Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/053af770-3c2a-3b07-bbe3-a2647da5a063.roa
File: 053af770-3c2a-3b07-bbe3-a2647da5a063.roa (raw, json)
Hash identifier: Zk+e9U66syAmHyPmkEz3T+8NcXzQbAcyRePlMByOBgk=
Subject key identifier: 5D:91:13:4C:FA:B8:65:CC:12:E4:58:89:5B:24:B8:83:2B:6E:DE:04
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848CDC81E6CFA1EF0F6DD7CF280
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/053af770-3c2a-3b07-bbe3-a2647da5a063.roa
Signing time: Fri 07 Feb 2025 13:10:49 +0000
ROA not before: Fri 07 Feb 2025 13:10:49 +0000
ROA not after: Thu 08 May 2025 12:10:49 +0000
asID: 203
IP address blocks: 20.133.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:c8:1e:6c:fa:1e:f0:f6:dd:7c:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 7 13:10:49 2025 GMT
Not After : May 8 12:10:49 2025 GMT
Subject: CN=8e223508-0f86-43bd-a1dd-b9d2828e30b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3f:ee:ea:0a:e8:c4:aa:c2:d0:5b:bd:55:26:
eb:20:00:95:3e:10:63:65:42:ff:40:c4:51:af:f4:
34:8c:67:12:54:ce:f3:93:5a:a0:81:65:4c:68:cd:
5b:ce:7b:4c:3f:c2:b6:81:33:36:04:a0:0a:2f:4c:
54:1d:ec:b0:a4:ae:26:a9:6e:8b:6f:cd:14:1b:6c:
35:bb:e7:bd:0c:ff:52:36:0c:6f:15:16:21:e5:ad:
0a:d8:98:5b:96:74:24:6d:a2:48:b8:5d:ee:8c:37:
e3:40:7c:f0:91:80:18:f4:68:aa:8b:5a:ed:63:14:
93:f3:4b:7c:a8:78:df:dc:be:8e:22:92:77:86:50:
94:94:0e:cd:f8:ef:12:15:b0:6d:af:cf:8d:f5:32:
b5:b0:f4:4b:e9:b4:a0:61:fa:79:a0:95:79:6a:43:
77:3c:98:be:ad:3f:f8:29:c7:b1:13:c9:7c:17:0d:
68:9a:03:43:92:71:05:47:d1:65:56:43:2d:e8:48:
24:21:1b:bf:52:50:34:c0:66:e2:41:25:64:d4:f5:
90:b9:3d:bf:43:5b:14:22:a8:e3:7b:b4:09:4c:4b:
32:fa:5c:12:10:d1:ec:13:3d:53:05:bc:03:65:4f:
41:66:cf:c3:90:e5:c9:46:42:2a:8d:93:a7:81:4e:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:13:4C:FA:B8:65:CC:12:E4:58:89:5B:24:B8:83:2B:6E:DE:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/053af770-3c2a-3b07-bbe3-a2647da5a063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d1:a8:a8:d4:33:4a:06:02:be:cf:16:a0:d0:fc:03:03:c6:
a5:dc:ef:8b:63:53:e5:b2:8f:8f:ec:df:6e:da:08:65:30:b7:
89:81:93:0e:6b:85:a0:ab:f1:4c:34:43:c6:e7:93:26:eb:d4:
73:03:a6:7c:c5:f5:f4:a5:ae:7e:43:82:93:a1:7c:06:17:48:
df:e7:6f:4d:6a:ca:14:c1:8f:68:14:af:dd:c7:bf:4b:b1:8d:
94:b9:ed:4a:ca:79:e8:c8:bf:5a:b7:4a:0d:2c:3d:be:c9:f5:
2b:8d:64:ca:4a:b0:ab:e2:7c:6b:1a:72:63:59:a4:b7:4c:46:
7d:92:a7:d8:f1:47:a5:dd:ff:b1:22:ff:36:9d:3c:84:ea:ef:
e1:ed:da:82:fe:95:4f:af:20:cd:22:65:6d:da:1d:e0:6f:7e:
0e:51:dc:bb:90:5f:0c:d4:a4:aa:32:ce:2a:18:81:f8:b9:fb:
37:09:bb:2b:4c:ec:c0:a5:ff:2d:a5:8b:cb:bb:35:82:6c:53:
d3:8d:c5:95:97:e4:6f:07:5b:db:b6:92:4b:cc:9e:7e:71:78:
a4:db:9c:77:5f:07:77:3e:5c:84:f3:52:17:99:df:c6:cf:57:
64:a1:01:02:5c:b5:22:cc:92:35:46:17:38:58:34:13:d1:d7:
c4:93:ab:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjNyB5s+h7w9t188oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDIwNzEzMTA0OVoXDTI1MDUwODEyMTA0OVowLzEtMCsGA1UEAxMk
OGUyMjM1MDgtMGY4Ni00M2JkLWExZGQtYjlkMjgyOGUzMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD/u6groxKrC0Fu9VSbrIACVPhBjZUL/QMRR
r/Q0jGcSVM7zk1qggWVMaM1bzntMP8K2gTM2BKAKL0xUHeywpK4mqW6Lb80UG2w1
u+e9DP9SNgxvFRYh5a0K2JhblnQkbaJIuF3ujDfjQHzwkYAY9Giqi1rtYxST80t8
qHjf3L6OIpJ3hlCUlA7N+O8SFbBtr8+N9TK1sPRL6bSgYfp5oJV5akN3PJi+rT/4
KcexE8l8Fw1omgNDknEFR9FlVkMt6EgkIRu/UlA0wGbiQSVk1PWQuT2/Q1sUIqjj
e7QJTEsy+lwSENHsEz1TBbwDZU9BZs/DkOXJRkIqjZOngU4zQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2RE0z6uGXMEuRYiVskuIMrbt4EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDUzYWY3NzAtM2MyYS0z
YjA3LWJiZTMtYTI2NDdkYTVhMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPRqKjUM0oGAr7PFqDQ/AMDxqXc74tjU+Wyj4/s327aCGUwt4mBkw5r
haCr8Uw0Q8bnkybr1HMDpnzF9fSlrn5DgpOhfAYXSN/nb01qyhTBj2gUr93Hv0ux
jZS57UrKeejIv1q3Sg0sPb7J9SuNZMpKsKvifGsacmNZpLdMRn2Sp9jxR6Xd/7Ei
/zadPITq7+Ht2oL+lU+vIM0iZW3aHeBvfg5R3LuQXwzUpKoyzioYgfi5+zcJuytM
7MCl/y2li8u7NYJsU9ONxZWX5G8HW9u2kkvMnn5xeKTbnHdfB3c+XITzUheZ38bP
V2ShAQJctSLMkjVGFzhYNBPR18STq+4=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:39:53 2025 by rpki-client