Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9d77e91e-b0a6-3d1e-b584-a1fa552fd48c.roa
File: 9d77e91e-b0a6-3d1e-b584-a1fa552fd48c.roa (raw, json)
Hash identifier: naZyLyUQYDHozKhE58808naPdBYLR8YgjdhZWxUSYH0=
Subject key identifier: C1:EE:1C:20:B5:8E:23:7F:95:06:21:92:6F:CE:9B:DB:6C:07:02:7D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0EB8F7E4B47C1B42B45F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9d77e91e-b0a6-3d1e-b584-a1fa552fd48c.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 577
IP address blocks: 70.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0e:b8:f7:e4:b4:7c:1b:42:b4:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=95a32d39-5d5e-4f38-b4a3-473169589b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:6e:62:b6:4c:b1:7f:a6:65:4b:6f:2b:0a:
ed:8f:69:81:9a:63:7a:5a:98:6b:70:0b:7b:27:9b:
eb:85:5e:bd:4f:f8:c9:89:51:d4:2c:ce:71:dd:82:
ca:e0:e5:c7:4c:b4:17:ee:47:ce:1c:bd:45:c6:34:
4a:be:a6:e0:85:67:28:25:b4:eb:dc:34:03:55:1a:
c3:16:24:7b:aa:f6:54:e8:60:b5:c1:f4:9a:c5:26:
c0:cc:36:cd:c8:26:b9:33:9c:23:67:20:86:18:02:
b8:7a:0d:ac:95:92:62:b7:cc:70:a1:87:02:94:9f:
f9:36:e0:8a:32:91:3e:d6:ac:76:67:5b:19:0b:d3:
61:1c:b1:b5:95:b5:81:3f:0b:53:50:90:02:dc:0d:
ab:3c:24:ef:46:16:d3:4f:bc:0b:2b:17:46:9e:2e:
63:93:e5:aa:ab:2e:87:3f:80:5b:e0:b3:8b:eb:a5:
23:c2:db:62:cf:00:b9:c9:d5:12:d7:2d:b5:ad:44:
68:89:bd:d5:83:22:4d:76:a5:36:16:16:59:18:09:
ef:44:11:20:7c:d7:14:42:24:22:33:59:4b:45:86:
55:44:6f:ea:e8:a4:76:a0:57:df:c1:70:97:42:f1:
b3:51:09:c7:f2:73:eb:5e:52:0a:61:ee:9f:26:60:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:1C:20:B5:8E:23:7F:95:06:21:92:6F:CE:9B:DB:6C:07:02:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9d77e91e-b0a6-3d1e-b584-a1fa552fd48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:1f:e6:08:4a:04:41:47:86:ee:68:89:a2:67:8d:77:44:b8:
48:9e:46:9d:74:9a:09:0c:ae:ac:76:3f:45:ef:93:6a:f4:9d:
40:40:aa:48:5e:9f:74:f4:37:d4:76:ac:a6:6c:b4:90:22:83:
ac:1e:ca:60:9f:a5:c9:80:20:81:c7:d7:1c:57:eb:75:15:c8:
60:f0:e2:86:fd:68:85:2d:27:e0:f8:6f:99:ef:51:f4:13:4f:
0c:d9:4a:fc:12:a6:cc:73:26:48:9c:3b:37:15:46:1a:7c:e5:
5c:bd:93:da:d8:b7:ce:a1:0e:cd:32:d4:b4:0f:c8:8c:9e:90:
a8:a8:f6:1c:8b:83:6d:7b:85:82:f4:31:b4:3c:c8:c8:92:15:
b4:ad:31:0d:17:80:4a:07:9d:bf:7a:90:aa:93:7b:84:63:bc:
9b:aa:de:67:c5:e8:61:df:3e:9f:af:3f:84:78:93:c4:5c:c0:
30:92:99:d9:74:ea:60:a5:4c:d9:74:e5:f1:51:a8:a4:3c:64:
24:01:8c:22:26:6a:0b:76:b9:3b:a6:6c:23:84:29:22:19:52:
d2:2d:73:da:9a:d1:1f:d4:88:32:6d:e6:e3:d9:ba:f9:b0:3a:
3c:2d:c5:88:8d:f2:0b:fd:e2:04:e1:bc:c2:13:61:88:93:aa:
67:af:60:34
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrDrj35LR8G0K0X4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
OTVhMzJkMzktNWQ1ZS00ZjM4LWI0YTMtNDczMTY5NTg5YjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry9uYrZMsX+mZUtvKwrtj2mBmmN6WphrcAt7
J5vrhV69T/jJiVHULM5x3YLK4OXHTLQX7kfOHL1FxjRKvqbghWcoJbTr3DQDVRrD
FiR7qvZU6GC1wfSaxSbAzDbNyCa5M5wjZyCGGAK4eg2slZJit8xwoYcClJ/5NuCK
MpE+1qx2Z1sZC9NhHLG1lbWBPwtTUJAC3A2rPCTvRhbTT7wLKxdGni5jk+Wqqy6H
P4Bb4LOL66UjwttizwC5ydUS1y21rURoib3VgyJNdqU2FhZZGAnvRBEgfNcUQiQi
M1lLRYZVRG/q6KR2oFffwXCXQvGzUQnH8nPrXlIKYe6fJmDp9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMHuHCC1jiN/lQYhkm/Om9tsBwJ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWQ3N2U5MWUtYjBhNi0z
ZDFlLWI1ODQtYTFmYTU1MmZkNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARjQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjB/mCEoEQUeG7miJomeNd0S4SJ5GnXSaCQyurHY/Re+TavSdQECqSF6f
dPQ31Haspmy0kCKDrB7KYJ+lyYAggcfXHFfrdRXIYPDihv1ohS0n4Phvme9R9BNP
DNlK/BKmzHMmSJw7NxVGGnzlXL2T2ti3zqEOzTLUtA/IjJ6QqKj2HIuDbXuFgvQx
tDzIyJIVtK0xDReASgedv3qQqpN7hGO8m6reZ8XoYd8+n68/hHiTxFzAMJKZ2XTq
YKVM2XTl8VGopDxkJAGMIiZqC3a5O6ZsI4QpIhlS0i1z2prRH9SIMm3m49m6+bA6
PC3FiI3yC/3iBOG8whNhiJOqZ69gNA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:24 2025 by rpki-client