Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7efb38f5-11a5-3777-8b6b-8e1422ee43ab.roa
File: 7efb38f5-11a5-3777-8b6b-8e1422ee43ab.roa (raw, json)
Hash identifier: 2iQUXg04MaRX4yNidTz1uEX/saH0icH6hDSaZohIz/U=
Subject key identifier: 64:75:E2:70:DB:4C:98:BF:0C:B2:7B:45:7F:60:71:E9:06:40:02:AD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6CEA9900D0323D0920A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7efb38f5-11a5-3777-8b6b-8e1422ee43ab.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 18814
IP address blocks: 207.34.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:ce:a9:90:0d:03:23:d0:92:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b881716e-c95f-41ad-abb6-2579f2cf1292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:bd:d8:76:e7:13:b2:28:cb:89:64:3a:08:
a1:a8:fa:b2:d9:02:db:5e:ea:79:de:15:3b:98:ef:
75:4f:a6:cd:ae:95:e2:b1:d5:fd:3f:74:32:80:0b:
e9:34:e9:6c:4e:d0:0f:e1:a9:6a:97:53:b9:e7:30:
cf:14:30:23:87:29:d3:93:32:ea:f5:7f:55:d2:23:
18:20:77:6f:39:41:14:c3:5b:af:3b:54:a2:5b:6a:
22:ae:9a:7d:47:ef:92:9c:28:54:b0:e5:55:63:eb:
5c:ad:9d:7d:35:8c:4a:da:31:ca:19:b0:79:ac:ae:
18:be:8f:dd:5e:a6:d7:d9:0b:7c:a2:f4:38:6c:eb:
e9:fd:30:d0:d8:64:7b:08:f7:0b:7a:27:58:8f:d0:
9b:cc:02:ac:80:45:8d:94:95:47:ea:01:a8:c1:83:
14:f5:8c:c2:c7:41:b3:dc:94:62:f6:02:50:a5:14:
97:ad:ae:49:00:9c:9e:38:d9:d0:be:ad:c9:e0:81:
b8:c2:ed:69:ce:96:58:fd:6a:d4:80:50:65:fe:f6:
9f:c8:33:e8:e6:66:c6:62:cc:f8:be:ba:b4:94:68:
c5:de:96:5f:6d:3e:8f:a1:64:f7:5d:23:63:ef:da:
f2:8d:4d:f9:21:3f:10:9c:36:20:4a:57:e6:00:2e:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:E2:70:DB:4C:98:BF:0C:B2:7B:45:7F:60:71:E9:06:40:02:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7efb38f5-11a5-3777-8b6b-8e1422ee43ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:4e:5a:12:15:6d:8d:45:6b:fc:5d:d0:78:0e:08:33:37:5a:
8e:b9:58:f2:7b:2a:36:34:bb:da:20:20:96:ad:f6:85:41:88:
bd:ca:0c:fb:09:59:32:41:c1:04:9d:84:09:10:d1:92:9c:b6:
8d:fa:14:c5:c8:94:ab:37:26:b6:11:a2:08:ff:f2:f5:00:37:
0e:48:fd:b0:5d:f2:17:16:55:41:f1:c5:40:8e:ed:d6:7d:2c:
7b:1c:bf:72:80:2d:96:18:c0:98:a3:2f:d6:03:75:41:b1:5f:
ee:56:fd:bc:81:bf:5e:4b:d0:41:99:a4:80:d7:70:00:fc:f4:
99:a6:85:c8:ba:78:30:e5:4b:78:f2:67:b6:8d:7d:69:d3:ff:
ed:d6:62:1d:9a:b6:a7:f4:b6:31:58:f1:20:53:bc:27:eb:82:
92:22:23:1b:26:c7:0d:c0:7a:6b:51:34:e9:52:aa:7c:12:23:
61:2e:68:a7:9a:ee:7f:3a:ab:95:79:1c:55:95:36:0a:df:90:
0b:d2:a8:e1:0e:36:77:ab:4c:3b:26:e0:82:77:b9:64:e3:fc:
20:a3:45:30:87:ed:6f:03:52:18:b4:14:ac:68:0a:1b:f3:9d:
2a:21:2f:98:0b:37:c1:02:e8:4e:4e:9c:17:c6:ec:ed:ac:6b:
9e:e5:c5:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmts6pkA0DI9CSCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
Yjg4MTcxNmUtYzk1Zi00MWFkLWFiYjYtMjU3OWYyY2YxMjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYK92HbnE7Ioy4lkOgihqPqy2QLbXup53hU7
mO91T6bNrpXisdX9P3QygAvpNOlsTtAP4alql1O55zDPFDAjhynTkzLq9X9V0iMY
IHdvOUEUw1uvO1SiW2oirpp9R++SnChUsOVVY+tcrZ19NYxK2jHKGbB5rK4Yvo/d
XqbX2Qt8ovQ4bOvp/TDQ2GR7CPcLeidYj9CbzAKsgEWNlJVH6gGowYMU9YzCx0Gz
3JRi9gJQpRSXra5JAJyeONnQvq3J4IG4wu1pzpZY/WrUgFBl/vafyDPo5mbGYsz4
vrq0lGjF3pZfbT6PoWT3XSNj79ryjU35IT8QnDYgSlfmAC7fBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGR14nDbTJi/DLJ7RX9gcekGQAKtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2VmYjM4ZjUtMTFhNS0z
Nzc3LThiNmItOGUxNDIyZWU0M2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyIcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpOWhIVbY1Fa/xd0HgOCDM3Wo65WPJ7KjY0u9ogIJat9oVBiL3KDPsJ
WTJBwQSdhAkQ0ZKcto36FMXIlKs3JrYRogj/8vUANw5I/bBd8hcWVUHxxUCO7dZ9
LHscv3KALZYYwJijL9YDdUGxX+5W/byBv15L0EGZpIDXcAD89Jmmhci6eDDlS3jy
Z7aNfWnT/+3WYh2atqf0tjFY8SBTvCfrgpIiIxsmxw3AemtRNOlSqnwSI2EuaKea
7n86q5V5HFWVNgrfkAvSqOEONnerTDsm4IJ3uWTj/CCjRTCH7W8DUhi0FKxoChvz
nSohL5gLN8EC6E5OnBfG7O2sa57lxek=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:50 2025 by rpki-client