ZmMyZTE5ZTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZlcvp+zuL3apblolzE0/9giZTDd9Dab0Vo/
ygCgUM/TC/CsrmO055XaN0ZkgOto3pGuINfPDlq4FMIICNORXHqa5j9BhezNjjxC
X7s7fGv6+ijcTbE5MQDEYLvz0jGOOfoCXf1C/d5Wf++zCT5gsrFWV63imHIcLS1j
/c8EA+Jl5mdS6e6kzRYg18+L2ma7uEwL20VH4GUs9eAsEHpRi5tNAQkMOtFxyD9b
DqWt6hwQpVvTFYHHpR/DkZinZa9KkOTsJLxMN5gXCoEPf0d/ntqLCIMT1mNpvvYs
aiVWUk7tcGCDo3V6h1/EP0JzKVWAftmj85gCe5qbfv4TA+FW3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCimfgPryIChik4OVdN5KwTvGSXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjc4YmJkYWMtODlhNi0z
YzYwLTkzYTAtYWI5NDA1NjAxNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0bbfDYS9xHLdR0oETctyuEXFLfhU3Wxdh2e503GvYrKUIR6fZuD1IQ
LtaC0FezSA4x/mhNiciCpx1yG/jvhOCLrO/7p7BC4p39Wxr3hz2C1IiJYVJcrbt+
tAZfXGmlKLfXHMnrFyzRWigVs0VhCxCRzNbq6xgCjCIlNXKCpQoN9fmeDW/n7MS0
SrIBG3MS+WeZqH0N4g9NC/KiIU1PWVm8RcX9wZ1h9ySBmH/n8I6WDbC1ocvzjZyU
/gPu250kKS3q+05zc3Spo7wqZnYib6aRYsFjWlgbY5MEtLunNiI9/t9rBwiyY2In
3mfZ7s0fMU7V9avDE+RMDYIsbHfMOS4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:08:23 2025 by rpki-client