Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a4d4475-be17-35a4-a4d0-8cd611b85d4d.roa
File: 8a4d4475-be17-35a4-a4d0-8cd611b85d4d.roa (raw, json)
Hash identifier: Z1E3PFliOvB7I1aHPu5+CHelC6i6eCITZ6CMcaovLZQ=
Subject key identifier: 1F:D0:81:95:4F:D1:CA:37:7A:57:58:47:06:CE:9F:CC:BC:20:FC:9C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B78854747FCC98168B44C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a4d4475-be17-35a4-a4d0-8cd611b85d4d.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 11831
IP address blocks: 209.139.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:88:54:74:7f:cc:98:16:8b:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=b06e9e54-e2f9-4285-8f8b-c7c8059767fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:47:eb:c7:df:3b:38:c8:ec:12:3a:65:28:
05:0f:49:92:4e:77:a7:f1:57:59:b5:42:bb:7b:fc:
7a:88:b4:e7:0b:44:b6:a3:36:09:f8:6e:c2:a7:7e:
5d:c5:51:0b:7a:aa:b2:f5:4a:5d:65:16:47:07:3c:
e6:ab:77:6b:f7:3b:66:d5:d1:42:a2:0f:5b:7d:a0:
ad:24:19:10:6f:dd:0a:42:bf:53:2d:c6:cb:b4:d5:
10:36:64:e2:f9:b0:c3:f6:90:df:87:c9:49:03:2f:
ef:72:05:dc:41:86:f1:ba:6f:18:0c:2c:df:fd:fe:
1f:cb:9b:18:5e:2b:41:d5:34:4c:78:43:e9:48:8a:
fa:ec:0e:1f:c7:1a:53:d3:5b:58:9b:e7:42:cf:51:
4a:f1:f8:e4:5a:7b:51:67:63:ac:8d:54:c9:d6:88:
7e:0c:b5:3f:55:12:30:65:07:83:5e:72:6c:5a:98:
18:93:bc:fb:f2:b0:4e:9e:1a:58:47:58:0c:d3:ac:
d4:42:38:80:31:d4:4d:ba:ad:ae:6d:ec:94:cb:f3:
55:44:09:95:f4:3e:84:cf:f4:d3:58:6c:32:17:9f:
21:6f:2a:5d:dc:7d:0d:da:f6:29:ce:99:2e:7f:74:
b7:b0:39:b6:1d:1a:73:a9:16:ae:50:89:5d:e0:e6:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:81:95:4F:D1:CA:37:7A:57:58:47:06:CE:9F:CC:BC:20:FC:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8a4d4475-be17-35a4-a4d0-8cd611b85d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:4d:cd:f9:ba:fd:c8:88:52:b6:66:a2:fd:97:94:5b:79:b5:
83:c5:ce:6b:cd:06:e0:cb:52:b5:2c:8c:02:e6:be:de:f3:20:
9e:dd:eb:6c:9b:97:18:0d:ee:c0:4d:9b:26:bf:fe:76:9a:3f:
55:41:5b:32:a0:84:15:18:e3:63:c7:74:bd:51:68:c9:3b:4b:
0c:1a:cd:99:f9:ab:43:1e:d9:30:3c:d1:10:80:78:e4:ac:90:
c7:e9:6b:f5:d2:ae:a9:1d:5e:73:4b:54:3a:5e:66:03:fa:d3:
2b:9f:ef:18:a9:50:37:26:69:7c:bd:bd:98:52:23:1b:30:ed:
0d:14:7f:21:ec:5a:1e:5e:86:15:8b:c6:c0:e6:2a:02:8e:4a:
c9:e8:63:1c:79:1a:9b:4f:7e:6c:dd:71:0b:be:16:e5:91:ed:
84:92:ee:03:87:30:c4:83:74:a8:6b:f8:2f:02:d5:98:8a:c8:
f4:c3:91:78:7d:b4:d5:b8:07:29:0a:33:1a:d2:c5:ce:78:ee:
12:8e:bf:4a:7d:c0:4a:30:a4:0c:03:4c:e0:db:1b:b7:a8:f2:
ce:1e:1a:39:97:1d:cc:bf:f8:47:06:9d:eb:95:13:1f:5e:3a:
9e:95:c8:38:fe:0f:1b:0c:ee:89:a1:58:57:9f:59:b2:75:11:
8f:80:e5:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmt4hUdH/MmBaLRMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YjA2ZTllNTQtZTJmOS00Mjg1LThmOGItYzdjODA1OTc2N2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3RH68ffOzjI7BI6ZSgFD0mSTnen8VdZtUK7
e/x6iLTnC0S2ozYJ+G7Cp35dxVELeqqy9UpdZRZHBzzmq3dr9ztm1dFCog9bfaCt
JBkQb90KQr9TLcbLtNUQNmTi+bDD9pDfh8lJAy/vcgXcQYbxum8YDCzf/f4fy5sY
XitB1TRMeEPpSIr67A4fxxpT01tYm+dCz1FK8fjkWntRZ2OsjVTJ1oh+DLU/VRIw
ZQeDXnJsWpgYk7z78rBOnhpYR1gM06zUQjiAMdRNuq2ubeyUy/NVRAmV9D6Ez/TT
WGwyF58hbypd3H0N2vYpzpkuf3S3sDm2HRpzqRauUIld4ObaWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/QgZVP0co3eldYRwbOn8y8IPycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGE0ZDQ0NzUtYmUxNy0z
NWE0LWE0ZDAtOGNkNjExYjg1ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0YvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtNzfm6/ciIUrZmov2XlFt5tYPFzmvNBuDLUrUsjALmvt7zIJ7d62yb
lxgN7sBNmya//naaP1VBWzKghBUY42PHdL1RaMk7SwwazZn5q0Me2TA80RCAeOSs
kMfpa/XSrqkdXnNLVDpeZgP60yuf7xipUDcmaXy9vZhSIxsw7Q0UfyHsWh5ehhWL
xsDmKgKOSsnoYxx5GptPfmzdcQu+FuWR7YSS7gOHMMSDdKhr+C8C1ZiKyPTDkXh9
tNW4BykKMxrSxc547hKOv0p9wEowpAwDTODbG7eo8s4eGjmXHcy/+EcGneuVEx9e
Op6VyDj+DxsM7omhWFefWbJ1EY+A5Tc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:25 2025 by rpki-client