Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23c9119b-8c80-3a38-875e-ad54b70bebf9.roa
File: 23c9119b-8c80-3a38-875e-ad54b70bebf9.roa (raw, json)
Hash identifier: eFk4CdZMxM4mqRU/ng2LY+AIS3Wsp4q8bFVS3p5yC9o=
Subject key identifier: A1:84:94:AB:7E:CB:CC:B4:5E:C5:10:7F:71:B9:E8:F5:83:AC:9F:C0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5CA03F67D97D70E9D1920
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23c9119b-8c80-3a38-875e-ad54b70bebf9.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 184.150.240.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:ca:03:f6:7d:97:d7:0e:9d:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f07b9a08-ba5f-4846-bebb-9623632baf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:ee:dd:a6:96:0f:db:8b:e0:1b:43:fa:a5:
6b:62:23:1d:37:f1:c4:2d:7d:8d:07:dd:6e:c4:e1:
6d:03:16:84:ee:63:fe:b7:3e:25:e3:0d:ba:f1:9e:
29:b1:45:74:14:9f:04:64:8f:0a:fe:87:64:a3:ab:
14:5e:50:9e:a6:8b:9a:7c:c4:66:99:2b:1a:bf:3c:
61:9e:68:43:35:d0:77:78:28:3a:84:4f:69:f4:82:
c3:bd:b4:e5:9d:72:31:8a:58:ba:18:c8:45:82:35:
55:82:4c:bc:ea:c7:2f:71:8c:8e:ed:d4:12:7c:2e:
98:e7:07:18:f4:94:8a:53:b3:1c:7b:73:a9:56:56:
ca:40:a0:e3:9b:4d:61:0d:2c:68:99:3f:e0:70:8b:
f2:d8:f4:59:53:51:43:92:49:92:00:6e:56:5e:b5:
d3:d1:87:2a:5a:4a:40:9a:d9:2a:29:33:80:29:e2:
c8:0a:3f:be:f0:b8:9e:db:08:3d:a7:3c:d0:6c:0e:
fd:64:fb:ea:c0:f6:cb:83:27:ac:f2:5b:86:af:0c:
87:4a:8e:d3:9a:d7:a6:85:a8:9a:f8:33:bb:a5:10:
c2:5c:9f:0c:6b:bd:89:af:e9:4d:ab:73:e4:9b:ee:
1e:ac:ad:ee:3b:aa:4a:f6:0f:46:cf:67:e3:e0:70:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:84:94:AB:7E:CB:CC:B4:5E:C5:10:7F:71:B9:E8:F5:83:AC:9F:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/23c9119b-8c80-3a38-875e-ad54b70bebf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.150.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:4a:43:ca:0c:db:09:f9:84:d0:7d:58:a2:f8:f4:fd:de:e9:
6e:d7:67:4f:5e:7f:96:6b:db:56:8c:16:d5:f2:70:a2:e8:2b:
46:c0:c7:e8:76:21:ce:cc:01:bf:f1:ee:70:39:8a:cc:55:bb:
76:56:02:45:e3:33:a3:64:14:00:08:32:9f:a8:6e:3f:e4:20:
84:d4:99:83:98:d7:74:10:79:8f:8a:41:98:1c:f9:07:36:06:
cc:1f:9d:cd:fd:fb:91:f4:41:ea:4b:16:fb:8e:b9:72:7b:43:
8e:be:04:44:b3:0c:c0:e6:b8:cf:1c:c6:a7:a6:0e:2b:fc:5e:
e1:9c:de:21:f3:77:15:c9:fb:14:16:29:7e:10:24:7c:70:a9:
a7:fb:49:2d:4a:91:e3:4e:48:3f:97:0a:8b:c8:2b:9e:86:52:
0d:03:70:79:d0:54:97:7f:66:6a:0d:a2:88:0b:1b:dd:8c:e6:
0f:bb:07:5a:a5:93:9c:1f:7c:ab:a1:7e:8f:f6:45:3a:50:8b:
f4:41:50:04:ab:1d:57:19:b0:5f:53:7b:41:ac:a3:12:6b:19:
e3:15:8d:4d:72:7f:72:d7:25:69:48:b0:45:5a:7a:b5:52:2e:
0c:b1:60:37:52:84:24:f0:f2:7a:af:fc:5d:07:d9:cf:3c:ec:
db:1f:28:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtcoD9n2X1w6dGSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjA3YjlhMDgtYmE1Zi00ODQ2LWJlYmItOTYyMzYzMmJhZjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4fu3aaWD9uL4BtD+qVrYiMdN/HELX2NB91u
xOFtAxaE7mP+tz4l4w268Z4psUV0FJ8EZI8K/odko6sUXlCepouafMRmmSsavzxh
nmhDNdB3eCg6hE9p9ILDvbTlnXIxili6GMhFgjVVgky86scvcYyO7dQSfC6Y5wcY
9JSKU7Mce3OpVlbKQKDjm01hDSxomT/gcIvy2PRZU1FDkkmSAG5WXrXT0YcqWkpA
mtkqKTOAKeLICj++8Lie2wg9pzzQbA79ZPvqwPbLgyes8luGrwyHSo7Tmtemhaia
+DO7pRDCXJ8Ma72Jr+lNq3Pkm+4erK3uO6pK9g9Gz2fj4HAtswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGElKt+y8y0XsUQf3G56PWDrJ/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjNjOTExOWItOGM4MC0z
YTM4LTg3NWUtYWQ1NGI3MGJlYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuJbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpKQ8oM2wn5hNB9WKL49P3e6W7XZ09ef5Zr21aMFtXycKLoK0bAx+h2
Ic7MAb/x7nA5isxVu3ZWAkXjM6NkFAAIMp+obj/kIITUmYOY13QQeY+KQZgc+Qc2
Bswfnc39+5H0QepLFvuOuXJ7Q46+BESzDMDmuM8cxqemDiv8XuGc3iHzdxXJ+xQW
KX4QJHxwqaf7SS1KkeNOSD+XCovIK56GUg0DcHnQVJd/ZmoNoogLG92M5g+7B1ql
k5wffKuhfo/2RTpQi/RBUASrHVcZsF9Te0GsoxJrGeMVjU1yf3LXJWlIsEVaerVS
LgyxYDdShCTw8nqv/F0H2c887NsfKDQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:53 2025 by rpki-client