Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3432c438-c33c-3f9b-9ade-b297496c1206.roa
File: 3432c438-c33c-3f9b-9ade-b297496c1206.roa (raw, json)
Hash identifier: GmbRfnCgUwtZZX+cjVhpD55eJl1kVD6odbgEMRh3TIk=
Subject key identifier: 95:1C:60:78:EA:0E:FD:A5:49:05:36:D8:BB:9A:34:B6:8B:C8:B7:3A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B76427BFC314061DF26680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3432c438-c33c-3f9b-9ade-b297496c1206.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21552
IP address blocks: 207.236.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:64:27:bf:c3:14:06:1d:f2:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=e4ca81cd-5cbb-4222-b8d9-e50486240fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:38:35:ef:75:6b:63:c7:60:44:47:48:7b:
03:c2:ce:53:06:15:50:b4:39:e4:52:20:1e:09:5c:
06:b9:a6:00:5f:a7:ec:2c:8b:c0:9c:ae:65:62:f7:
a4:5d:1c:35:be:68:60:7e:14:ce:c2:d1:35:0c:55:
9c:8a:70:be:6d:4e:32:2a:a5:b9:cc:57:15:b6:96:
00:d4:b4:6b:15:52:7d:64:19:3f:c4:10:0c:7c:71:
98:4b:51:4c:3d:ac:95:d8:3b:7f:7c:f1:f0:83:4d:
21:8c:20:b6:10:86:36:17:d9:37:23:23:ed:d5:81:
cf:da:a7:2e:d4:63:af:81:a5:ef:d3:90:f4:63:76:
22:92:74:9d:6c:fe:75:51:7a:38:7a:85:25:2b:6e:
b2:7d:60:68:46:42:6f:e6:8e:0d:b7:c1:59:fb:7f:
ef:9a:78:80:02:15:c7:42:87:94:fa:f9:f8:ac:66:
08:3d:7d:ac:b5:73:26:e5:79:5e:65:d3:0a:93:eb:
8a:4d:49:ba:af:05:e9:7a:aa:45:19:f5:91:6f:13:
24:b2:b1:c7:4d:b1:62:d7:62:d2:56:86:02:5e:39:
4c:6c:d0:8d:fd:9c:15:46:09:00:e4:94:7c:33:07:
f8:bd:54:2a:f5:94:5a:8f:e3:75:c5:0b:09:a5:17:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:60:78:EA:0E:FD:A5:49:05:36:D8:BB:9A:34:B6:8B:C8:B7:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3432c438-c33c-3f9b-9ade-b297496c1206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:9c:41:70:46:9c:86:11:bd:54:32:39:42:83:8f:4d:07:eb:
2c:2e:7f:04:a2:56:82:8c:eb:e5:3b:17:6b:16:cf:ec:f5:ab:
47:d9:3d:1b:4b:75:86:a5:89:6a:c2:b0:81:29:10:2d:8d:92:
2f:5d:e4:0c:b7:9d:c9:15:73:96:ba:2e:17:3c:b1:03:13:e4:
56:a5:2c:79:ad:c7:f4:e5:6a:76:55:b2:76:20:6c:c4:79:4d:
83:33:f8:06:c0:d1:11:0d:9c:18:61:2f:04:53:86:8e:2a:20:
ad:05:d6:21:3e:65:bc:d7:70:42:27:af:8b:ee:22:a7:da:b4:
17:46:2e:c8:56:4e:e0:b3:75:81:bc:75:10:3d:75:10:d4:4d:
fe:a9:bc:b3:2a:bd:8a:db:e6:1a:76:f6:81:2b:0b:71:d1:9c:
08:89:91:30:9c:91:f4:17:f2:18:53:44:d0:fd:68:c7:92:cc:
f4:95:21:fd:57:af:7b:d0:c3:4d:e2:3c:ff:ce:5a:8e:28:50:
e3:a3:a3:6b:3c:f5:1c:b8:48:f8:32:7b:5d:63:38:d3:fc:f4:
3e:f3:99:60:61:49:23:08:6e:11:de:af:3e:9b:c8:6a:b1:59:
66:ae:af:8b:b2:9d:7c:ee:6d:f9:81:e6:9e:5d:d8:22:1e:92:
ef:64:b6:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmt2Qnv8MUBh3yZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTRjYTgxY2QtNWNiYi00MjIyLWI4ZDktZTUwNDg2MjQwZmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQw4Ne91a2PHYERHSHsDws5TBhVQtDnkUiAe
CVwGuaYAX6fsLIvAnK5lYvekXRw1vmhgfhTOwtE1DFWcinC+bU4yKqW5zFcVtpYA
1LRrFVJ9ZBk/xBAMfHGYS1FMPayV2Dt/fPHwg00hjCC2EIY2F9k3IyPt1YHP2qcu
1GOvgaXv05D0Y3YiknSdbP51UXo4eoUlK26yfWBoRkJv5o4Nt8FZ+3/vmniAAhXH
QoeU+vn4rGYIPX2stXMm5XleZdMKk+uKTUm6rwXpeqpFGfWRbxMksrHHTbFi12LS
VoYCXjlMbNCN/ZwVRgkA5JR8Mwf4vVQq9ZRaj+N1xQsJpRfbYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJUcYHjqDv2lSQU22LuaNLaLyLc6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzQzMmM0MzgtYzMzYy0z
ZjliLTlhZGUtYjI5NzQ5NmMxMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+ySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWcQXBGnIYRvVQyOUKDj00H6ywufwSiVoKM6+U7F2sWz+z1q0fZPRtL
dYaliWrCsIEpEC2Nki9d5Ay3nckVc5a6Lhc8sQMT5FalLHmtx/TlanZVsnYgbMR5
TYMz+AbA0RENnBhhLwRTho4qIK0F1iE+ZbzXcEInr4vuIqfatBdGLshWTuCzdYG8
dRA9dRDUTf6pvLMqvYrb5hp29oErC3HRnAiJkTCckfQX8hhTRND9aMeSzPSVIf1X
r3vQw03iPP/OWo4oUOOjo2s89Ry4SPgye11jONP89D7zmWBhSSMIbhHerz6byGqx
WWaur4uynXzubfmB5p5d2CIeku9ktoM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:00 2025 by rpki-client