Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cb7450e-02ee-3112-9b8e-33d9d3fcdd97.roa
File: 2cb7450e-02ee-3112-9b8e-33d9d3fcdd97.roa (raw, json)
Hash identifier: bYb5M3y11mRRUjFoaY9mwcqrXnvb8JuWpkY/LePkqWI=
Subject key identifier: E5:57:59:D6:20:BA:04:B9:4D:EB:A3:CA:04:F5:66:32:DA:05:3E:7E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB018C0F8CC8EEC1298AF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cb7450e-02ee-3112-9b8e-33d9d3fcdd97.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 33017
IP address blocks: 204.101.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:18:c0:f8:cc:8e:ec:12:98:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=a1bc6ff6-6648-407b-b807-4da32ba35aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:10:51:80:a0:b1:6d:92:43:84:cb:6c:d2:
67:86:db:26:7d:32:7b:17:f1:37:59:2b:b8:6b:70:
86:84:0d:1c:03:66:f0:9b:c2:f4:0d:1b:8b:b7:74:
cb:a9:f5:34:92:cc:35:b2:47:92:10:df:27:ad:82:
2f:ad:50:9e:42:ae:ab:9d:6b:77:d6:36:8d:31:a5:
22:c1:8e:7f:7e:10:fb:da:db:3f:42:0c:0e:91:c1:
1e:e8:14:a3:4a:01:1b:1f:db:e1:31:e0:e2:5d:f6:
25:d8:b7:07:5d:ec:b0:1d:8d:26:e8:1f:07:b2:fc:
7c:a2:99:84:bc:b9:86:22:e1:5f:cf:88:3b:59:0e:
6c:92:f1:9a:48:06:2b:22:73:9f:c5:33:af:25:95:
40:48:4b:16:56:06:4f:14:a5:a5:77:ef:72:08:ae:
fb:e0:64:34:01:71:37:95:5b:79:f1:be:12:d9:06:
04:4d:04:ae:be:f4:06:c1:ee:bb:98:4c:8f:7b:99:
2b:af:57:3c:ae:06:ac:52:ee:bd:96:97:f9:6c:bf:
ea:e2:95:cf:db:45:9f:b0:7a:09:c2:b9:20:05:b5:
74:7c:40:59:67:96:41:c7:02:c6:5a:ae:12:09:f1:
92:59:02:71:64:74:20:19:0b:50:b3:3d:5a:67:15:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:59:D6:20:BA:04:B9:4D:EB:A3:CA:04:F5:66:32:DA:05:3E:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cb7450e-02ee-3112-9b8e-33d9d3fcdd97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:ef:60:ac:c0:d1:00:37:10:91:db:2b:ee:6e:4d:ab:19:8a:
05:d9:a6:96:4d:49:e4:13:36:1a:48:de:e9:58:dd:84:1e:24:
7d:3d:2e:54:8b:cc:a5:9a:55:27:be:32:c0:8c:b8:87:67:3a:
e0:c0:5c:da:c0:a9:d6:17:03:57:6c:fd:fa:3c:50:f4:b4:b5:
a9:98:d8:55:e0:e4:63:27:c7:bd:c5:20:8c:e5:06:e0:79:60:
45:82:3b:95:91:83:32:d2:61:9d:02:03:cb:3e:6b:7a:48:ea:
cd:50:79:c8:9a:8e:e4:9e:5a:25:6c:fe:2c:19:0f:6f:81:b1:
a0:a2:3d:ef:f3:cf:42:4d:f9:20:e4:5c:9d:d3:3a:be:0e:13:
25:29:eb:c4:2f:b9:2b:13:d9:ae:f0:10:b2:a2:28:a7:2e:88:
97:41:7c:24:b1:a6:fd:fe:f2:55:d1:b9:07:6d:d5:e5:a5:a0:
21:ac:14:0c:15:c6:2b:9e:56:e1:f4:e8:fa:18:f8:ed:02:81:
b7:46:bd:44:f5:95:5c:2a:40:72:f8:f5:61:a9:1d:90:fa:9c:
d2:5a:66:90:e9:79:ce:15:0a:e6:cd:70:75:e6:e6:47:90:20:
8a:5c:a0:bb:3e:db:20:41:55:25:31:d7:26:50:0d:0d:d4:01:
a4:9f:03:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsBjA+MyO7BKYr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YTFiYzZmZjYtNjY0OC00MDdiLWI4MDctNGRhMzJiYTM1YWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjkQUYCgsW2SQ4TLbNJnhtsmfTJ7F/E3WSu4
a3CGhA0cA2bwm8L0DRuLt3TLqfU0ksw1skeSEN8nrYIvrVCeQq6rnWt31jaNMaUi
wY5/fhD72ts/QgwOkcEe6BSjSgEbH9vhMeDiXfYl2LcHXeywHY0m6B8Hsvx8opmE
vLmGIuFfz4g7WQ5skvGaSAYrInOfxTOvJZVASEsWVgZPFKWld+9yCK774GQ0AXE3
lVt58b4S2QYETQSuvvQGwe67mEyPe5krr1c8rgasUu69lpf5bL/q4pXP20WfsHoJ
wrkgBbV0fEBZZ5ZBxwLGWq4SCfGSWQJxZHQgGQtQsz1aZxWDgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVXWdYgugS5TeujygT1ZjLaBT5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmNiNzQ1MGUtMDJlZS0z
MTEyLTliOGUtMzNkOWQzZmNkZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3vYKzA0QA3EJHbK+5uTasZigXZppZNSeQTNhpI3ulY3YQeJH09LlSL
zKWaVSe+MsCMuIdnOuDAXNrAqdYXA1ds/fo8UPS0tamY2FXg5GMnx73FIIzlBuB5
YEWCO5WRgzLSYZ0CA8s+a3pI6s1QeciajuSeWiVs/iwZD2+BsaCiPe/zz0JN+SDk
XJ3TOr4OEyUp68QvuSsT2a7wELKiKKcuiJdBfCSxpv3+8lXRuQdt1eWloCGsFAwV
xiueVuH06PoY+O0CgbdGvUT1lVwqQHL49WGpHZD6nNJaZpDpec4VCubNcHXm5keQ
IIpcoLs+2yBBVSUx1yZQDQ3UAaSfA2g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:14 2025 by rpki-client