Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88d540f3-5824-398c-938f-f58bac11e87e.roa
File: 88d540f3-5824-398c-938f-f58bac11e87e.roa (raw, json)
Hash identifier: 2p7Q5iX0y4gKubG9DimytdAUsk93hgggiZ3C9riy/OA=
Subject key identifier: 42:EB:63:AB:50:73:0A:6A:B9:FF:2C:F1:38:67:A9:6A:55:78:A3:F1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B59EF70B7F131788075F10
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88d540f3-5824-398c-938f-f58bac11e87e.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 142.186.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:9e:f7:0b:7f:13:17:88:07:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=946d3c0c-4c8d-4a46-beda-cbe9ff5ef968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:24:51:ab:e2:43:d3:aa:9b:6c:07:c5:92:
7a:b2:6f:a8:de:01:2e:57:24:2c:96:7c:82:69:85:
e8:f5:d7:71:c9:28:a2:9a:a6:f6:ce:47:0f:79:c5:
77:3c:0a:6f:e0:0d:63:49:d8:0c:fe:a9:29:a0:90:
99:08:0f:d7:b6:66:3f:c0:18:d8:db:01:35:be:45:
42:db:2b:e4:e5:c8:fd:31:79:3b:e1:64:b1:e9:74:
98:e4:ba:22:2f:6e:72:c7:46:03:16:78:71:42:21:
bf:5c:a2:7c:9f:65:50:61:6d:1a:b8:8b:65:26:d0:
04:35:35:f2:20:46:f8:dd:62:e8:8e:c1:fd:03:fa:
d5:ad:77:7a:95:14:70:8e:75:01:b7:87:57:56:f0:
48:ba:9c:48:d1:95:bf:f9:23:79:7d:c6:e3:f4:7f:
d4:8e:cd:e3:39:fa:3a:fe:cb:7f:13:64:df:fd:2f:
9b:e7:76:5a:d4:b0:f8:9b:5c:4c:f5:2d:0d:f5:6f:
6b:dd:c0:dc:40:2b:b5:df:92:24:70:db:02:71:23:
d0:96:89:6c:d4:3a:ce:e4:aa:ac:97:26:ae:64:91:
01:0f:bb:88:c5:ec:e7:5f:eb:44:ac:2e:96:d6:f7:
e4:7c:7d:6e:35:7d:f7:4b:b3:f6:b5:18:37:8b:18:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:63:AB:50:73:0A:6A:B9:FF:2C:F1:38:67:A9:6A:55:78:A3:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/88d540f3-5824-398c-938f-f58bac11e87e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2e:db:06:cd:b4:86:0f:a5:cb:ff:2b:21:fc:84:01:ab:40:
9e:8b:9b:0a:36:40:fe:54:da:fa:07:74:ec:a7:6d:d4:42:b7:
a1:3b:2f:a3:af:6b:6c:5e:c4:a5:59:33:01:e5:fa:fb:fc:76:
7c:bf:28:5b:a3:a0:43:14:3e:07:4c:96:32:f0:8b:bf:01:0f:
ae:31:f9:41:5c:bb:13:1a:c0:bf:38:93:da:39:16:10:95:43:
09:08:a6:7a:19:6f:29:6d:c8:eb:dc:06:8a:61:a2:40:01:c7:
52:8c:fe:8b:4c:50:99:ea:ab:a4:6b:fd:7b:35:59:67:0a:5e:
84:da:9b:aa:ca:f5:b6:71:1d:43:46:38:53:12:11:93:12:78:
27:f6:f5:b4:4b:87:8f:30:54:7d:c5:8c:06:cc:eb:22:0e:92:
38:04:79:45:25:3f:df:f6:ed:ff:9b:b1:70:01:a9:8e:ae:b6:
15:d0:30:a9:86:3b:b6:59:9b:f9:a0:01:32:00:56:55:a3:00:
8f:35:29:b0:c4:20:cf:41:58:b5:f1:79:3d:6f:bd:27:b9:b4:
0b:30:a8:d4:fb:63:7e:22:87:4b:d3:33:d2:be:89:5c:b2:62:
be:e1:b6:c9:6c:f1:1e:c5:47:8a:e0:ba:96:e9:63:cd:15:6e:
c8:e5:1c:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtZ73C38TF4gHXxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTQ2ZDNjMGMtNGM4ZC00YTQ2LWJlZGEtY2JlOWZmNWVmOTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKwkUaviQ9Oqm2wHxZJ6sm+o3gEuVyQslnyC
aYXo9ddxySiimqb2zkcPecV3PApv4A1jSdgM/qkpoJCZCA/XtmY/wBjY2wE1vkVC
2yvk5cj9MXk74WSx6XSY5LoiL25yx0YDFnhxQiG/XKJ8n2VQYW0auItlJtAENTXy
IEb43WLojsH9A/rVrXd6lRRwjnUBt4dXVvBIupxI0ZW/+SN5fcbj9H/Ujs3jOfo6
/st/E2Tf/S+b53Za1LD4m1xM9S0N9W9r3cDcQCu135IkcNsCcSPQlols1DrO5Kqs
lyauZJEBD7uIxeznX+tErC6W1vfkfH1uNX33S7P2tRg3ixjdSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFELrY6tQcwpquf8s8ThnqWpVeKPxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODhkNTQwZjMtNTgyNC0z
OThjLTkzOGYtZjU4YmFjMTFlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjrowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhi7bBs20hg+ly/8rIfyEAatAnoubCjZA/lTa+gd07Kdt1EK3oTsvo69r
bF7EpVkzAeX6+/x2fL8oW6OgQxQ+B0yWMvCLvwEPrjH5QVy7ExrAvziT2jkWEJVD
CQimehlvKW3I69wGimGiQAHHUoz+i0xQmeqrpGv9ezVZZwpehNqbqsr1tnEdQ0Y4
UxIRkxJ4J/b1tEuHjzBUfcWMBszrIg6SOAR5RSU/3/bt/5uxcAGpjq62FdAwqYY7
tlmb+aABMgBWVaMAjzUpsMQgz0FYtfF5PW+9J7m0CzCo1PtjfiKHS9Mz0r6JXLJi
vuG2yWzxHsVHiuC6luljzRVuyOUc+g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:59 2025 by rpki-client