Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6d83cede-1d6e-3957-9b4a-941fcf714842.roa
File: 6d83cede-1d6e-3957-9b4a-941fcf714842.roa (raw, json)
Hash identifier: TTOxmMxfs/RKUS6XKQZJQyAFSBaRGFmfACNt9R1ZSg0=
Subject key identifier: CF:96:DA:56:41:E6:9C:70:E5:D6:86:2E:09:79:B2:FC:43:5F:08:48
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D28DACB97931FAC384D4220
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6d83cede-1d6e-3957-9b4a-941fcf714842.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 70.30.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:28:da:cb:97:93:1f:ac:38:4d:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=ffe487d1-fe5d-452c-956f-0e6647d080db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:c7:a0:5a:44:13:e3:1c:0d:67:69:42:4a:
55:8d:2d:94:b4:ed:4d:48:a6:6d:a7:94:63:01:4c:
8f:00:a0:64:59:90:00:97:67:74:c9:1a:b9:ca:b1:
79:62:6f:23:cd:79:27:e4:b2:9b:36:84:a7:cd:c5:
a3:bc:a1:bd:69:78:b2:dd:20:93:8a:37:7c:8a:31:
66:a8:6b:85:49:93:9d:9b:34:58:eb:c5:70:40:eb:
0a:e3:b5:43:1f:1c:84:04:b5:fd:89:05:49:d9:ee:
e9:07:fa:34:e8:74:6c:e4:63:dd:46:25:5f:a8:7e:
6a:ce:37:76:63:d7:f2:b1:c3:4d:77:c0:3f:ba:eb:
6e:77:18:42:7f:b6:f9:a6:bb:f8:51:97:cc:ff:12:
cb:f4:21:e7:af:1f:97:cd:0e:39:3e:8d:07:6d:cc:
25:2c:28:ae:ca:1c:e1:ea:30:fb:b9:7b:6c:16:6b:
c9:38:a8:e1:7d:8b:07:5f:6e:11:d3:49:42:c2:5e:
0c:cf:fc:15:64:d1:8f:39:74:b5:f2:e2:65:32:8d:
13:19:e3:a0:5c:90:29:ce:99:ea:e8:86:9d:54:a4:
45:c1:8e:41:fc:41:51:b8:56:83:03:9d:0e:e4:23:
b9:14:f7:77:aa:34:9c:b4:28:4f:6f:10:d9:5e:69:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:DA:56:41:E6:9C:70:E5:D6:86:2E:09:79:B2:FC:43:5F:08:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6d83cede-1d6e-3957-9b4a-941fcf714842.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:21:cc:0f:08:23:95:a1:e1:0c:b2:a2:ae:61:a8:93:f9:d3:
bb:1d:ab:01:3b:2e:7e:14:9d:55:0f:cf:ed:2e:1d:81:01:a1:
d6:c6:09:b0:4f:52:e5:0f:f9:91:29:1a:26:0e:45:bd:f5:37:
ab:71:01:3e:1b:f0:6e:7f:c8:41:00:f8:6a:a9:9d:b3:4b:84:
20:03:6a:97:28:eb:da:0c:f4:af:fc:15:78:71:16:3e:a0:dd:
7e:c9:85:a9:5e:1f:d9:4c:21:8f:42:e2:60:b7:d5:d6:22:c6:
e6:55:2a:3c:af:0c:84:4a:30:95:51:37:49:5a:3a:20:96:3e:
68:42:7b:39:52:a0:51:de:ee:d8:cb:75:fd:2f:94:07:7e:2a:
db:3c:21:fd:8d:22:71:6a:fc:a8:4a:a2:b3:0d:5c:0d:8a:1c:
71:f8:a1:5e:23:68:8f:89:52:35:f6:44:df:c1:05:e7:d2:8d:
85:12:08:56:7a:8a:38:59:dd:8b:8b:54:f9:37:a9:54:94:7a:
13:3c:7f:50:22:f4:64:67:15:d3:54:94:6a:6c:7a:23:44:3c:
94:ca:47:34:1a:5b:41:e0:25:14:29:80:6f:7c:da:40:03:1a:
4c:db:5f:8d:2d:0e:49:d6:98:84:81:5d:ec:5b:f4:c7:0f:03:
92:20:f1:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEYtKNrLl5MfrDhNQiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZmZlNDg3ZDEtZmU1ZC00NTJjLTk1NmYtMGU2NjQ3ZDA4MGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aXHoFpEE+McDWdpQkpVjS2UtO1NSKZtp5Rj
AUyPAKBkWZAAl2d0yRq5yrF5Ym8jzXkn5LKbNoSnzcWjvKG9aXiy3SCTijd8ijFm
qGuFSZOdmzRY68VwQOsK47VDHxyEBLX9iQVJ2e7pB/o06HRs5GPdRiVfqH5qzjd2
Y9fyscNNd8A/uutudxhCf7b5prv4UZfM/xLL9CHnrx+XzQ45Po0HbcwlLCiuyhzh
6jD7uXtsFmvJOKjhfYsHX24R00lCwl4Mz/wVZNGPOXS18uJlMo0TGeOgXJApzpnq
6IadVKRFwY5B/EFRuFaDA50O5CO5FPd3qjSctChPbxDZXmnaUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM+W2lZB5pxw5daGLgl5svxDXwhIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmQ4M2NlZGUtMWQ2ZS0z
OTU3LTliNGEtOTQxZmNmNzE0ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARh4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGyHMDwgjlaHhDLKirmGok/nTux2rATsufhSdVQ/P7S4dgQGh1sYJsE9S
5Q/5kSkaJg5FvfU3q3EBPhvwbn/IQQD4aqmds0uEIANqlyjr2gz0r/wVeHEWPqDd
fsmFqV4f2Uwhj0LiYLfV1iLG5lUqPK8MhEowlVE3SVo6IJY+aEJ7OVKgUd7u2Mt1
/S+UB34q2zwh/Y0icWr8qEqisw1cDYoccfihXiNoj4lSNfZE38EF59KNhRIIVnqK
OFndi4tU+TepVJR6Ezx/UCL0ZGcV01SUamx6I0Q8lMpHNBpbQeAlFCmAb3zaQAMa
TNtfjS0OSdaYhIFd7Fv0xw8DkiDxfA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:47 2025 by rpki-client