Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c84100f-ffee-399b-adf9-f4215565e355.roa
File: 0c84100f-ffee-399b-adf9-f4215565e355.roa (raw, json)
Hash identifier: CuYCbTmgOZnUbV0pDRlGNwiS0AP6cpE1Lhf4xmJKLys=
Subject key identifier: 3B:66:57:0E:A6:66:04:DE:16:8D:AD:DA:33:13:6E:1C:AF:88:18:E0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28E4D1EF64EDA832425100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c84100f-ffee-399b-adf9-f4215565e355.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.54.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:e4:d1:ef:64:ed:a8:32:42:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=7550bbb7-308d-4fc5-99af-980c6e798584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:14:e1:8f:68:a2:32:63:9c:a4:52:1c:1c:
74:b7:c5:69:02:29:86:50:1e:55:3f:6d:f4:a7:49:
a4:45:b1:90:f3:c9:b0:c9:99:42:57:df:01:c1:b2:
fe:ac:49:59:4f:28:af:d6:b3:95:68:21:cb:3b:7d:
52:71:52:6b:3e:95:b4:97:fb:4a:b1:d7:59:df:b6:
40:b7:fd:36:4c:01:0a:26:1f:b9:6b:9f:d7:94:1f:
ec:5c:9f:7a:fc:bb:2b:e0:d5:cd:69:c0:d9:70:f1:
de:bd:c2:a3:51:28:d5:79:23:d3:bf:1c:de:34:6c:
64:74:26:c2:64:06:8a:b6:fd:95:d1:50:7b:f2:0d:
82:a2:84:fa:53:af:85:e4:96:6d:54:aa:75:a5:9c:
56:f3:34:67:55:2f:00:85:2b:57:4e:d6:01:02:d9:
7b:ec:30:dd:55:c2:67:dd:2b:62:6c:84:a8:60:43:
6d:56:f6:91:67:6a:96:05:57:1c:d6:10:6f:97:f9:
2b:a5:3c:9a:5b:90:1c:90:d9:09:9e:b9:d4:05:06:
fa:33:dd:ba:1b:a0:67:ce:a7:22:7a:a0:a6:65:dd:
ba:a1:6e:c7:49:67:18:e2:26:24:7f:6f:58:2a:0a:
41:ba:4c:18:92:6d:a6:d0:54:e0:fa:32:ec:c6:b7:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:57:0E:A6:66:04:DE:16:8D:AD:DA:33:13:6E:1C:AF:88:18:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c84100f-ffee-399b-adf9-f4215565e355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:c0:cb:73:2c:55:56:9c:f1:71:60:28:fb:e9:2b:39:65:36:
ed:2a:db:e9:e2:24:c3:f6:33:a5:67:0b:ce:09:54:0c:79:89:
9a:e8:bc:fc:df:cb:bd:a7:19:39:cb:04:29:7d:3f:d1:50:27:
9e:0d:b6:fa:1d:f2:be:1a:b2:04:53:c0:ab:a0:a1:a8:fe:59:
12:cd:0e:49:d0:5c:c4:f4:92:54:95:5e:85:60:79:40:32:32:
59:94:de:ba:95:8b:51:cf:a5:58:7d:66:88:08:0e:ca:81:8b:
54:b2:05:14:e9:21:84:3d:68:52:3f:b2:7e:56:33:f1:3b:9f:
be:7e:34:50:5b:10:6b:c9:5d:9a:d7:bd:54:28:5e:f0:0b:17:
b3:5e:c8:f5:34:0f:4f:a4:62:a2:9c:91:59:2a:ac:bc:e4:cf:
38:c0:d6:8b:29:b0:8c:50:0d:16:be:ee:81:53:7e:42:cb:dd:
bf:1e:01:14:96:93:23:45:7f:04:6b:4d:c1:93:2a:3d:80:15:
50:27:41:a5:5c:b5:23:88:52:b8:0d:ab:1e:c7:f0:92:58:79:
c1:01:9d:bf:c7:d5:0d:b1:6f:de:9a:f6:9a:22:1d:b8:58:26:
93:57:c0:04:8c:24:ec:a7:53:d4:62:2c:ae:1b:ef:ad:70:78:
83:be:60:e7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEYtKOTR72TtqDJCUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NzU1MGJiYjctMzA4ZC00ZmM1LTk5YWYtOTgwYzZlNzk4NTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTkU4Y9oojJjnKRSHBx0t8VpAimGUB5VP230
p0mkRbGQ88mwyZlCV98BwbL+rElZTyiv1rOVaCHLO31ScVJrPpW0l/tKsddZ37ZA
t/02TAEKJh+5a5/XlB/sXJ96/Lsr4NXNacDZcPHevcKjUSjVeSPTvxzeNGxkdCbC
ZAaKtv2V0VB78g2CooT6U6+F5JZtVKp1pZxW8zRnVS8AhStXTtYBAtl77DDdVcJn
3StibISoYENtVvaRZ2qWBVcc1hBvl/krpTyaW5AckNkJnrnUBQb6M926G6Bnzqci
eqCmZd26oW7HSWcY4iYkf29YKgpBukwYkm2m0FTg+jLsxrcX4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDtmVw6mZgTeFo2t2jMTbhyviBjgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGM4NDEwMGYtZmZlZS0z
OTliLWFkZjktZjQyMTU1NjVlMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARjYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXsDLcyxVVpzxcWAo++krOWU27Srb6eIkw/YzpWcLzglUDHmJmui8/N/L
vacZOcsEKX0/0VAnng22+h3yvhqyBFPAq6ChqP5ZEs0OSdBcxPSSVJVehWB5QDIy
WZTeupWLUc+lWH1miAgOyoGLVLIFFOkhhD1oUj+yflYz8Tufvn40UFsQa8ldmte9
VChe8AsXs17I9TQPT6RiopyRWSqsvOTPOMDWiymwjFANFr7ugVN+Qsvdvx4BFJaT
I0V/BGtNwZMqPYAVUCdBpVy1I4hSuA2rHsfwklh5wQGdv8fVDbFv3pr2miIduFgm
k1fABIwk7KdT1GIsrhvvrXB4g75g5w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:59 2025 by rpki-client