Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3068fb8b-adca-369f-952f-9c4516236430.roa
File: 3068fb8b-adca-369f-952f-9c4516236430.roa (raw, json)
Hash identifier: ++UxrOOviJQCDMVU+YIdRMqdOn3pA5py0MEKMaaxMQA=
Subject key identifier: D7:4E:41:3B:22:13:55:4A:46:B0:27:AE:FB:4F:5B:E1:CC:89:7F:11
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B51AD7C5CCFD426A4AF600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3068fb8b-adca-369f-952f-9c4516236430.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 12132
IP address blocks: 67.70.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:1a:d7:c5:cc:fd:42:6a:4a:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d791be76-4dd9-4ee6-b4fd-d4cf7935fc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:da:f9:76:6c:6c:9e:2d:85:c9:84:2a:bb:
17:1b:71:1e:e5:25:8a:cc:ec:8b:3a:ea:22:25:5e:
c6:8c:81:5f:4e:eb:e8:2a:25:0c:c7:9d:ec:bc:c5:
41:de:11:72:21:df:41:e8:8a:d3:ff:8d:13:b0:06:
78:0c:d1:81:19:f9:91:2d:3e:82:3c:7d:71:1a:0c:
9d:f4:6b:a2:d2:30:db:ed:27:37:bb:91:16:70:c6:
f5:03:25:d0:e3:cc:32:d9:fd:a8:9b:7f:bb:ff:26:
38:5e:d1:7b:6b:c7:1c:8e:12:82:c0:54:70:22:22:
b4:b3:be:6b:e0:82:15:11:7e:72:87:df:60:56:53:
26:2c:96:67:6b:5b:76:82:26:dc:89:4a:3e:81:15:
a0:9b:00:b7:49:b6:77:69:7a:0f:2c:03:ea:29:0b:
ea:57:9f:00:c5:97:f1:d9:5b:23:87:1a:a0:78:ef:
e5:01:e6:46:44:b2:cf:70:59:30:f1:03:2c:f5:12:
ce:c4:06:d0:2c:0e:db:7e:6b:38:7c:9a:e9:eb:52:
e5:e3:c4:f0:86:b9:a4:9b:9b:4a:26:ce:40:10:36:
d8:42:81:f8:71:01:3c:52:56:a9:a4:7b:8a:43:ba:
e5:50:de:27:fc:77:78:5a:ea:2a:7a:eb:a3:d9:76:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:41:3B:22:13:55:4A:46:B0:27:AE:FB:4F:5B:E1:CC:89:7F:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3068fb8b-adca-369f-952f-9c4516236430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.70.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:6e:2d:73:06:ff:db:e0:48:a8:86:a1:90:f9:ce:54:7a:5f:
10:c5:54:c1:92:76:f1:f8:76:73:93:d5:ae:c9:a8:6d:49:7d:
55:a1:22:94:69:52:1c:e9:3e:65:b5:62:c5:91:dd:c6:03:87:
28:c1:9d:a9:48:12:f0:14:f5:94:77:be:a8:4e:0f:a9:51:31:
a8:13:95:c3:a7:3f:fa:df:70:87:15:5b:36:c4:08:dc:09:4d:
ac:41:99:91:2c:c2:04:69:10:37:bf:75:ca:08:f8:82:e7:02:
b2:a6:ad:72:0d:bf:34:5e:d0:f3:3e:ee:ae:66:27:fe:db:6d:
ee:c7:e9:3e:7a:53:e7:47:d4:1d:45:2b:5b:c7:ba:71:06:26:
9e:4f:74:98:1e:55:51:eb:9f:48:2e:53:35:9d:32:6b:63:b7:
9f:2c:e7:16:ea:7c:f2:02:6d:2e:10:c6:98:c0:f7:b9:ec:7f:
64:76:1b:01:82:53:b2:45:26:6e:17:ab:80:a3:69:80:35:7d:
3f:92:c6:1e:cf:cb:54:b6:0b:43:22:47:80:b8:28:3a:bf:90:
da:85:d4:05:72:17:37:9d:6b:87:98:71:e5:97:d3:28:7e:5e:
2b:74:96:84:9c:2d:d7:91:90:13:82:4e:79:51:87:62:fa:7a:
ec:b0:09:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtRrXxcz9QmpK9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZDc5MWJlNzYtNGRkOS00ZWU2LWI0ZmQtZDRjZjc5MzVmYzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0La+XZsbJ4thcmEKrsXG3Ee5SWKzOyLOuoi
JV7GjIFfTuvoKiUMx53svMVB3hFyId9B6IrT/40TsAZ4DNGBGfmRLT6CPH1xGgyd
9Gui0jDb7Sc3u5EWcMb1AyXQ48wy2f2om3+7/yY4XtF7a8ccjhKCwFRwIiK0s75r
4IIVEX5yh99gVlMmLJZna1t2gibciUo+gRWgmwC3SbZ3aXoPLAPqKQvqV58AxZfx
2VsjhxqgeO/lAeZGRLLPcFkw8QMs9RLOxAbQLA7bfms4fJrp61Ll48Twhrmkm5tK
Js5AEDbYQoH4cQE8UlappHuKQ7rlUN4n/Hd4Wuoqeuuj2XZ4yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdOQTsiE1VKRrAnrvtPW+HMiX8RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzA2OGZiOGItYWRjYS0z
NjlmLTk1MmYtOWM0NTE2MjM2NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0b4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1uLXMG/9vgSKiGoZD5zlR6XxDFVMGSdvH4dnOT1a7JqG1JfVWhIpRp
UhzpPmW1YsWR3cYDhyjBnalIEvAU9ZR3vqhOD6lRMagTlcOnP/rfcIcVWzbECNwJ
TaxBmZEswgRpEDe/dcoI+ILnArKmrXINvzRe0PM+7q5mJ/7bbe7H6T56U+dH1B1F
K1vHunEGJp5PdJgeVVHrn0guUzWdMmtjt58s5xbqfPICbS4QxpjA97nsf2R2GwGC
U7JFJm4Xq4CjaYA1fT+Sxh7Py1S2C0MiR4C4KDq/kNqF1AVyFzeda4eYceWX0yh+
Xit0loScLdeRkBOCTnlRh2L6euywCcw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:59 2025 by rpki-client