Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0cabdc-0af6-32b2-87c8-0ffb2f3c5c4f.roa
File: df0cabdc-0af6-32b2-87c8-0ffb2f3c5c4f.roa (raw, json)
Hash identifier: P2nc5hAkk8Q6PpyA1001dhoi1bYzZ0X4vC+dKoKoZSQ=
Subject key identifier: 3F:E8:C5:0F:F1:C2:88:72:5B:6E:87:70:1E:87:11:84:DD:AD:EB:FF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F0103575F5AB9ED06CDA20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0cabdc-0af6-32b2-87c8-0ffb2f3c5c4f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:10:35:75:f5:ab:9e:d0:6c:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e1dce0a5-1b5d-4167-bd1d-8520a20b9f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:5e:a8:cf:41:f2:0a:4c:f9:91:37:9e:23:
a1:69:c4:97:58:3b:98:fb:28:d7:42:ae:d5:ad:33:
f9:47:b0:50:70:82:0f:9d:f9:9c:23:58:a0:e4:0d:
f8:1d:f6:19:3f:51:27:50:31:df:43:d3:97:95:61:
5f:66:7e:2b:2e:78:05:80:83:ff:2f:58:c8:01:4d:
6f:6d:05:79:24:2f:4b:c9:f5:eb:55:4c:5d:8a:2b:
df:a4:f2:e9:21:bb:95:46:91:86:cb:c2:55:ec:39:
4a:fd:74:0d:2a:bc:e8:1a:e5:dc:f8:ab:96:96:3a:
07:c0:77:2e:75:6c:86:f9:c8:b2:02:12:b1:ce:ae:
56:0e:8c:af:70:7d:94:ec:f5:6b:34:57:79:44:c4:
9e:ff:c5:6f:47:58:d8:30:36:3f:d1:1b:d2:94:f1:
d7:c6:2e:b6:46:c6:a1:86:e4:18:1b:43:bd:38:58:
a8:b9:54:79:25:4d:18:28:73:fa:94:e2:66:75:a8:
53:9c:c9:da:ab:f1:f8:08:5e:2e:69:3e:aa:9d:2a:
3a:db:fa:8f:59:70:60:d6:f1:dd:90:9d:7a:60:87:
3c:ea:8a:b7:d7:3a:b8:db:20:ab:f7:e3:74:40:a0:
7a:ce:7b:dc:ba:10:fc:49:83:5a:68:e9:6f:a5:9c:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:C5:0F:F1:C2:88:72:5B:6E:87:70:1E:87:11:84:DD:AD:EB:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0cabdc-0af6-32b2-87c8-0ffb2f3c5c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c3:0d:fb:d6:23:c2:dd:18:99:9d:9f:eb:85:f8:69:b4:0e:
dc:87:1a:77:34:6d:7b:b9:24:4e:6e:cc:c4:aa:e7:56:db:07:
bd:41:7d:64:5f:5a:a1:78:cf:84:05:35:6a:be:89:aa:8e:db:
88:86:8a:b7:20:21:1e:e6:ba:49:62:0c:78:96:9c:5b:74:1e:
59:f7:e6:94:68:b9:19:56:07:80:4f:e2:ad:0f:4c:f6:bc:b7:
de:80:1c:c1:62:08:45:90:b5:7d:2a:b8:37:81:68:f0:8f:14:
08:0c:a6:86:2d:e9:b8:0a:e1:03:54:a7:53:90:68:52:cf:d3:
5a:9c:be:68:e6:44:d2:68:9d:47:96:99:17:8e:59:ea:a9:b1:
7b:80:0a:be:57:0e:c5:04:a3:2c:59:8e:9e:da:37:d1:f5:80:
4b:e3:51:b8:cc:d4:bd:94:2e:0f:4b:ca:28:83:f4:52:c3:f7:
39:c7:77:db:d7:d0:5e:02:a1:be:00:3b:d2:10:aa:6f:6e:42:
9a:6f:c6:f8:2e:2a:d7:d1:55:91:76:1f:43:49:4e:78:dc:fb:
62:5f:b6:8e:ce:81:de:20:bd:d0:3d:dc:a3:79:57:3f:67:0b:
f1:3f:53:09:9a:f4:b5:92:1c:6d:cc:80:02:17:9e:15:60:99:
6c:8e:c1:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ8BA1dfWrntBs2iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTFkY2UwYTUtMWI1ZC00MTY3LWJkMWQtODUyMGEyMGI5ZjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0JeqM9B8gpM+ZE3niOhacSXWDuY+yjXQq7V
rTP5R7BQcIIPnfmcI1ig5A34HfYZP1EnUDHfQ9OXlWFfZn4rLngFgIP/L1jIAU1v
bQV5JC9LyfXrVUxdiivfpPLpIbuVRpGGy8JV7DlK/XQNKrzoGuXc+KuWljoHwHcu
dWyG+ciyAhKxzq5WDoyvcH2U7PVrNFd5RMSe/8VvR1jYMDY/0RvSlPHXxi62Rsah
huQYG0O9OFiouVR5JU0YKHP6lOJmdahTnMnaq/H4CF4uaT6qnSo62/qPWXBg1vHd
kJ16YIc86oq31zq42yCr9+N0QKB6znvcuhD8SYNaaOlvpZzbhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/oxQ/xwohyW26HcB6HEYTdrev/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYwY2FiZGMtMGFmNi0z
MmIyLTg3YzgtMGZmYjJmM2M1YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrDDfvWI8LdGJmdn+uF+Gm0DtyHGnc0bXu5JE5uzMSq51bbB71BfWRf
WqF4z4QFNWq+iaqO24iGircgIR7mukliDHiWnFt0Hln35pRouRlWB4BP4q0PTPa8
t96AHMFiCEWQtX0quDeBaPCPFAgMpoYt6bgK4QNUp1OQaFLP01qcvmjmRNJonUeW
mReOWeqpsXuACr5XDsUEoyxZjp7aN9H1gEvjUbjM1L2ULg9LyiiD9FLD9znHd9vX
0F4Cob4AO9IQqm9uQppvxvguKtfRVZF2H0NJTnjc+2Jfto7Ogd4gvdA93KN5Vz9n
C/E/Uwma9LWSHG3MgAIXnhVgmWyOwXo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:40 2025 by rpki-client