Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c354e9c6-2773-3f1a-b795-fbd43e438cab.roa
File: c354e9c6-2773-3f1a-b795-fbd43e438cab.roa (raw, json)
Hash identifier: O/OKW+6k3ZQUTI+OyHLNCte0cONsQApkW6MGogJpoBg=
Subject key identifier: D0:26:0F:DB:A9:1B:2C:8F:38:35:D9:F6:5D:50:60:A7:A9:6A:AC:2B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B64C6D46AF0E27E18643C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c354e9c6-2773-3f1a-b795-fbd43e438cab.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:4c:6d:46:af:0e:27:e1:86:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=66267b21-63fe-4a1e-a867-64f0e3f68a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:86:71:7b:f6:4f:f4:59:2c:45:8e:18:b6:
99:46:1d:78:94:28:85:de:46:cb:7e:b0:ce:c2:86:
d2:81:d6:e4:83:40:10:99:22:4d:d5:2e:45:7f:db:
c2:82:2d:42:c9:96:be:6f:a4:21:25:f0:15:14:f9:
9f:42:aa:b0:d6:e5:b3:d4:7c:ed:9e:48:08:c3:30:
fa:80:52:d2:bd:61:45:88:00:71:f6:22:7a:72:6e:
d6:d1:01:4d:d8:68:78:04:69:07:a3:85:6d:14:de:
ff:2f:2d:08:f8:00:a2:03:62:ac:f4:0f:91:49:60:
29:3f:49:f5:2a:e5:d5:e6:31:31:c1:e5:11:e7:a6:
51:e5:c8:eb:22:e5:08:75:64:5f:4e:69:bb:a1:fa:
89:4c:f9:fd:0f:9e:35:82:49:15:34:43:51:a7:dd:
d9:4c:05:54:1b:59:07:77:5b:49:d4:32:65:f2:9e:
79:03:0e:5c:18:cc:51:e9:bf:3c:4d:bd:50:0d:18:
06:b2:b9:62:d7:11:fc:86:14:db:43:24:a6:36:16:
3b:af:75:25:2a:53:49:7d:63:b2:fc:88:8d:96:87:
5b:0d:71:1d:d0:63:29:48:0a:78:88:03:bd:1e:45:
13:bb:41:2a:17:37:ff:b1:f2:be:a9:d6:0b:93:30:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:26:0F:DB:A9:1B:2C:8F:38:35:D9:F6:5D:50:60:A7:A9:6A:AC:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c354e9c6-2773-3f1a-b795-fbd43e438cab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:5b:9b:d5:00:b5:3e:a5:cb:f6:e0:2b:3e:9f:3e:83:bc:f3:
b6:ae:7f:62:db:82:e5:8e:1c:9b:0d:e3:b5:6a:5e:e7:be:0e:
e2:50:71:60:a6:c0:b0:97:45:9e:62:50:c8:22:59:c5:4e:23:
36:28:6e:75:72:eb:89:9d:21:77:c1:99:62:3d:a1:15:b1:39:
3a:22:f2:ec:7d:f7:f4:b3:21:06:f6:54:d1:c9:29:5e:dd:f5:
8e:ba:e9:2e:86:02:e3:ce:12:a2:10:37:4d:74:9c:1a:d1:47:
0d:ea:80:bd:df:9a:95:92:93:55:a6:fb:a6:f7:44:7f:c4:d3:
f7:46:ba:85:8c:f9:22:37:32:1e:2f:ec:b3:2d:a9:bd:8b:c9:
dd:bf:0e:35:18:ef:d6:01:88:71:31:01:e5:87:c2:b1:38:4e:
af:5f:bf:fe:08:13:a7:8c:78:a1:be:aa:11:e1:7d:ef:66:3f:
b2:8e:18:9a:bc:77:e4:80:86:3b:b6:32:87:f7:4e:d3:72:e2:
8d:bc:1b:4b:83:2d:df:2c:2d:09:43:7f:4e:d4:07:e4:9e:b8:
3c:78:96:89:d0:dc:16:31:ad:53:93:97:c7:8c:f6:02:dd:f8:
74:e1:a2:c1:ac:02:1e:03:af:6d:0a:bd:21:c5:9b:dc:be:ff:
85:3a:08:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtkxtRq8OJ+GGQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjYyNjdiMjEtNjNmZS00YTFlLWE4NjctNjRmMGUzZjY4YTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiuGcXv2T/RZLEWOGLaZRh14lCiF3kbLfrDO
wobSgdbkg0AQmSJN1S5Ff9vCgi1CyZa+b6QhJfAVFPmfQqqw1uWz1HztnkgIwzD6
gFLSvWFFiABx9iJ6cm7W0QFN2Gh4BGkHo4VtFN7/Ly0I+ACiA2Ks9A+RSWApP0n1
KuXV5jExweUR56ZR5cjrIuUIdWRfTmm7ofqJTPn9D541gkkVNENRp93ZTAVUG1kH
d1tJ1DJl8p55Aw5cGMxR6b88Tb1QDRgGsrli1xH8hhTbQySmNhY7r3UlKlNJfWOy
/IiNlodbDXEd0GMpSAp4iAO9HkUTu0EqFzf/sfK+qdYLkzDLRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAmD9upGyyPODXZ9l1QYKepaqwrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzM1NGU5YzYtMjc3My0z
ZjFhLWI3OTUtZmJkNDNlNDM4Y2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpbm9UAtT6ly/bgKz6fPoO887auf2LbguWOHJsN47VqXue+DuJQcWCm
wLCXRZ5iUMgiWcVOIzYobnVy64mdIXfBmWI9oRWxOToi8ux99/SzIQb2VNHJKV7d
9Y666S6GAuPOEqIQN010nBrRRw3qgL3fmpWSk1Wm+6b3RH/E0/dGuoWM+SI3Mh4v
7LMtqb2Lyd2/DjUY79YBiHExAeWHwrE4Tq9fv/4IE6eMeKG+qhHhfe9mP7KOGJq8
d+SAhju2Mof3TtNy4o28G0uDLd8sLQlDf07UB+SeuDx4lonQ3BYxrVOTl8eM9gLd
+HThosGsAh4Dr20KvSHFm9y+/4U6CDI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:47 2025 by rpki-client