Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1bd919b8-e2c0-39b0-bf43-71cdfee27329.roa
File: 1bd919b8-e2c0-39b0-bf43-71cdfee27329.roa (raw, json)
Hash identifier: 05kJgeGXnLCHCooUgPYXN+UMxCijGPxaXgaDPHRVoBw=
Subject key identifier: AF:94:D3:86:AF:F9:94:75:3E:BA:A8:67:6F:75:0F:B0:5A:36:E6:43
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B67455BC9FEB78E48AFE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1bd919b8-e2c0-39b0-bf43-71cdfee27329.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 394422
IP address blocks: 205.200.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:74:55:bc:9f:eb:78:e4:8a:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=48a0c35c-aed7-414d-8984-d36ce88e17ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:a9:68:b9:25:ab:b6:a3:14:6b:cc:16:51:
6d:ad:5e:9f:6e:04:80:af:30:cb:91:1a:9e:e6:3d:
98:e2:0d:cd:ed:aa:fd:fb:0f:85:3d:16:76:e2:89:
0d:6f:4d:63:a6:d4:77:ba:c1:fc:f3:c5:77:aa:bb:
b1:1a:e1:b7:71:62:22:4f:9a:a9:7c:c8:17:1c:b7:
06:31:28:7a:59:ff:52:10:93:22:a4:45:9a:b1:4c:
f3:76:dd:68:a9:98:51:66:fd:b2:fc:52:20:50:8a:
fe:04:34:71:c5:00:23:9c:d0:81:be:f0:8c:5c:1d:
fe:ab:68:f2:03:99:74:98:dc:e6:79:d9:ad:c2:13:
bd:e4:74:46:07:84:75:44:05:3d:09:fb:22:34:6d:
60:5a:4d:bb:17:53:12:ff:28:9c:d5:ac:ea:22:50:
7c:ff:40:b6:4f:a3:16:c7:fa:1b:4d:c9:93:1e:05:
69:ae:29:d4:89:50:9f:9d:0d:fd:8b:2d:1d:42:8a:
68:59:77:41:27:31:b6:00:b1:e4:94:33:64:f2:c5:
51:d1:51:7a:02:f8:d7:e2:42:39:9b:e1:6f:71:79:
d8:d8:dc:d2:d1:a4:94:94:0a:77:8c:db:68:0a:b8:
94:51:d6:89:a1:03:d9:79:69:d0:b2:57:36:60:ff:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:D3:86:AF:F9:94:75:3E:BA:A8:67:6F:75:0F:B0:5A:36:E6:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1bd919b8-e2c0-39b0-bf43-71cdfee27329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:8c:92:b3:ef:fe:17:94:03:c2:f5:98:4d:2b:e6:17:1f:a7:
f9:a6:34:b1:bc:aa:08:5a:17:ef:f8:4f:ae:1b:28:d8:f3:ec:
f7:48:f6:d9:aa:af:0e:fd:25:95:4c:7d:e2:82:41:af:6a:6a:
19:4c:1b:9b:1d:0e:67:73:80:65:6e:c2:d8:6e:d8:03:60:df:
d1:d0:a2:de:5c:08:8f:6c:f0:0d:08:bf:0b:04:5a:4f:03:e2:
ef:bb:67:c4:bb:53:93:59:83:c4:82:a4:89:74:aa:c5:17:4e:
53:0f:8b:11:f3:f3:41:66:2f:d8:35:15:c7:9c:e9:0b:1a:f3:
07:b9:e7:63:cd:7c:ed:89:bd:db:fc:f9:17:6d:69:8d:0a:09:
8b:52:25:64:bf:bd:e7:1b:c7:f4:99:54:88:64:b5:a1:0a:3b:
a0:52:20:c6:c7:b4:b4:29:82:c3:85:35:23:6c:d1:6d:b2:cf:
69:45:1c:ed:d3:4f:8b:4e:ff:97:e0:13:4f:a2:3c:ed:53:4e:
54:f4:b8:a4:00:cf:c6:05:7a:88:39:41:a2:fa:b5:d8:c6:12:
06:bb:a4:ae:51:89:47:9c:a9:51:76:2b:6a:54:4a:dd:4a:c1:
ab:0e:d3:1f:b9:d6:a4:ff:15:ca:8d:a7:d9:58:da:c4:f3:9d:
42:32:b1:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtnRVvJ/reOSK/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NDhhMGMzNWMtYWVkNy00MTRkLTg5ODQtZDM2Y2U4OGUxN2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+6paLklq7ajFGvMFlFtrV6fbgSArzDLkRqe
5j2Y4g3N7ar9+w+FPRZ24okNb01jptR3usH888V3qruxGuG3cWIiT5qpfMgXHLcG
MSh6Wf9SEJMipEWasUzzdt1oqZhRZv2y/FIgUIr+BDRxxQAjnNCBvvCMXB3+q2jy
A5l0mNzmedmtwhO95HRGB4R1RAU9CfsiNG1gWk27F1MS/yic1azqIlB8/0C2T6MW
x/obTcmTHgVprinUiVCfnQ39iy0dQopoWXdBJzG2ALHklDNk8sVR0VF6AvjX4kI5
m+FvcXnY2NzS0aSUlAp3jNtoCriUUdaJoQPZeWnQslc2YP+8PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+U04av+ZR1PrqoZ291D7BaNuZDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWJkOTE5YjgtZTJjMC0z
OWIwLWJmNDMtNzFjZGZlZTI3MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzci+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGMkrPv/heUA8L1mE0r5hcfp/mmNLG8qghaF+/4T64bKNjz7PdI9tmq
rw79JZVMfeKCQa9qahlMG5sdDmdzgGVuwthu2ANg39HQot5cCI9s8A0IvwsEWk8D
4u+7Z8S7U5NZg8SCpIl0qsUXTlMPixHz80FmL9g1Fcec6Qsa8we552PNfO2Jvdv8
+RdtaY0KCYtSJWS/vecbx/SZVIhktaEKO6BSIMbHtLQpgsOFNSNs0W2yz2lFHO3T
T4tO/5fgE0+iPO1TTlT0uKQAz8YFeog5QaL6tdjGEga7pK5RiUecqVF2K2pUSt1K
wasO0x+51qT/FcqNp9lY2sTznUIysRQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:50 2025 by rpki-client