Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa
File: b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa (raw, json)
Hash identifier: +3GSt/W+TGf92jx6kJyg/GmQYO5z80YQwF4funE8KjQ=
Subject key identifier: A9:1F:D9:7C:29:49:F9:B7:E7:69:1F:98:57:5D:21:05:2B:88:03:8E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858472B0E64527B87B2FF42F7CF30
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa
Signing time: Mon 09 Sep 2024 12:00:00 +0000
ROA not before: Mon 09 Sep 2024 12:00:00 +0000
ROA not after: Tue 10 Dec 2024 05:00:00 +0000
asID: 36522
IP address blocks: 67.69.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:0e:64:52:7b:87:b2:ff:42:f7:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Sep 9 12:00:00 2024 GMT
Not After : Dec 10 05:00:00 2024 GMT
Subject: CN=04f5d3a5-d2fa-485c-934f-6f1fc5afdb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:2b:54:cf:5f:c8:19:ec:0d:5b:9f:eb:e3:
48:05:34:f7:db:c2:3c:55:6b:23:3c:89:33:b2:6a:
34:0d:a0:09:fe:75:0e:1d:b5:1a:01:6c:0c:81:05:
54:bd:07:ee:ae:d9:3e:83:3c:d9:8c:5e:55:52:14:
a9:74:57:1a:45:8e:8f:3d:6a:df:c9:ac:83:1a:f7:
a0:da:0f:6d:4a:da:b3:06:3f:d8:a1:f9:e9:38:5b:
24:40:d9:84:cb:b5:a1:68:71:25:68:fc:50:23:1a:
c2:33:1b:b2:f9:04:8f:5c:e5:a6:6e:71:5e:46:2b:
44:c9:9e:c2:5d:00:db:2c:2d:4f:f1:6c:10:37:10:
35:70:5d:ef:94:22:26:62:58:d2:4e:53:da:f0:88:
b6:22:7f:35:8a:35:1b:80:0e:c6:52:5c:9b:e2:0a:
ff:12:48:1e:b2:dd:5b:06:18:4b:73:fc:5c:64:54:
75:1d:c8:bd:80:09:6a:21:43:8e:f4:7f:43:15:3a:
75:34:2b:a7:08:39:c6:05:a0:01:41:6a:0d:f6:31:
51:64:1c:5d:d0:a2:e5:54:53:3f:ba:40:dd:df:7d:
b2:71:ad:1d:97:23:99:71:3f:82:c7:2c:3c:3f:43:
68:67:ec:62:6e:33:63:a4:21:81:63:eb:f4:47:d4:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:D9:7C:29:49:F9:B7:E7:69:1F:98:57:5D:21:05:2B:88:03:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6e567f6-bd85-3ea0-b5de-7e29eb66d20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.69.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:11:04:54:6d:c3:bf:38:62:08:d0:fa:74:e0:2e:9a:6f:16:
d4:0b:f3:b6:4b:15:e4:76:9f:ff:50:49:2d:a4:0d:90:24:b6:
8a:41:c5:2c:de:73:91:ab:21:1f:84:e6:b6:12:e2:e7:5d:8f:
96:b4:f8:61:c0:61:c9:0e:58:d8:f9:a8:33:9c:ac:97:dc:31:
10:46:57:fb:60:7b:be:48:79:1f:4f:42:5e:55:c9:dd:46:3d:
a2:aa:d3:93:9b:2f:9e:7e:ac:88:a0:3c:e5:cd:f2:7b:7f:5d:
38:71:38:07:6f:04:24:7d:1b:6d:e8:7c:37:b6:b8:15:90:d6:
49:e2:40:eb:05:3b:37:42:8b:db:3a:cf:bc:6e:56:f9:75:9f:
b7:65:7b:62:90:aa:1f:68:ec:c0:4a:fa:af:6d:23:a4:82:61:
2f:1e:76:8c:f7:89:11:4e:75:5b:4e:9a:cc:01:80:1b:09:4d:
35:37:d6:21:8e:92:2b:93:34:93:3c:11:3e:35:fd:31:af:d5:
e1:f7:90:48:53:9a:86:f0:85:55:59:27:29:d1:1e:d9:b5:e7:
15:79:5e:b8:b5:17:ba:67:5a:a6:ac:e4:74:74:2a:d5:69:95:
6c:98:bc:fc:38:ae:56:68:c5:88:3e:dd:dd:5c:11:2c:32:f8:
73:47:eb:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrDmRSe4ey/0L3zzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MDRmNWQzYTUtZDJmYS00ODVjLTkzNGYtNmYxZmM1YWZkYjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzArVM9fyBnsDVuf6+NIBTT328I8VWsjPIkz
smo0DaAJ/nUOHbUaAWwMgQVUvQfurtk+gzzZjF5VUhSpdFcaRY6PPWrfyayDGveg
2g9tStqzBj/YofnpOFskQNmEy7WhaHElaPxQIxrCMxuy+QSPXOWmbnFeRitEyZ7C
XQDbLC1P8WwQNxA1cF3vlCImYljSTlPa8Ii2In81ijUbgA7GUlyb4gr/Ekgest1b
BhhLc/xcZFR1Hci9gAlqIUOO9H9DFTp1NCunCDnGBaABQWoN9jFRZBxd0KLlVFM/
ukDd332yca0dlyOZcT+Cxyw8P0NoZ+xibjNjpCGBY+v0R9ROJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkf2XwpSfm352kfmFddIQUriAOOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjZlNTY3ZjYtYmQ4NS0z
ZWEwLWI1ZGUtN2UyOWViNjZkMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0VEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIRBFRtw784YgjQ+nTgLppvFtQL87ZLFeR2n/9QSS2kDZAktopBxSze
c5GrIR+E5rYS4uddj5a0+GHAYckOWNj5qDOcrJfcMRBGV/tge75IeR9PQl5Vyd1G
PaKq05ObL55+rIigPOXN8nt/XThxOAdvBCR9G23ofDe2uBWQ1kniQOsFOzdCi9s6
z7xuVvl1n7dle2KQqh9o7MBK+q9tI6SCYS8edoz3iRFOdVtOmswBgBsJTTU31iGO
kiuTNJM8ET41/TGv1eH3kEhTmobwhVVZJynRHtm15xV5Xri1F7pnWqas5HR0KtVp
lWyYvPw4rlZoxYg+3d1cESwy+HNH6+U=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:06 2025 by rpki-client