Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0a4630f9-1a5d-3275-a5d0-4493a97327c5.roa
File: 0a4630f9-1a5d-3275-a5d0-4493a97327c5.roa (raw, json)
Hash identifier: /mQl95qHI4x00t8rKMUeQXfSeBkooA6C0ly7LSJnkpY=
Subject key identifier: 83:1E:FD:BF:81:02:68:8E:C0:E0:6A:17:E3:50:B1:1D:8A:6A:80:F7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315492282AF436704B57480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0a4630f9-1a5d-3275-a5d0-4493a97327c5.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 21552
IP address blocks: 206.47.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:49:22:82:af:43:67:04:b5:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=a9cae94e-11ff-48c9-a730-28d4748fd36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:ec:42:84:85:0e:13:71:b6:99:c5:2d:38:
09:85:9a:59:0f:47:67:23:a8:2a:c0:12:e3:ce:16:
be:38:74:32:2d:62:e1:d6:9d:38:57:2c:d1:e5:ee:
78:c9:24:d5:ef:1a:57:60:fb:f5:08:05:ec:88:20:
9a:49:55:88:95:b9:af:1a:37:82:30:a4:8c:75:a9:
3b:af:e3:8a:d8:48:aa:3d:26:49:a2:1c:b9:a2:ca:
a1:89:ca:f4:99:99:c6:a3:87:59:16:c2:96:e1:0b:
9d:83:a0:40:9f:0f:6b:a6:14:cc:74:bb:8e:e6:b2:
88:9f:22:42:c4:e9:4d:7e:9f:56:8f:48:07:da:61:
ac:36:d7:f5:79:24:dc:e0:8e:de:28:5c:ad:99:67:
29:60:60:0a:80:05:74:29:96:85:fd:06:73:18:61:
3f:4f:55:ac:2a:1a:dd:81:f0:67:a4:33:b7:f9:52:
db:cb:1e:27:14:7e:e4:c0:ab:58:ce:a2:95:6c:b2:
1d:d1:fa:02:1a:b7:9a:47:4f:6e:9e:22:1b:34:6a:
89:0f:c7:58:55:40:b3:d9:13:2b:7f:a3:25:b4:7a:
ca:b0:a1:f4:bd:46:1e:d4:ae:bc:97:ab:88:59:1e:
12:69:34:2f:52:90:69:d1:10:4c:30:14:e0:02:b2:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1E:FD:BF:81:02:68:8E:C0:E0:6A:17:E3:50:B1:1D:8A:6A:80:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0a4630f9-1a5d-3275-a5d0-4493a97327c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c7:e3:56:c8:e5:b8:01:2b:2e:64:e5:42:9e:53:4d:02:31:
f0:db:1e:80:59:7c:56:e8:0b:0e:68:ba:fa:e9:a5:48:24:4d:
58:82:29:20:e7:59:93:1d:89:12:4b:c5:5c:dd:ac:81:39:d5:
7b:6d:22:3b:a6:31:e8:f2:76:d6:60:20:63:01:55:8e:e3:0c:
d6:6e:31:95:49:4e:04:42:47:c1:a2:ff:e5:b4:13:3e:a7:f1:
44:40:e0:e1:ca:65:c3:97:bb:cc:d0:16:96:fc:cb:d4:98:3e:
e7:3b:b6:38:a6:a5:36:64:14:52:8d:b8:90:af:f4:c9:7b:a9:
e7:a5:21:84:46:aa:69:a9:8d:27:8c:fa:6e:f5:c0:1a:3b:ce:
7e:c7:f0:57:d3:be:b2:26:da:43:01:48:5b:33:0e:34:08:6a:
bb:b5:b1:ea:cc:ac:5b:ad:b8:1b:c9:18:e9:f2:10:85:7a:ac:
bf:76:db:7f:79:56:bb:f6:61:c8:62:d0:56:df:e5:4c:83:83:
45:1c:c6:5e:fc:d1:c8:b6:7c:0f:14:74:6d:c4:a3:07:31:a2:
df:2d:da:f6:ca:9e:c2:dd:08:7b:81:a0:7a:2f:ee:56:bf:46:
e4:41:87:43:20:46:be:06:9c:98:d2:17:52:41:58:d0:7d:c5:
de:da:a9:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFUkigq9DZwS1dIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YTljYWU5NGUtMTFmZi00OGM5LWE3MzAtMjhkNDc0OGZkMzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5PsQoSFDhNxtpnFLTgJhZpZD0dnI6gqwBLj
zha+OHQyLWLh1p04VyzR5e54ySTV7xpXYPv1CAXsiCCaSVWIlbmvGjeCMKSMdak7
r+OK2EiqPSZJohy5osqhicr0mZnGo4dZFsKW4Qudg6BAnw9rphTMdLuO5rKInyJC
xOlNfp9Wj0gH2mGsNtf1eSTc4I7eKFytmWcpYGAKgAV0KZaF/QZzGGE/T1WsKhrd
gfBnpDO3+VLbyx4nFH7kwKtYzqKVbLId0foCGreaR09uniIbNGqJD8dYVUCz2RMr
f6MltHrKsKH0vUYe1K68l6uIWR4SaTQvUpBp0RBMMBTgArJshwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMe/b+BAmiOwOBqF+NQsR2KaoD3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGE0NjMwZjktMWE1ZC0z
Mjc1LWE1ZDAtNDQ5M2E5NzMyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi8mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnH41bI5bgBKy5k5UKeU00CMfDbHoBZfFboCw5ouvrppUgkTViCKSDn
WZMdiRJLxVzdrIE51XttIjumMejydtZgIGMBVY7jDNZuMZVJTgRCR8Gi/+W0Ez6n
8URA4OHKZcOXu8zQFpb8y9SYPuc7tjimpTZkFFKNuJCv9Ml7qeelIYRGqmmpjSeM
+m71wBo7zn7H8FfTvrIm2kMBSFszDjQIaru1serMrFutuBvJGOnyEIV6rL922395
Vrv2Ychi0Fbf5UyDg0Ucxl780ci2fA8UdG3Eowcxot8t2vbKnsLdCHuBoHov7la/
RuRBh0MgRr4GnJjSF1JBWNB9xd7aqRE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:25 2025 by rpki-client