Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ca7ae5e-6eb4-3824-93d8-cf0396dd8537.roa
File: 6ca7ae5e-6eb4-3824-93d8-cf0396dd8537.roa (raw, json)
Hash identifier: avlaKuk9hvh/5qAglHz68rmn9ADd0gNBHU/nq2kLFk8=
Subject key identifier: 6D:BE:7E:99:44:B8:D2:C3:C2:F9:BE:2A:CC:12:EF:6E:DA:7D:11:95
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B44E7B445CBB1AF4B5FAE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ca7ae5e-6eb4-3824-93d8-cf0396dd8537.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 21552
IP address blocks: 204.101.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b4:4e:7b:44:5c:bb:1a:f4:b5:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=0ceb1561-0b0d-4470-ac39-fd4c03b4e206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:e3:48:a8:7c:98:ea:e2:18:1a:54:1f:45:
6b:5e:bc:5f:b1:21:8c:f6:a3:42:4a:06:8b:de:fc:
31:eb:68:5a:ca:f0:ee:6d:57:2c:fa:ae:bc:20:72:
5a:3f:85:73:a0:35:b5:35:3e:c3:53:d0:e1:1a:db:
ac:38:b0:08:2b:b4:74:bf:18:ba:2a:8a:f7:52:98:
27:3e:ae:8d:9f:17:57:3c:f4:4f:5d:40:68:df:6f:
d1:9e:10:d6:c0:7d:ee:27:a2:8b:a6:3f:c7:70:df:
3f:51:2e:4a:12:50:18:5a:f1:9c:e3:e8:bd:4d:ba:
dd:3a:54:42:c3:f2:91:5e:e4:1f:d7:9f:8e:93:35:
98:81:32:6e:1e:83:cf:68:75:d2:75:db:9e:3a:c4:
6d:19:2b:eb:cc:5c:c8:f4:27:f8:ba:77:30:b5:c7:
cb:7e:5c:5e:2f:be:5d:02:ed:53:70:e3:86:b2:f6:
77:e0:68:3f:cd:8b:86:45:2b:51:49:3c:1c:b9:16:
32:79:8b:42:c3:8c:19:7c:af:70:f1:5c:07:ed:ec:
65:d1:a6:5b:55:40:f3:ac:ef:c4:0d:d6:21:34:c3:
b9:24:fe:79:fb:1e:4f:85:69:4f:a0:74:73:c7:44:
ca:53:5f:b8:60:7a:13:d9:83:25:e0:6e:0d:50:47:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BE:7E:99:44:B8:D2:C3:C2:F9:BE:2A:CC:12:EF:6E:DA:7D:11:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6ca7ae5e-6eb4-3824-93d8-cf0396dd8537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:9f:2b:31:5a:3c:78:bc:47:3f:82:e5:12:9f:d7:32:8d:57:
d0:49:7d:ae:31:09:96:4d:a5:23:4b:a6:96:4f:84:3b:fc:d9:
08:56:55:99:33:49:5e:3c:b4:5c:c2:dd:28:58:29:f4:e0:11:
94:eb:76:4d:99:3e:05:48:44:94:ce:ce:07:c5:1b:47:f9:93:
bf:c3:b1:df:9e:db:b9:bb:9c:a6:7a:e5:22:58:a9:e0:cf:8e:
e5:91:04:22:fb:ba:dc:73:b7:a9:d5:5f:5a:23:4c:c7:f4:4d:
66:ae:e6:76:19:ba:c7:91:8a:9f:fc:d5:45:18:3f:fb:2b:4f:
23:14:97:d7:e9:4d:52:12:a6:d6:ef:12:20:73:cc:49:43:31:
ae:0f:f4:bc:8d:bc:c0:2f:ed:19:2c:41:7c:a0:5b:88:65:b0:
92:32:c9:26:23:61:4d:42:d3:fe:ee:ad:36:8b:4a:63:38:f8:
c2:d1:1b:fc:62:18:78:a0:20:7c:55:88:22:07:07:31:e8:75:
6d:19:b2:fc:c5:ee:0a:13:e3:fc:64:cd:80:85:ed:80:41:32:
00:85:e7:fe:88:5c:6e:ca:21:ae:79:69:5a:07:92:9d:59:96:
56:96:c4:c1:ad:67:f1:84:b3:59:eb:8f:50:d2:d6:79:73:36:
35:eb:84:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtE57RFy7GvS1+uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MGNlYjE1NjEtMGIwZC00NDcwLWFjMzktZmQ0YzAzYjRlMjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+DjSKh8mOriGBpUH0VrXrxfsSGM9qNCSgaL
3vwx62hayvDubVcs+q68IHJaP4VzoDW1NT7DU9DhGtusOLAIK7R0vxi6Kor3Upgn
Pq6NnxdXPPRPXUBo32/RnhDWwH3uJ6KLpj/HcN8/US5KElAYWvGc4+i9TbrdOlRC
w/KRXuQf15+OkzWYgTJuHoPPaHXSddueOsRtGSvrzFzI9Cf4uncwtcfLflxeL75d
Au1TcOOGsvZ34Gg/zYuGRStRSTwcuRYyeYtCw4wZfK9w8VwH7exl0aZbVUDzrO/E
DdYhNMO5JP55+x5PhWlPoHRzx0TKU1+4YHoT2YMl4G4NUEdbCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2+fplEuNLDwvm+KswS727afRGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmNhN2FlNWUtNmViNC0z
ODI0LTkzZDgtY2YwMzk2ZGQ4NTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABufKzFaPHi8Rz+C5RKf1zKNV9BJfa4xCZZNpSNLppZPhDv82QhWVZkz
SV48tFzC3ShYKfTgEZTrdk2ZPgVIRJTOzgfFG0f5k7/Dsd+e27m7nKZ65SJYqeDP
juWRBCL7utxzt6nVX1ojTMf0TWau5nYZuseRip/81UUYP/srTyMUl9fpTVISptbv
EiBzzElDMa4P9LyNvMAv7RksQXygW4hlsJIyySYjYU1C0/7urTaLSmM4+MLRG/xi
GHigIHxViCIHBzHodW0ZsvzF7goT4/xkzYCF7YBBMgCF5/6IXG7KIa55aVoHkp1Z
llaWxMGtZ/GEs1nrj1DS1nlzNjXrhG4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:25 2025 by rpki-client