Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/917e7e88-7b02-320d-9dc6-1b94abf7b094.roa
File: 917e7e88-7b02-320d-9dc6-1b94abf7b094.roa (raw, json)
Hash identifier: PrVCzGT4INip8P0toOopIy1g3IWtrtWv0xim2HV4UA4=
Subject key identifier: C6:20:BC:3F:F8:4C:C8:AA:22:F9:15:2E:8C:10:7C:0F:1C:97:79:07
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5B5117EB41F8973AF8DB8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/917e7e88-7b02-320d-9dc6-1b94abf7b094.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 184.144.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:b5:11:7e:b4:1f:89:73:af:8d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=e098f250-269a-4ce0-88ec-5d114e3b335f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:8b:32:47:84:56:ec:d6:be:73:b8:d5:4d:
f1:e5:d7:96:85:9a:5b:13:df:a4:18:93:05:be:e2:
84:59:b7:a9:e4:19:f4:9c:0c:19:fb:4c:7b:e2:ee:
99:d5:e1:d9:50:21:f1:9a:82:12:a6:7d:61:5b:21:
4f:36:e4:65:03:9e:85:d3:ce:c9:16:98:99:4a:a4:
07:41:11:32:ee:33:0d:71:58:7d:af:7b:d9:b6:cf:
e3:36:83:1c:17:ed:45:cc:54:dc:b6:1d:57:4f:28:
f5:7e:15:e3:61:b1:ee:af:cd:75:c7:31:89:55:2f:
82:83:19:b5:89:e9:a6:81:a9:7e:1b:b4:1a:72:51:
ab:3f:06:d1:cc:44:b1:0a:9d:49:8f:9f:56:14:1d:
a1:47:28:24:c0:7d:48:0c:6a:da:b7:a5:d2:6b:04:
45:45:5c:a5:59:23:97:d3:35:36:e4:00:8b:81:4c:
93:ae:92:29:f6:28:8f:66:da:f7:a2:65:d9:0b:07:
11:56:fa:3b:3c:71:07:8e:f5:be:92:ca:dd:2d:93:
65:fa:78:f7:82:8a:b2:5d:40:37:8f:f6:f1:21:81:
58:6c:47:ed:f7:2c:c9:da:3b:6e:b7:be:37:b1:ab:
bc:62:0b:6b:a9:83:73:56:60:db:4f:43:6f:6e:de:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:20:BC:3F:F8:4C:C8:AA:22:F9:15:2E:8C:10:7C:0F:1C:97:79:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/917e7e88-7b02-320d-9dc6-1b94abf7b094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:96:04:d5:23:75:94:f3:d6:39:88:d3:60:51:6e:29:c4:a9:
03:f1:86:da:e0:0b:3d:34:fb:db:0a:24:19:5b:db:fe:96:b5:
02:10:88:0d:58:ab:20:6a:96:e7:9d:f2:15:15:9b:27:1e:85:
a4:3b:da:b4:11:ce:ad:80:30:21:87:d9:44:eb:f2:7b:0d:02:
e4:e4:3f:1a:7f:08:3f:bd:bb:b0:ff:0b:9e:8e:23:89:5c:0c:
87:d7:16:89:ce:f1:f3:58:90:ed:69:c7:10:21:dd:4b:60:0f:
c6:ed:9f:7b:17:d2:49:0f:df:35:a1:d9:6f:4b:c9:4f:54:94:
99:2d:bb:6b:55:7e:e7:a2:0e:f0:fc:69:cb:17:92:8a:2b:2e:
60:eb:97:44:2d:9d:2d:68:e4:bf:ca:a1:5f:87:4d:dd:13:71:
2b:08:a9:d1:15:79:39:1b:98:ea:40:08:36:32:54:6c:49:62:
2f:7f:82:ce:ae:80:4b:ee:63:42:22:91:2a:a0:20:c0:18:8b:
e7:8f:55:32:f2:55:be:e7:5e:cf:c8:0f:03:a4:05:64:ed:0c:
5b:3b:5e:a6:ee:bf:e0:85:9f:f3:bc:e8:a5:29:96:e3:c2:24:
8c:aa:52:e9:05:99:48:09:05:9e:0c:a8:cc:11:7d:f2:80:d8:
ce:36:5d:75
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtbURfrQfiXOvjbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTA5OGYyNTAtMjY5YS00Y2UwLTg4ZWMtNWQxMTRlM2IzMzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjiLMkeEVuzWvnO41U3x5deWhZpbE9+kGJMF
vuKEWbep5Bn0nAwZ+0x74u6Z1eHZUCHxmoISpn1hWyFPNuRlA56F087JFpiZSqQH
QREy7jMNcVh9r3vZts/jNoMcF+1FzFTcth1XTyj1fhXjYbHur811xzGJVS+Cgxm1
iemmgal+G7QaclGrPwbRzESxCp1Jj59WFB2hRygkwH1IDGrat6XSawRFRVylWSOX
0zU25ACLgUyTrpIp9iiPZtr3omXZCwcRVvo7PHEHjvW+ksrdLZNl+nj3goqyXUA3
j/bxIYFYbEft9yzJ2jtut743sau8YgtrqYNzVmDbT0Nvbt5tXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMYgvD/4TMiqIvkVLowQfA8cl3kHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTE3ZTdlODgtN2IwMi0z
MjBkLTlkYzYtMWI5NGFiZjdiMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAuJAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEpYE1SN1lPPWOYjTYFFuKcSpA/GG2uALPTT72wokGVvb/pa1AhCIDVir
IGqW553yFRWbJx6FpDvatBHOrYAwIYfZROvyew0C5OQ/Gn8IP727sP8Lno4jiVwM
h9cWic7x81iQ7WnHECHdS2APxu2fexfSSQ/fNaHZb0vJT1SUmS27a1V+56IO8Pxp
yxeSiisuYOuXRC2dLWjkv8qhX4dN3RNxKwip0RV5ORuY6kAINjJUbEliL3+Czq6A
S+5jQiKRKqAgwBiL549VMvJVvudez8gPA6QFZO0MWztepu6/4IWf87zopSmW48Ik
jKpS6QWZSAkFngyozBF98oDYzjZddQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:54 2025 by rpki-client