Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa
File: 0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa (raw, json)
Hash identifier: tw085jkAprmT7YfDNWm6tf/6H0QbXYjOf6PMh6YqmlU=
Subject key identifier: 02:81:E8:7B:F7:17:06:38:C8:CF:08:94:2A:A5:DB:85:B4:59:70:EE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493167B7D5AA65F0ADC273100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 216.6.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:7b:7d:5a:a6:5f:0a:dc:27:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=d4981562-741e-458b-b9ab-e0312dba2638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:64:c1:e5:86:f4:bb:2d:d9:81:eb:94:68:
24:26:72:6e:39:65:91:49:62:72:09:93:af:c9:ad:
e4:9f:0a:df:5a:eb:a2:2d:3a:07:d6:b5:3a:7c:b8:
c0:8e:cd:ba:be:d1:70:99:9b:e5:60:14:18:a7:50:
80:99:25:05:a3:f6:1b:8c:0a:eb:2c:5b:f8:08:fc:
f4:8e:3b:47:8a:5e:b9:da:e2:29:e7:0a:9a:c6:7b:
25:35:3a:26:6d:51:a8:4d:0a:6b:a6:60:0e:b6:bf:
40:dd:67:ab:69:7b:bd:b9:46:0d:5c:46:55:aa:28:
a6:fa:15:2e:92:c5:8e:2b:00:e6:d9:6e:e1:d7:f4:
71:fc:24:22:c9:6d:e6:80:16:eb:7b:53:4f:59:3a:
9c:89:b0:e4:12:50:f3:11:0c:6e:f7:46:9a:1b:dc:
eb:cf:06:00:b2:c5:ab:f0:5f:e7:a8:8f:cb:69:6d:
c0:be:f1:7d:1c:6a:39:6b:75:d2:2c:17:71:97:42:
df:4b:50:90:f8:fc:ab:8e:55:36:94:5f:43:cb:c9:
a0:f9:35:16:bb:0f:d5:5f:7b:36:96:6e:8b:6d:bf:
a8:49:bb:ab:95:dc:f7:76:a2:56:f5:da:08:b9:d7:
8d:ab:22:b4:90:cf:f5:5b:2a:d9:67:6a:72:6f:ae:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:E8:7B:F7:17:06:38:C8:CF:08:94:2A:A5:DB:85:B4:59:70:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.6.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:fc:3c:ee:8b:b6:c3:8f:70:81:f4:ab:40:1d:bb:21:df:2c:
2e:e2:85:93:97:df:23:da:fe:0f:7d:06:67:bc:19:59:78:1f:
99:49:5a:d6:9b:65:3c:a2:ee:b2:cd:84:44:14:ec:74:25:bb:
59:b4:f6:9e:ab:64:f4:0c:b1:7a:27:6d:5f:52:c0:29:a7:fc:
74:75:8f:3a:85:de:c6:9b:4f:0b:da:89:65:36:80:ff:58:53:
14:7e:00:ab:48:ca:58:87:fa:20:1a:69:63:96:53:35:2d:91:
31:82:32:35:7e:b5:31:1e:f8:5c:75:56:ac:a0:30:a8:09:2a:
5f:0b:1e:16:fa:84:9c:d0:cb:b5:ad:d7:78:32:12:1d:5d:47:
30:80:37:8c:fd:ed:d0:2a:8a:bc:e6:28:b0:f3:ee:d3:00:17:
fd:4d:f0:7e:1c:1e:e1:90:e2:05:d5:d4:1a:04:9d:3b:0c:03:
b4:99:0e:24:b9:30:a7:1d:ae:ad:58:19:3a:87:4a:c3:59:1c:
2a:5c:f9:63:d5:2f:a7:66:a0:45:1e:9c:0c:ea:5e:c0:59:e0:
27:c2:da:00:41:ab:9d:ca:3a:01:51:e1:81:df:52:7c:37:54:
71:3d:c6:58:f2:63:f8:be:27:dc:ab:3a:9e:7c:cf:38:5e:ff:
41:07:a2:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFnt9WqZfCtwnMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDQ5ODE1NjItNzQxZS00NThiLWI5YWItZTAzMTJkYmEyNjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0VkweWG9Lst2YHrlGgkJnJuOWWRSWJyCZOv
ya3knwrfWuuiLToH1rU6fLjAjs26vtFwmZvlYBQYp1CAmSUFo/YbjArrLFv4CPz0
jjtHil652uIp5wqaxnslNTombVGoTQprpmAOtr9A3WeraXu9uUYNXEZVqiim+hUu
ksWOKwDm2W7h1/Rx/CQiyW3mgBbre1NPWTqcibDkElDzEQxu90aaG9zrzwYAssWr
8F/nqI/LaW3AvvF9HGo5a3XSLBdxl0LfS1CQ+PyrjlU2lF9Dy8mg+TUWuw/VX3s2
lm6Lbb+oSburldz3dqJW9doIudeNqyK0kM/1WyrZZ2pyb65hkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKB6Hv3FwY4yM8IlCql24W0WXDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGMwY2ZlNjctYThjOC0z
MThmLWJhZjQtOTBkNzZkOTRlNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJf8PO6LtsOPcIH0q0AduyHfLC7ihZOX3yPa/g99Bme8GVl4H5lJWtab
ZTyi7rLNhEQU7HQlu1m09p6rZPQMsXonbV9SwCmn/HR1jzqF3sabTwvaiWU2gP9Y
UxR+AKtIyliH+iAaaWOWUzUtkTGCMjV+tTEe+Fx1VqygMKgJKl8LHhb6hJzQy7Wt
13gyEh1dRzCAN4z97dAqirzmKLDz7tMAF/1N8H4cHuGQ4gXV1BoEnTsMA7SZDiS5
MKcdrq1YGTqHSsNZHCpc+WPVL6dmoEUenAzqXsBZ4CfC2gBBq53KOgFR4YHfUnw3
VHE9xljyY/i+J9yrOp58zzhe/0EHov4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:58 2025 by rpki-client