Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b11c30bd-9355-3e0c-9dbe-178e58693a9a.roa
File: b11c30bd-9355-3e0c-9dbe-178e58693a9a.roa (raw, json)
Hash identifier: 0A2sQpdsMcuFvWvc9i31FnT4EikvRIrHWUPQY/Iybx8=
Subject key identifier: 94:21:AC:99:85:FD:58:B7:44:0E:6B:71:D6:E1:EA:AA:7D:7D:C8:DF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0F8A30933A55E2EAAAEBC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b11c30bd-9355-3e0c-9dbe-178e58693a9a.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 577
IP address blocks: 184.151.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0f:8a:30:93:3a:55:e2:ea:aa:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=1db0aa15-fc11-4c28-878a-e5c12ab0c92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:21:bb:dd:0f:fc:c7:37:72:92:5d:35:06:6c:
84:60:a1:8f:b6:32:1d:4a:c7:d3:88:9b:3d:28:6e:
e2:a2:f4:b6:40:1d:69:56:b5:81:00:a7:ab:f7:24:
f6:41:5f:90:c4:71:1c:54:9d:7c:bf:30:a6:e0:1a:
a7:fb:91:f0:fa:bb:49:86:dc:45:00:47:a1:29:0e:
e4:83:77:72:df:84:3b:d4:7f:e4:89:bf:4a:49:a1:
08:a2:22:8e:a6:c4:dc:c2:1a:97:96:f8:40:b9:b0:
06:61:07:14:45:71:d9:95:20:05:20:38:8d:d6:bb:
cd:ca:bc:2a:97:14:13:72:71:3d:1a:2c:52:9b:62:
a8:d0:00:c8:b6:98:a3:eb:81:3d:84:c3:ff:73:42:
49:52:54:67:8a:da:8f:12:2a:7e:5b:da:a4:e4:2c:
b8:72:10:13:d0:4a:fb:5f:42:97:90:1b:87:a1:8a:
71:e7:60:fc:ae:af:22:69:17:fd:b8:25:73:70:97:
1f:c2:f2:07:92:ea:b9:0a:40:64:d9:d1:27:d7:ba:
3d:e9:d0:16:a4:6b:7c:0f:04:9d:1d:54:18:38:f3:
18:32:7c:67:d4:e5:19:6a:66:85:2d:aa:a7:55:6c:
08:7b:5d:5e:55:ef:b2:e2:ce:a2:e1:2b:57:ed:31:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:AC:99:85:FD:58:B7:44:0E:6B:71:D6:E1:EA:AA:7D:7D:C8:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b11c30bd-9355-3e0c-9dbe-178e58693a9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
184.151.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:35:49:20:ef:af:ab:99:66:8e:bf:fe:c3:be:dc:e3:e2:fe:
8c:f1:f3:c3:91:30:38:56:2e:64:a4:4b:dc:29:e0:a8:0f:2a:
eb:81:8f:75:4e:fc:32:c9:29:58:57:f1:8e:c4:09:d4:b5:97:
66:12:27:a2:9d:f3:14:17:35:92:0e:6b:57:11:65:59:bf:9d:
1e:b2:02:67:35:74:11:5d:47:14:03:c0:27:c4:cd:d8:cc:5a:
d3:7a:d6:ef:16:1e:36:c1:b4:f2:3e:da:93:3c:d1:36:c4:c6:
06:20:24:85:65:c1:53:73:42:c2:3c:61:de:a4:96:c1:8a:9a:
7f:3b:4a:1c:65:91:60:60:ab:2a:f6:ec:c7:4f:8b:17:fe:bb:
61:44:4a:6e:d6:b7:a8:5f:54:84:1e:88:26:a6:a3:7c:97:2d:
93:2e:00:3e:85:01:33:a3:dd:2f:1c:d1:f3:10:42:d2:88:e5:
4e:ee:ea:7a:3a:2a:67:ee:85:e7:28:8c:26:ba:c1:79:e3:88:
4b:04:4b:4e:89:9d:b8:ae:34:b7:2a:51:cc:2d:07:2f:77:85:
55:c6:9e:ce:ce:23:96:f6:ec:dc:0c:4c:7f:f2:0d:6b:10:df:
ee:a9:8a:d6:83:68:99:d8:ad:73:db:02:76:7e:d1:fa:78:23:
30:f3:90:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD4owkzpV4uqq68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MWRiMGFhMTUtZmMxMS00YzI4LTg3OGEtZTVjMTJhYjBjOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCG73Q/8xzdykl01BmyEYKGPtjIdSsfTiJs9
KG7iovS2QB1pVrWBAKer9yT2QV+QxHEcVJ18vzCm4Bqn+5Hw+rtJhtxFAEehKQ7k
g3dy34Q71H/kib9KSaEIoiKOpsTcwhqXlvhAubAGYQcURXHZlSAFIDiN1rvNyrwq
lxQTcnE9GixSm2Ko0ADItpij64E9hMP/c0JJUlRnitqPEip+W9qk5Cy4chAT0Er7
X0KXkBuHoYpx52D8rq8iaRf9uCVzcJcfwvIHkuq5CkBk2dEn17o96dAWpGt8DwSd
HVQYOPMYMnxn1OUZamaFLaqnVWwIe11eVe+y4s6i4StX7THemQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQhrJmF/Vi3RA5rcdbh6qp9fcjfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjExYzMwYmQtOTM1NS0z
ZTBjLTlkYmUtMTc4ZTU4NjkzYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuJeMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC41SSDvr6uZZo6//sO+3OPi/ozx88ORMDhWLmSkS9wp4KgPKuuBj3VO
/DLJKVhX8Y7ECdS1l2YSJ6Kd8xQXNZIOa1cRZVm/nR6yAmc1dBFdRxQDwCfEzdjM
WtN61u8WHjbBtPI+2pM80TbExgYgJIVlwVNzQsI8Yd6klsGKmn87ShxlkWBgqyr2
7MdPixf+u2FESm7Wt6hfVIQeiCamo3yXLZMuAD6FATOj3S8c0fMQQtKI5U7u6no6
KmfuhecojCa6wXnjiEsES06JnbiuNLcqUcwtBy93hVXGns7OI5b27NwMTH/yDWsQ
3+6pitaDaJnYrXPbAnZ+0fp4IzDzkIA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:44 2025 by rpki-client