Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44f70f0e-5920-3216-b085-3210b7b385b1.roa
File: 44f70f0e-5920-3216-b085-3210b7b385b1.roa (raw, json)
Hash identifier: cGfAnRBiiAJ7FBHaPIpsANvfj8pZp/VccBee9c9Nrfw=
Subject key identifier: FD:45:BB:57:93:26:C8:DE:FE:1B:0C:C1:B5:A5:85:27:02:8D:3F:0C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2BAD052376389EC0A83740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44f70f0e-5920-3216-b085-3210b7b385b1.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 3848
IP address blocks: 216.209.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:ad:05:23:76:38:9e:c0:a8:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=b79e4c0c-3d84-4dc3-868e-a40419f65dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:96:45:ec:4a:65:76:52:a4:46:39:fd:72:
a0:67:a2:36:69:c5:66:86:d5:56:2c:ef:44:75:88:
de:e0:a8:38:43:03:30:1b:38:06:e7:98:76:ba:d8:
c4:2a:61:9e:6e:0b:b0:e8:28:13:8b:bf:7d:9e:c4:
7d:0c:27:2a:13:96:0d:87:7d:a0:4d:60:60:5d:37:
1b:7d:e3:b0:33:53:33:da:9a:07:b4:54:25:2c:7a:
b1:36:72:b8:bb:e1:f1:59:4b:44:75:fc:6d:38:24:
d1:04:73:84:8d:d7:93:66:ad:2f:ab:71:f7:6c:8e:
63:a9:7c:d0:f6:13:94:23:23:95:42:fd:bc:02:75:
0e:a5:89:ff:81:5f:7c:84:a6:fe:8b:60:bf:cd:d7:
78:8f:f6:47:d7:b7:0c:6a:37:32:4e:55:c3:eb:72:
2a:d5:76:ac:a6:e6:61:b4:1c:9a:3a:3f:42:9f:48:
0f:9b:35:25:e0:fe:78:b3:01:ee:17:f4:0f:66:c7:
a4:55:22:fc:89:b0:81:1b:2a:76:3b:fc:79:3e:a4:
48:2d:c6:a9:2f:e4:3f:22:f2:f6:f1:4e:a3:48:e6:
51:fa:01:59:26:d1:67:82:c0:10:d5:80:d7:6d:f4:
20:21:c5:97:ac:71:58:36:ec:2b:61:1f:08:9c:ad:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:BB:57:93:26:C8:DE:FE:1B:0C:C1:B5:A5:85:27:02:8D:3F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/44f70f0e-5920-3216-b085-3210b7b385b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6f:3b:f4:1f:90:8a:f8:62:55:95:57:f3:11:3d:f4:b8:d0:
47:ca:de:c7:63:99:68:41:e7:9b:4d:7d:32:6a:d8:5c:c5:25:
fa:ae:03:31:dd:08:2f:f7:23:00:35:91:40:83:ff:51:9b:ca:
47:e5:a8:ac:27:6e:55:08:c2:10:f7:27:e2:78:82:c2:9d:7f:
2a:40:8f:0c:69:3c:6e:65:f6:a0:31:13:b6:9b:cf:70:b9:e9:
64:9d:a3:e4:a7:95:64:12:08:80:e2:68:6a:83:82:6d:78:0e:
45:b0:09:4c:63:5e:5f:c2:50:e0:b4:54:0d:44:38:d1:63:70:
da:93:69:02:93:a7:f2:a6:3e:bb:53:3f:ee:e1:b3:81:3e:f9:
a3:59:fb:bf:6d:41:de:92:0f:d5:e2:24:4f:23:0b:d4:ff:9d:
f1:35:e3:16:e0:eb:2c:23:f1:79:e3:f8:1f:85:99:f6:39:38:
92:2c:c9:17:c1:6c:76:3a:84:ae:63:f2:9b:5b:95:88:15:ee:
bc:04:72:70:c0:b1:d9:49:1d:cb:4a:83:bc:a3:16:b1:0f:bf:
f5:91:df:77:73:40:f0:76:7e:55:0f:30:fe:e7:fe:cb:69:7a:
14:d8:21:7e:55:1b:fc:41:e6:b7:40:23:1c:e7:1d:97:96:ec:
8e:70:bb:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtK60FI3Y4nsCoN0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
Yjc5ZTRjMGMtM2Q4NC00ZGMzLTg2OGUtYTQwNDE5ZjY1ZGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFaWRexKZXZSpEY5/XKgZ6I2acVmhtVWLO9E
dYje4Kg4QwMwGzgG55h2utjEKmGebguw6CgTi799nsR9DCcqE5YNh32gTWBgXTcb
feOwM1Mz2poHtFQlLHqxNnK4u+HxWUtEdfxtOCTRBHOEjdeTZq0vq3H3bI5jqXzQ
9hOUIyOVQv28AnUOpYn/gV98hKb+i2C/zdd4j/ZH17cMajcyTlXD63Iq1XaspuZh
tByaOj9Cn0gPmzUl4P54swHuF/QPZsekVSL8ibCBGyp2O/x5PqRILcapL+Q/IvL2
8U6jSOZR+gFZJtFngsAQ1YDXbfQgIcWXrHFYNuwrYR8InK3YiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1Fu1eTJsje/hsMwbWlhScCjT8MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDRmNzBmMGUtNTkyMC0z
MjE2LWIwODUtMzIxMGI3YjM4NWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZvO/QfkIr4YlWVV/MRPfS40EfK3sdjmWhB55tNfTJq2FzFJfquAzHd
CC/3IwA1kUCD/1GbykflqKwnblUIwhD3J+J4gsKdfypAjwxpPG5l9qAxE7abz3C5
6WSdo+SnlWQSCIDiaGqDgm14DkWwCUxjXl/CUOC0VA1EONFjcNqTaQKTp/KmPrtT
P+7hs4E++aNZ+79tQd6SD9XiJE8jC9T/nfE14xbg6ywj8Xnj+B+FmfY5OJIsyRfB
bHY6hK5j8ptblYgV7rwEcnDAsdlJHctKg7yjFrEPv/WR33dzQPB2flUPMP7n/stp
ehTYIX5VG/xB5rdAIxznHZeW7I5wu/M=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:30 2025 by rpki-client