Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa
File: cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa (raw, json)
Hash identifier: ze7H+rsyV0lxbhSm7P8h5VIlfC4YGZFIrHSFx6Artzo=
Subject key identifier: 73:71:93:E1:1A:B5:9D:83:65:8F:67:9F:FE:43:FC:97:E1:BA:7B:DF
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285840C1D40FC1622575EEE183F700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa
Signing time: Mon 30 Jan 2023 12:00:00 +0000
ROA not before: Mon 30 Jan 2023 12:00:00 +0000
ROA not after: Tue 02 May 2023 04:00:00 +0000
asID: 577
IP address blocks: 142.187.0.0/16 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:d4:0f:c1:62:25:75:ee:e1:83:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 30 12:00:00 2023 GMT
Not After : May 2 04:00:00 2023 GMT
Subject: CN=8383798d-09f2-42c3-a89e-df5c118699e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:3f:7f:01:53:41:29:85:c1:0e:d1:ef:b9:
49:e3:58:35:b1:ce:f1:ed:0e:c2:56:92:30:af:35:
84:a6:67:2b:0e:b3:61:1f:c7:e7:46:d7:3f:5c:f4:
3c:f1:8c:b3:31:04:58:0f:36:bd:e0:52:8e:be:58:
af:9d:98:55:d2:20:27:b4:34:26:3b:9b:da:41:78:
6b:f4:6f:95:31:15:7e:fd:3f:31:24:f0:a7:40:8a:
f5:3c:b3:82:18:06:19:44:d6:94:a3:6a:d8:02:ef:
dd:93:a4:01:00:64:b4:7e:c0:af:4d:98:a0:24:82:
3a:ef:e9:ec:2c:53:91:0c:66:53:f7:b4:46:e8:63:
dd:09:b5:2d:ee:5e:6c:e4:2c:8b:55:41:22:de:c8:
3f:ec:ac:52:a5:60:10:52:39:6c:07:b9:7e:16:e4:
e6:2a:e2:b8:b1:8c:89:cc:07:17:e7:10:38:d2:96:
14:11:95:eb:e0:9c:9a:ba:e8:38:ed:6d:db:de:d9:
fd:78:52:c7:0a:fd:32:e3:74:0a:cd:f3:70:ff:46:
3c:ad:01:b9:95:65:a4:0b:bd:81:9c:f5:f0:f1:21:
bd:fe:e7:20:64:34:10:86:c6:bc:be:c0:de:41:92:
f8:65:b1:01:a5:a9:6d:ee:66:ba:49:81:cd:1c:49:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:93:E1:1A:B5:9D:83:65:8F:67:9F:FE:43:FC:97:E1:BA:7B:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cdb9ec62-7434-36e5-b4f5-12ae69f41994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.187.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:dc:cb:9f:60:62:0b:43:d8:bb:c9:6c:96:ed:b2:c8:77:4c:
03:e1:d3:20:4e:12:51:ba:a2:34:50:8c:b3:ff:05:5e:d7:15:
52:1a:56:0a:71:00:df:75:7a:30:7d:ac:b6:67:8b:e1:43:e4:
67:eb:6f:c7:61:08:d2:6b:14:f5:06:b2:90:27:22:70:8c:94:
fe:95:b4:cc:55:38:8a:bd:5e:8c:a3:16:40:fa:67:52:26:6b:
cf:3d:6e:53:e3:97:1e:d4:fe:3f:9d:92:a7:28:66:0b:1e:dc:
a9:cf:db:43:07:92:f6:73:7b:f7:3a:02:e3:ef:cb:0c:18:a3:
cc:63:ff:6a:55:49:ba:d6:d7:5d:c7:a0:a5:d0:2b:92:df:5e:
f2:a3:55:01:cc:9e:5f:68:63:36:b9:30:ff:c4:e9:65:f3:15:
5e:99:bd:7f:96:65:a1:f7:da:a2:94:2d:10:d6:c2:0d:7e:67:
7d:1e:91:f6:a2:74:66:33:f4:f5:25:f2:19:28:b3:a7:53:62:
25:18:3c:58:41:b4:01:42:5b:f6:7d:19:79:ef:dd:d9:4f:eb:
6f:9d:8e:8b:4b:e4:66:b8:1c:a7:50:fc:1a:dc:ea:18:f7:e0:
3c:48:a9:42:c6:e6:df:0f:fa:44:e1:d8:8f:47:5e:d9:1c:e1:
9d:02:69:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDB1A/BYiV17uGD9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDEzMDEyMDAwMFoXDTIzMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ODM4Mzc5OGQtMDlmMi00MmMzLWE4OWUtZGY1YzExODY5OWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqk/fwFTQSmFwQ7R77lJ41g1sc7x7Q7CVpIw
rzWEpmcrDrNhH8fnRtc/XPQ88YyzMQRYDza94FKOvlivnZhV0iAntDQmO5vaQXhr
9G+VMRV+/T8xJPCnQIr1PLOCGAYZRNaUo2rYAu/dk6QBAGS0fsCvTZigJII67+ns
LFORDGZT97RG6GPdCbUt7l5s5CyLVUEi3sg/7KxSpWAQUjlsB7l+FuTmKuK4sYyJ
zAcX5xA40pYUEZXr4Jyauug47W3b3tn9eFLHCv0y43QKzfNw/0Y8rQG5lWWkC72B
nPXw8SG9/ucgZDQQhsa8vsDeQZL4ZbEBpalt7ma6SYHNHEmurwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHNxk+EatZ2DZY9nn/5D/JfhunvfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2RiOWVjNjItNzQzNC0z
NmU1LWI0ZjUtMTJhZTY5ZjQxOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjrswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHdzLn2BiC0PYu8lslu2yyHdMA+HTIE4SUbqiNFCMs/8FXtcVUhpWCnEA
33V6MH2stmeL4UPkZ+tvx2EI0msU9QaykCcicIyU/pW0zFU4ir1ejKMWQPpnUiZr
zz1uU+OXHtT+P52SpyhmCx7cqc/bQweS9nN79zoC4+/LDBijzGP/alVJutbXXceg
pdArkt9e8qNVAcyeX2hjNrkw/8TpZfMVXpm9f5ZloffaopQtENbCDX5nfR6R9qJ0
ZjP09SXyGSizp1NiJRg8WEG0AUJb9n0Zee/d2U/rb52Oi0vkZrgcp1D8GtzqGPfg
PEipQsbm3w/6ROHYj0de2RzhnQJpzA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:28 2025 by rpki-client