Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/567503b0-fec0-360b-843d-3e3c3e07aba7.roa
File: 567503b0-fec0-360b-843d-3e3c3e07aba7.roa (raw, json)
Hash identifier: fZPiIOMOi8X9FtP1Vajc/W8GD4R+CKm85V+Nnlw7eR0=
Subject key identifier: 52:D5:23:FA:06:A2:4D:25:40:A8:63:C3:12:C8:1C:C3:53:46:47:63
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2927F39E2F2462EFDD4E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/567503b0-fec0-360b-843d-3e3c3e07aba7.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.166.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:27:f3:9e:2f:24:62:ef:dd:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=1fc467f3-3157-458a-9b38-1f97b4251a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:b4:e1:70:9f:8b:76:9c:f5:c9:96:52:50:
c5:53:bc:60:94:69:cf:b1:2b:9a:92:7a:3a:3a:c9:
0c:42:6b:f0:9f:f9:a0:0e:ec:cf:19:33:d9:38:be:
0b:85:4d:f8:68:b1:e1:f7:86:72:1e:b6:9f:cf:7d:
c0:c5:32:98:ff:e8:dd:b2:c7:58:ad:b4:6c:d0:d0:
dd:9d:10:06:6e:61:14:1a:9f:43:76:58:6e:46:ba:
a8:18:62:ad:1a:d6:0a:dd:94:7b:37:9d:3e:3b:c4:
a3:a9:42:1c:a4:0d:12:6e:fe:97:8d:3b:1c:af:03:
6b:e6:f7:da:03:2c:39:92:f4:4e:b7:6f:4e:2d:93:
be:13:84:c2:c0:6a:19:84:c1:bf:e2:54:4d:bd:17:
2b:91:2f:32:ae:30:71:83:d3:ab:72:d2:2c:88:74:
65:04:27:d3:9e:a3:10:15:5e:4f:67:9d:34:eb:48:
1c:61:bc:41:e9:07:0b:0c:8e:81:a6:a9:19:c4:11:
a1:82:56:43:e1:2c:73:e5:dc:d9:cd:20:22:f8:0a:
7c:93:88:5c:66:19:3d:b2:fd:3a:72:4b:e1:50:a3:
10:e1:4f:b4:6a:c0:a7:02:c9:54:18:1c:ea:60:c5:
f7:d4:22:e7:ff:66:55:d1:bf:e2:8d:6e:80:28:46:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:23:FA:06:A2:4D:25:40:A8:63:C3:12:C8:1C:C3:53:46:47:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/567503b0-fec0-360b-843d-3e3c3e07aba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:0a:18:9a:d1:51:32:d7:a5:ba:ce:0e:43:3d:2e:89:6b:57:
82:3d:9e:d5:ac:ec:4a:50:95:3f:28:af:d3:4c:8e:3a:06:87:
38:21:16:55:d9:7c:4d:42:8f:0e:c7:c5:63:90:05:40:01:46:
54:9d:7a:61:72:c5:62:8f:09:dc:70:2b:50:1d:c7:d6:5f:48:
84:ed:fa:6e:c1:8a:cb:e4:4c:a0:d7:9e:4f:74:fe:3f:7b:ca:
ab:f8:d3:c0:a2:18:f6:ad:11:93:78:9e:77:eb:2f:52:99:b7:
d2:5f:3b:ab:6f:d4:94:d6:1a:fc:29:a9:d8:f3:f9:32:e0:78:
00:c8:1a:1e:fe:b2:d7:81:cf:c3:08:f7:5e:45:af:0b:36:b1:
35:a2:40:79:ad:70:8d:46:47:fc:8f:33:c6:4c:b3:ca:88:c3:
bd:09:13:0a:df:97:ad:6f:be:df:84:8e:8c:95:fa:4a:85:09:
1b:15:9f:e3:21:37:ee:09:c8:75:29:27:34:2f:b8:3c:1b:f2:
97:85:d6:a3:8d:62:ed:89:ee:ec:90:b3:1a:d6:b5:02:ff:00:
ac:b2:7b:6b:4f:63:5a:f0:b6:26:40:2b:f9:62:97:c9:a7:d9:
da:ba:95:22:63:1f:1a:57:c8:6c:29:62:60:2a:8b:bc:15:58:
77:78:73:81
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEYtKSfzni8kYu/dToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MWZjNDY3ZjMtMzE1Ny00NThhLTliMzgtMWY5N2I0MjUxYTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFC04XCfi3ac9cmWUlDFU7xglGnPsSuakno6
OskMQmvwn/mgDuzPGTPZOL4LhU34aLHh94ZyHrafz33AxTKY/+jdssdYrbRs0NDd
nRAGbmEUGp9DdlhuRrqoGGKtGtYK3ZR7N50+O8SjqUIcpA0Sbv6XjTscrwNr5vfa
Ayw5kvROt29OLZO+E4TCwGoZhMG/4lRNvRcrkS8yrjBxg9OrctIsiHRlBCfTnqMQ
FV5PZ50060gcYbxB6QcLDI6BpqkZxBGhglZD4Sxz5dzZzSAi+Ap8k4hcZhk9sv06
ckvhUKMQ4U+0asCnAslUGBzqYMX31CLn/2ZV0b/ijW6AKEbHJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFLVI/oGok0lQKhjwxLIHMNTRkdjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTY3NTAzYjAtZmVjMC0z
NjBiLTg0M2QtM2UzYzNlMDdhYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKwoYmtFRMtelus4OQz0uiWtXgj2e1azsSlCVPyiv00yOOgaHOCEWVdl8
TUKPDsfFY5AFQAFGVJ16YXLFYo8J3HArUB3H1l9IhO36bsGKy+RMoNeeT3T+P3vK
q/jTwKIY9q0Rk3ied+svUpm30l87q2/UlNYa/Cmp2PP5MuB4AMgaHv6y14HPwwj3
XkWvCzaxNaJAea1wjUZH/I8zxkyzyojDvQkTCt+XrW++34SOjJX6SoUJGxWf4yE3
7gnIdSknNC+4PBvyl4XWo41i7Ynu7JCzGta1Av8ArLJ7a09jWvC2JkAr+WKXyafZ
2rqVImMfGlfIbCliYCqLvBVYd3hzgQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:51 2025 by rpki-client