Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05ff8e97-9aba-3e15-bd90-269286dec353.roa
File: 05ff8e97-9aba-3e15-bd90-269286dec353.roa (raw, json)
Hash identifier: RKJzCMND+4fNDlkvAihzu4sA+xsVAhyWGX25g8xTSlc=
Subject key identifier: 47:11:C1:74:81:25:CB:0C:C6:97:2A:4B:21:52:60:74:12:1F:17:3E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6DBBB738947DACD144A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05ff8e97-9aba-3e15-bd90-269286dec353.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 4540
IP address blocks: 207.35.82.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:db:bb:73:89:47:da:cd:14:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a96b369b-452e-45b8-8cbd-ebb0d65f550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:43:84:43:0e:c1:e0:5c:51:fa:ca:5a:cf:2c:
13:76:6c:13:c9:40:10:a4:44:be:52:5c:aa:23:20:
19:d3:97:1a:29:bf:56:77:e8:48:ee:8a:d9:12:94:
c1:79:bf:72:7d:3d:c7:fa:49:cf:33:c9:75:99:8c:
8d:56:a7:59:67:64:2c:4a:27:16:5f:5f:86:5c:33:
62:cd:e2:e2:c5:9d:17:6d:a2:88:aa:81:fa:1a:0a:
5e:c8:4e:91:54:04:5f:fe:d5:5e:79:78:12:a4:52:
25:12:26:ae:22:29:cd:c9:e8:53:f5:13:5e:2d:6c:
9e:e6:63:fc:34:cc:b4:14:ce:df:b8:65:11:be:ae:
93:f2:a7:95:39:1a:ca:c2:81:e3:eb:0d:48:8b:aa:
94:f2:9b:b9:2f:41:fd:2e:5b:55:aa:cb:e1:07:7a:
b6:22:2d:e3:b3:dc:b4:d5:27:82:40:e9:eb:9b:50:
34:4f:1d:ae:5f:8a:09:a8:4f:f0:83:02:76:0b:1d:
cc:b0:47:05:9c:28:60:33:39:c4:bb:7d:bb:be:3d:
b6:6e:54:b3:a5:11:8a:cd:e0:43:81:53:b2:95:15:
05:34:96:c0:d1:87:60:4e:18:44:7a:c3:cf:59:91:
9f:14:03:c8:2b:d9:2d:d3:f9:f6:97:4f:02:60:a7:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:C1:74:81:25:CB:0C:C6:97:2A:4B:21:52:60:74:12:1F:17:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05ff8e97-9aba-3e15-bd90-269286dec353.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:74:60:89:93:e2:ae:e0:0a:2d:09:2b:ab:d7:92:5e:2c:ad:
16:62:67:80:88:5a:42:23:c0:fc:a2:65:1e:98:e0:1f:2a:05:
bb:fe:b3:d3:74:ef:9e:a5:9f:f8:6d:94:b6:f8:4d:80:2d:ad:
35:16:9e:f5:80:f5:c3:e1:d5:bd:ee:97:c2:68:7a:45:e2:5d:
99:27:35:11:81:8b:d2:d3:7e:15:53:4e:a0:d3:1d:f2:11:02:
ad:cc:38:07:c2:81:4c:85:96:d9:f9:88:84:1c:8b:bc:d7:8d:
fd:cb:d9:f9:eb:ab:b5:b4:07:41:af:3e:d5:f8:8d:81:fe:d2:
d9:79:17:5c:3f:f9:95:62:7b:77:c2:9d:fd:2f:1f:96:3e:1e:
47:3f:d6:fa:4b:fc:bb:2a:6f:b1:eb:05:26:53:e9:3f:be:68:
9c:12:dc:3b:ce:54:0a:ba:b6:c1:91:97:07:c5:a9:f3:6b:c2:
af:0f:2d:c3:f2:a2:ac:09:3e:21:9c:9a:0c:d9:f3:88:c3:c0:
be:f4:6e:46:f1:72:73:b2:f1:94:b1:16:1e:dd:cc:12:37:26:
2c:3b:4e:90:a4:57:74:1d:c5:78:e6:23:33:87:2f:9e:b6:6b:
82:19:c8:24:86:68:c3:15:49:97:10:cf:1b:da:fa:7f:5a:14:
49:52:e9:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmttu7c4lH2s0USoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YTk2YjM2OWItNDUyZS00NWI4LThjYmQtZWJiMGQ2NWY1NTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70OEQw7B4FxR+spazywTdmwTyUAQpES+Ulyq
IyAZ05caKb9Wd+hI7orZEpTBeb9yfT3H+knPM8l1mYyNVqdZZ2QsSicWX1+GXDNi
zeLixZ0XbaKIqoH6GgpeyE6RVARf/tVeeXgSpFIlEiauIinNyehT9RNeLWye5mP8
NMy0FM7fuGURvq6T8qeVORrKwoHj6w1Ii6qU8pu5L0H9LltVqsvhB3q2Ii3js9y0
1SeCQOnrm1A0Tx2uX4oJqE/wgwJ2Cx3MsEcFnChgMznEu327vj22blSzpRGKzeBD
gVOylRUFNJbA0YdgThhEesPPWZGfFAPIK9kt0/n2l08CYKepgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcRwXSBJcsMxpcqSyFSYHQSHxc+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDVmZjhlOTctOWFiYS0z
ZTE1LWJkOTAtMjY5Mjg2ZGVjMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyNSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACN0YImT4q7gCi0JK6vXkl4srRZiZ4CIWkIjwPyiZR6Y4B8qBbv+s9N0
756ln/htlLb4TYAtrTUWnvWA9cPh1b3ul8JoekXiXZknNRGBi9LTfhVTTqDTHfIR
Aq3MOAfCgUyFltn5iIQci7zXjf3L2fnrq7W0B0GvPtX4jYH+0tl5F1w/+ZVie3fC
nf0vH5Y+Hkc/1vpL/Lsqb7HrBSZT6T++aJwS3DvOVAq6tsGRlwfFqfNrwq8PLcPy
oqwJPiGcmgzZ84jDwL70bkbxcnOy8ZSxFh7dzBI3Jiw7TpCkV3QdxXjmIzOHL562
a4IZyCSGaMMVSZcQzxva+n9aFElS6Qc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:04 2025 by rpki-client