Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/252413d3-4f8d-3861-8b43-2e9d3beebec6.roa
File: 252413d3-4f8d-3861-8b43-2e9d3beebec6.roa (raw, json)
Hash identifier: rEtRTgE+SPJIYGEQQw3v4i3O2b0cO4ovdCeJcpGj32g=
Subject key identifier: 3F:F8:69:CE:83:CE:F9:A4:BC:6F:D0:D1:2A:E7:B5:12:57:98:C5:61
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846E69AA93EF39B49997611D460
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/252413d3-4f8d-3861-8b43-2e9d3beebec6.roa
Signing time: Sat 17 Aug 2024 01:00:30 +0000
ROA not before: Sat 17 Aug 2024 01:00:30 +0000
ROA not after: Fri 15 Nov 2024 02:00:30 +0000
asID: 17916
IP address blocks: 20.139.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e6:9a:a9:3e:f3:9b:49:99:76:11:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 17 01:00:30 2024 GMT
Not After : Nov 15 02:00:30 2024 GMT
Subject: CN=e2e7cba6-1fad-4d26-bbac-1a474ce7c90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:1f:16:3c:4d:c9:cf:3f:87:89:9d:69:27:
cf:6c:6b:6e:07:54:1b:6b:89:0d:e8:65:24:6f:b9:
e5:45:02:14:da:f8:31:4f:21:ef:71:84:04:1f:2d:
3c:ea:09:9c:d6:a5:e3:d3:7e:5b:7a:b5:c1:4d:4e:
d9:29:54:0a:27:85:5b:3f:c6:de:8f:c6:c8:e5:4d:
ca:c2:57:d1:95:5d:2b:36:c3:3d:1d:5c:af:e9:bc:
18:d2:60:67:48:22:64:21:0a:a1:de:9e:d4:97:b8:
d0:94:e1:be:ad:c1:cc:5e:5a:42:59:c2:cd:6b:c4:
43:5f:70:a1:ca:39:59:ae:95:d2:e6:a9:05:e7:eb:
05:08:a2:dc:38:c7:6b:52:1a:09:c1:e9:b9:68:5f:
c3:bf:f3:c9:6d:ea:c7:7a:83:68:fb:5f:38:fe:e9:
d9:35:43:a6:11:cb:66:7e:d0:e1:55:90:e7:1d:9b:
d7:24:63:2a:51:bc:fc:95:08:d9:09:8d:0c:0a:dd:
76:57:b9:81:89:5c:53:9c:4f:d7:11:55:76:91:2b:
bb:a7:10:dd:94:0d:3e:f1:b6:a0:d0:9a:f5:47:8c:
e0:cf:5e:17:b2:fe:4d:21:39:6b:86:78:e1:73:2c:
48:4d:80:e5:df:77:c0:cb:cb:4b:89:36:2a:28:c0:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:69:CE:83:CE:F9:A4:BC:6F:D0:D1:2A:E7:B5:12:57:98:C5:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/252413d3-4f8d-3861-8b43-2e9d3beebec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:bf:a8:65:e8:dd:53:e3:e9:4d:f4:73:3b:ef:e2:f2:e7:b3:
e6:dc:b4:22:aa:0d:31:a8:d1:f4:5d:88:84:18:7c:71:c9:71:
5d:31:33:90:c6:05:88:28:6f:4c:f3:b1:24:1c:02:ee:cb:9c:
53:84:f6:13:99:c4:17:87:09:e5:c2:ab:cc:31:84:cd:63:7e:
9a:09:01:e7:88:2f:90:d8:50:57:56:b6:c3:3d:9b:93:fc:d9:
5f:3c:c8:6d:f6:88:f6:f8:47:af:43:c6:e8:9c:82:21:0d:7f:
c5:56:e0:fc:f3:25:6a:05:4c:71:42:63:69:d1:81:2b:4f:cc:
2a:0d:cc:72:6e:9e:75:8f:c0:4b:12:96:09:7b:d1:9a:66:9b:
76:92:ce:80:41:6a:08:89:12:4a:7b:aa:48:05:f2:cd:ce:53:
f3:01:89:3a:ce:c4:2d:5d:ea:df:77:bb:a6:23:ec:a4:39:af:
13:c1:ef:c3:4b:0a:77:f1:0a:01:44:43:ab:6c:a8:99:99:a4:
1e:c4:9e:62:83:99:4c:e3:17:f9:7d:6e:41:01:58:8c:a1:fc:
45:56:f2:72:fc:38:b6:7d:45:b4:ff:a7:e2:00:0d:e5:26:e3:
b9:84:0e:47:d8:ff:ce:48:3b:b6:ed:1b:ff:1e:b6:79:01:76:
d3:52:14:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbmmqk+85tJmXYR1GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MDgxNzAxMDAzMFoXDTI0MTExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZTJlN2NiYTYtMWZhZC00ZDI2LWJiYWMtMWE0NzRjZTdjOTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivsfFjxNyc8/h4mdaSfPbGtuB1Qba4kN6GUk
b7nlRQIU2vgxTyHvcYQEHy086gmc1qXj035berXBTU7ZKVQKJ4VbP8bej8bI5U3K
wlfRlV0rNsM9HVyv6bwY0mBnSCJkIQqh3p7Ul7jQlOG+rcHMXlpCWcLNa8RDX3Ch
yjlZrpXS5qkF5+sFCKLcOMdrUhoJwem5aF/Dv/PJberHeoNo+184/unZNUOmEctm
ftDhVZDnHZvXJGMqUbz8lQjZCY0MCt12V7mBiVxTnE/XEVV2kSu7pxDdlA0+8bag
0Jr1R4zgz14Xsv5NITlrhnjhcyxITYDl33fAy8tLiTYqKMB2lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/4ac6DzvmkvG/Q0SrntRJXmMVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjUyNDEzZDMtNGY4ZC0z
ODYxLThiNDMtMmU5ZDNiZWViZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGa/qGXo3VPj6U30czvv4vLns+bctCKqDTGo0fRdiIQYfHHJcV0xM5DG
BYgob0zzsSQcAu7LnFOE9hOZxBeHCeXCq8wxhM1jfpoJAeeIL5DYUFdWtsM9m5P8
2V88yG32iPb4R69DxuicgiENf8VW4PzzJWoFTHFCY2nRgStPzCoNzHJunnWPwEsS
lgl70Zpmm3aSzoBBagiJEkp7qkgF8s3OU/MBiTrOxC1d6t93u6Yj7KQ5rxPB78NL
CnfxCgFEQ6tsqJmZpB7EnmKDmUzjF/l9bkEBWIyh/EVW8nL8OLZ9RbT/p+IADeUm
47mEDkfY/85IO7btG/8etnkBdtNSFLE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:17 2025 by rpki-client