Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5235308b-1132-32fc-bace-e6a1420507f7.roa
File: 5235308b-1132-32fc-bace-e6a1420507f7.roa (raw, json)
Hash identifier: ladSXL19VIEUmpcriymkUhP2H0+wZeeaSabGMe8quKk=
Subject key identifier: EB:ED:BE:9F:64:66:EC:C9:38:F9:DC:F5:19:5A:E0:5D:6F:FB:EE:AF
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858465496F617A9C9F3743A0586C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5235308b-1132-32fc-bace-e6a1420507f7.roa
Signing time: Tue 25 Jun 2024 17:45:05 +0000
ROA not before: Tue 25 Jun 2024 17:45:05 +0000
ROA not after: Mon 23 Sep 2024 17:45:05 +0000
asID: 3360
IP address blocks: 20.134.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:54:96:f6:17:a9:c9:f3:74:3a:05:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jun 25 17:45:05 2024 GMT
Not After : Sep 23 17:45:05 2024 GMT
Subject: CN=83e264f3-5b79-4187-8706-b97bc4e14b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:c5:56:4a:fd:41:69:e2:bd:28:26:ad:7b:
e5:81:f5:b9:f3:76:ad:90:19:07:08:8b:2d:a1:ff:
20:5c:0d:f2:79:82:a9:70:7e:df:13:61:25:19:b2:
a1:e8:88:a3:e4:67:cc:a7:1a:b4:9d:b4:37:ff:85:
4f:94:20:16:04:b0:81:b5:ad:f7:9c:fe:fb:c5:e4:
d6:48:5a:53:8a:58:3c:df:b6:a8:ec:8f:63:3c:b2:
bc:52:7a:76:f3:d6:bb:a7:68:f4:47:67:40:76:58:
74:74:6d:08:b8:57:00:0c:fe:07:ce:b5:d7:4e:8a:
64:36:89:39:3e:89:d3:86:b4:75:84:0b:72:43:21:
c9:0e:97:37:b4:cd:5c:8a:17:95:5b:62:01:1f:8d:
20:b2:9a:30:19:60:95:eb:43:48:6d:95:09:21:4b:
a4:bf:06:a5:a9:29:d5:a6:f7:27:2b:89:f4:98:6c:
4e:41:66:c4:c2:27:45:d2:17:84:cc:60:1a:62:05:
1b:01:10:04:9d:cf:31:f0:b6:6f:de:6b:10:0c:94:
3f:cc:bb:c7:66:e0:3c:35:1e:d3:07:34:44:6e:6a:
d7:03:89:8e:f3:90:43:96:e1:48:44:cb:05:56:f2:
01:b9:08:ca:bc:37:60:1b:50:6e:44:ab:dd:cc:40:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:BE:9F:64:66:EC:C9:38:F9:DC:F5:19:5A:E0:5D:6F:FB:EE:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5235308b-1132-32fc-bace-e6a1420507f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.134.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b7:4b:68:62:b1:6b:cd:f6:e3:59:4c:15:37:66:30:1d:26:
bc:a7:02:47:76:1c:ae:ef:f8:b7:ff:b5:6a:a6:b7:39:60:b7:
1a:85:f1:77:48:5d:1b:79:53:19:05:ad:78:d7:39:86:7a:e7:
82:ac:61:91:b9:d7:1c:33:84:bd:6e:96:cd:0b:fb:d9:20:b9:
2f:34:a3:22:22:89:22:ce:d2:dd:98:fd:31:47:c2:38:4a:23:
0f:71:1e:62:23:d2:e4:07:30:9a:f8:12:9f:76:00:63:12:6b:
f4:88:bb:c2:82:9d:75:43:36:83:a9:3b:50:39:03:4f:8a:9b:
1a:52:c4:ee:b0:7e:9e:f0:80:f8:04:c8:ce:05:71:5c:2b:79:
d3:8c:32:c0:a3:d4:bc:37:37:6b:15:d5:57:1f:79:cf:25:72:
a7:66:b6:d0:b8:58:6d:98:5f:f3:cb:4b:7c:c1:95:62:05:da:
6d:7c:b8:1f:dc:77:65:1f:eb:7f:76:e8:2b:35:2a:6f:19:5d:
de:c6:4f:25:be:03:16:49:82:f8:81:85:79:46:f9:43:fe:13:
82:b9:8d:b7:51:a2:48:75:2a:64:65:4f:2b:28:d7:49:fa:d0:
e2:68:99:38:d2:5c:c8:22:95:c8:fd:c8:45:ad:13:91:36:c9:
d1:60:e4:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZUlvYXqcnzdDoFhsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MDYyNTE3NDUwNVoXDTI0MDkyMzE3NDUwNVowLzEtMCsGA1UEAxMk
ODNlMjY0ZjMtNWI3OS00MTg3LTg3MDYtYjk3YmM0ZTE0YjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrTFVkr9QWnivSgmrXvlgfW583atkBkHCIst
of8gXA3yeYKpcH7fE2ElGbKh6Iij5GfMpxq0nbQ3/4VPlCAWBLCBta33nP77xeTW
SFpTilg837ao7I9jPLK8Unp289a7p2j0R2dAdlh0dG0IuFcADP4HzrXXTopkNok5
PonThrR1hAtyQyHJDpc3tM1ciheVW2IBH40gspowGWCV60NIbZUJIUukvwalqSnV
pvcnK4n0mGxOQWbEwidF0heEzGAaYgUbARAEnc8x8LZv3msQDJQ/zLvHZuA8NR7T
BzREbmrXA4mO85BDluFIRMsFVvIBuQjKvDdgG1BuRKvdzECeywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvtvp9kZuzJOPnc9Rla4F1v++6vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTIzNTMwOGItMTEzMi0z
MmZjLWJhY2UtZTZhMTQyMDUwN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIb5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEy3S2hisWvN9uNZTBU3ZjAdJrynAkd2HK7v+Lf/tWqmtzlgtxqF8XdI
XRt5UxkFrXjXOYZ654KsYZG51xwzhL1uls0L+9kguS80oyIiiSLO0t2Y/TFHwjhK
Iw9xHmIj0uQHMJr4Ep92AGMSa/SIu8KCnXVDNoOpO1A5A0+KmxpSxO6wfp7wgPgE
yM4FcVwredOMMsCj1Lw3N2sV1Vcfec8lcqdmttC4WG2YX/PLS3zBlWIF2m18uB/c
d2Uf63926Cs1Km8ZXd7GTyW+AxZJgviBhXlG+UP+E4K5jbdRokh1KmRlTyso10n6
0OJomTjSXMgilcj9yEWtE5E2ydFg5Ew=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:39 2025 by rpki-client