Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cede660-d4ab-30be-b380-81fa665e0001.roa
File: 1cede660-d4ab-30be-b380-81fa665e0001.roa (raw, json)
Hash identifier: OaIvSIOK2UkKgGPRjP+CQrRkqA+t6M2EQphjw1SdBAo=
Subject key identifier: 85:EB:0A:10:04:42:CC:34:3B:90:30:10:5D:66:F4:6A:6B:5E:E8:D8
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75C1AF2FA622B2ADE477C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cede660-d4ab-30be-b380-81fa665e0001.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 10965
IP address blocks: 207.161.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:c1:af:2f:a6:22:b2:ad:e4:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=62782e5d-263e-46e6-9ac1-76d89d157c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:5e:2d:d4:f1:69:0c:3c:48:3a:4e:10:8d:
ee:33:bd:1b:b6:5a:4d:10:6f:39:92:05:7d:66:fa:
b1:67:bf:fb:83:67:e2:26:e9:86:41:9b:fc:0c:9e:
15:3f:54:5d:af:eb:86:61:ad:33:05:a5:0c:28:1e:
c6:70:5b:93:42:6a:f4:6a:59:cb:3c:34:c7:6d:07:
d2:17:63:67:f9:f2:3f:05:ad:d0:94:59:a3:09:50:
1b:57:e8:af:9e:74:6f:a7:fb:23:c4:69:96:ab:83:
5e:9a:3b:c4:74:48:f0:14:03:d6:86:cd:af:5b:44:
62:70:38:b7:1a:54:1e:ea:7b:10:23:06:8a:bd:3a:
17:98:82:62:35:7b:ed:b2:78:b2:6a:d8:1e:02:44:
26:7b:88:ab:cd:aa:ac:08:b2:10:2e:9a:a5:9d:2a:
85:21:09:c9:b7:07:f1:f6:9c:7c:11:5e:19:98:6d:
a0:16:72:04:1f:43:05:e1:07:b7:9c:98:db:bc:5e:
32:56:43:14:8c:70:c3:e7:8a:a6:61:c2:5f:d8:d7:
59:98:c3:84:da:43:00:27:57:d0:40:b9:aa:62:3a:
c1:9d:54:6d:31:a0:9c:1e:9a:25:75:67:70:d5:06:
ad:15:38:ef:55:83:18:6d:4b:45:e2:14:ce:05:35:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:0A:10:04:42:CC:34:3B:90:30:10:5D:66:F4:6A:6B:5E:E8:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1cede660-d4ab-30be-b380-81fa665e0001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.161.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:1d:8f:17:80:b7:2f:a6:68:60:c5:a0:20:cc:61:d2:87:12:
60:1b:1f:1a:c1:f8:1d:96:57:5e:bc:c3:3e:cb:e3:50:9d:4f:
9d:56:f9:19:b0:46:53:34:40:2f:92:dd:97:04:a8:87:d0:51:
3f:d3:be:0f:65:44:cb:ed:dd:9b:92:ea:7b:ab:0a:38:ab:99:
a9:9c:52:d2:0b:25:9f:4c:d3:01:1e:6a:3d:94:2f:10:1b:b5:
45:1c:b2:49:cb:5c:e3:de:ad:42:cd:09:12:1d:2c:cb:a8:e4:
69:9a:c7:6a:eb:41:dd:c2:c4:64:7d:41:34:de:af:5d:7d:5f:
17:8d:01:ff:a2:92:d4:b1:25:04:f2:72:d9:f8:21:91:48:d9:
9f:2e:07:ad:8c:a3:d5:8f:f4:cc:c0:7e:25:c5:18:da:c6:d8:
d2:b0:de:ee:31:c1:f0:90:ae:27:68:6d:a4:5f:7f:bd:d4:d4:
ef:c4:8a:cc:91:26:d7:f6:9b:f2:1e:84:7c:8b:65:39:30:ca:
ba:bd:42:90:fd:8f:98:3f:a0:ec:e0:8a:ed:f2:7b:dc:7a:e4:
9d:e1:3b:76:11:66:ce:26:51:95:61:fa:ed:4c:20:e1:a6:47:
ac:ed:12:7d:57:49:f5:ab:94:8c:00:82:35:e0:8e:27:8c:57:
a4:e1:e7:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdcGvL6Yisq3kd8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjI3ODJlNWQtMjYzZS00NmU2LTlhYzEtNzZkODlkMTU3YzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMFeLdTxaQw8SDpOEI3uM70btlpNEG85kgV9
ZvqxZ7/7g2fiJumGQZv8DJ4VP1Rdr+uGYa0zBaUMKB7GcFuTQmr0alnLPDTHbQfS
F2Nn+fI/Ba3QlFmjCVAbV+ivnnRvp/sjxGmWq4NemjvEdEjwFAPWhs2vW0RicDi3
GlQe6nsQIwaKvToXmIJiNXvtsniyatgeAkQme4irzaqsCLIQLpqlnSqFIQnJtwfx
9px8EV4ZmG2gFnIEH0MF4Qe3nJjbvF4yVkMUjHDD54qmYcJf2NdZmMOE2kMAJ1fQ
QLmqYjrBnVRtMaCcHpoldWdw1QatFTjvVYMYbUtF4hTOBTVKvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXrChAEQsw0O5AwEF1m9GprXujYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWNlZGU2NjAtZDRhYi0z
MGJlLWIzODAtODFmYTY2NWUwMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6HrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIdjxeAty+maGDFoCDMYdKHEmAbHxrB+B2WV168wz7L41CdT51W+Rmw
RlM0QC+S3ZcEqIfQUT/Tvg9lRMvt3ZuS6nurCjirmamcUtILJZ9M0wEeaj2ULxAb
tUUcsknLXOPerULNCRIdLMuo5Gmax2rrQd3CxGR9QTTer119XxeNAf+iktSxJQTy
ctn4IZFI2Z8uB62Mo9WP9MzAfiXFGNrG2NKw3u4xwfCQridobaRff73U1O/EisyR
Jtf2m/IehHyLZTkwyrq9QpD9j5g/oOzgiu3ye9x65J3hO3YRZs4mUZVh+u1MIOGm
R6ztEn1XSfWrlIwAgjXgjieMV6Th59I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:56 2025 by rpki-client