Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/577c67d3-f629-3514-8cbd-a7471ea7b5ad.roa
File: 577c67d3-f629-3514-8cbd-a7471ea7b5ad.roa (raw, json)
Hash identifier: VQwC2TdqvHLY7nBCQRgISaxUmqjFbR+Ej7RR28RPPss=
Subject key identifier: C8:58:2E:94:3C:82:88:E4:84:14:D5:09:9F:E6:BE:6A:CE:E1:98:12
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B43F514E5696612A832280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/577c67d3-f629-3514-8cbd-a7471ea7b5ad.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 10264
IP address blocks: 204.101.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:3f:51:4e:56:96:61:2a:83:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=22db100e-555d-43d5-b3ed-e72223a04a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:5c:1c:0a:2b:60:0f:89:e5:81:ab:70:d1:
63:c4:4b:5f:90:1c:64:47:f8:4b:dd:08:51:c6:02:
5d:b5:13:37:bb:0c:17:df:c7:fe:99:38:11:69:5d:
82:a2:09:16:05:5b:64:b6:82:91:91:8f:73:21:66:
b2:86:8a:20:fd:9c:71:74:73:5f:f6:0b:0b:07:85:
c6:c6:db:78:f3:19:1b:b9:a1:18:5f:eb:35:d9:c4:
2c:4e:ad:29:11:bf:6a:e0:79:e8:fb:17:24:8d:d6:
28:53:96:31:84:d6:74:81:37:de:3b:b0:a9:86:44:
4a:c0:3f:9d:1e:af:87:13:f2:55:af:f3:20:3a:92:
e7:c9:10:fe:77:2e:df:a7:91:d4:40:7c:eb:99:8e:
db:0a:3b:c4:1d:66:10:a1:8b:b9:24:c5:82:2f:70:
bd:d6:1f:d7:ba:e8:70:af:50:6b:45:63:72:82:88:
8f:9b:58:e1:ef:b6:2a:ed:f6:59:1e:31:c5:8e:21:
01:d0:b6:43:b5:32:69:45:5d:4e:8c:56:2d:7b:c7:
f5:63:d4:c7:25:39:8f:d6:c4:43:58:fc:ce:0b:e3:
a4:41:4a:dc:a7:46:5f:77:e9:17:a9:3c:a4:86:b5:
da:b5:a4:24:f1:cd:23:12:78:53:91:e4:61:1a:32:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:2E:94:3C:82:88:E4:84:14:D5:09:9F:E6:BE:6A:CE:E1:98:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/577c67d3-f629-3514-8cbd-a7471ea7b5ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:ac:40:fe:79:22:67:cb:7c:9f:be:d4:28:4e:35:7f:c5:39:
92:a0:51:9e:e2:a4:ff:b2:ad:d5:39:6a:6e:e3:77:f1:4f:32:
84:aa:b8:3b:df:7a:95:8c:ed:0d:91:1d:6d:fc:cd:31:23:4a:
ad:51:cd:5f:e0:0e:ac:71:22:e4:f9:87:41:93:84:d8:c8:21:
79:52:cb:f3:64:f2:25:a5:d1:ba:a0:50:ad:1c:98:4d:26:a3:
84:9a:dc:35:02:49:82:45:f1:1a:1a:1f:74:ec:24:e4:fa:2f:
9e:9a:b9:f9:b2:59:90:99:34:33:a3:33:f3:a2:2c:5b:76:9e:
f8:c2:bb:c8:12:db:d6:0c:69:a1:5c:74:a7:d2:26:d7:a8:f7:
3d:83:56:d0:39:01:5b:15:93:7c:0b:b2:fd:6a:58:fa:68:b6:
37:90:94:08:89:8d:a3:e1:b2:63:75:46:c4:60:15:a2:01:ee:
88:53:af:ac:c1:8c:01:ee:b3:7b:95:73:ae:d2:06:7f:4f:9e:
88:10:f9:46:f4:97:ce:3e:c7:15:58:29:db:cb:df:68:a1:0a:
95:8f:9b:54:da:fc:ce:cd:eb:8b:b9:d0:98:be:eb:e4:c2:60:
46:47:f8:f7:33:0e:bd:39:ce:38:57:15:60:02:43:21:eb:0c:
c0:b7:28:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtD9RTlaWYSqDIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MjJkYjEwMGUtNTU1ZC00M2Q1LWIzZWQtZTcyMjIzYTA0YTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibdcHAorYA+J5YGrcNFjxEtfkBxkR/hL3QhR
xgJdtRM3uwwX38f+mTgRaV2CogkWBVtktoKRkY9zIWayhoog/ZxxdHNf9gsLB4XG
xtt48xkbuaEYX+s12cQsTq0pEb9q4Hno+xckjdYoU5YxhNZ0gTfeO7CphkRKwD+d
Hq+HE/JVr/MgOpLnyRD+dy7fp5HUQHzrmY7bCjvEHWYQoYu5JMWCL3C91h/Xuuhw
r1BrRWNygoiPm1jh77Yq7fZZHjHFjiEB0LZDtTJpRV1OjFYte8f1Y9THJTmP1sRD
WPzOC+OkQUrcp0Zfd+kXqTykhrXataQk8c0jEnhTkeRhGjIv2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhYLpQ8gojkhBTVCZ/mvmrO4ZgSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTc3YzY3ZDMtZjYyOS0z
NTE0LThjYmQtYTc0NzFlYTdiNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqsQP55ImfLfJ++1ChONX/FOZKgUZ7ipP+yrdU5am7jd/FPMoSquDvf
epWM7Q2RHW38zTEjSq1RzV/gDqxxIuT5h0GThNjIIXlSy/Nk8iWl0bqgUK0cmE0m
o4Sa3DUCSYJF8RoaH3TsJOT6L56aufmyWZCZNDOjM/OiLFt2nvjCu8gS29YMaaFc
dKfSJteo9z2DVtA5AVsVk3wLsv1qWPpotjeQlAiJjaPhsmN1RsRgFaIB7ohTr6zB
jAHus3uVc67SBn9PnogQ+Ub0l84+xxVYKdvL32ihCpWPm1Ta/M7N64u50Ji+6+TC
YEZH+PczDr05zjhXFWACQyHrDMC3KKA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:44 2025 by rpki-client