Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d341029a-b0f5-3f56-b867-5b35188b009f.roa
File: d341029a-b0f5-3f56-b867-5b35188b009f.roa (raw, json)
Hash identifier: edbklwlzU77WcTqkm/lD9xmjfV8vk4fEwqnucglIo8k=
Subject key identifier: A0:AB:51:4A:B3:75:FB:BF:B9:E9:5A:F1:38:0C:8F:4D:CD:3A:FE:98
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B61F5E02BC73641ED5D200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d341029a-b0f5-3f56-b867-5b35188b009f.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 2001:4958:1808::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b6:1f:5e:02:bc:73:64:1e:d5:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=aaa4fe14-1dc4-4edc-8476-1d115acfc779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:5e:b4:6e:5a:ab:4a:af:31:62:4d:99:eb:
36:f9:6b:e2:68:a6:72:66:0a:6c:5f:bc:c5:a3:a2:
ee:8d:c1:f3:f1:33:19:0b:d4:ec:13:9e:40:4e:21:
c4:28:8c:00:db:26:c3:36:91:c5:aa:a3:ad:a2:da:
3e:c2:42:80:7e:f1:6f:fe:8d:b3:94:ac:a6:b2:3e:
f6:e0:39:35:ec:ed:3c:12:19:64:bb:66:42:b2:2e:
09:c8:81:82:2f:f3:e4:4e:74:5d:ae:a0:2a:34:e8:
db:68:54:a4:52:17:7c:46:9a:ec:c8:95:be:8e:6b:
52:ac:32:e3:51:3c:96:f4:2b:2a:3f:cc:0a:de:48:
2c:e2:51:84:9a:6c:c5:79:96:97:4f:bf:ba:a1:c9:
ef:67:70:ef:25:b0:b3:ac:69:69:f2:0c:8b:80:84:
ea:56:84:5b:10:b1:2b:a8:bf:a8:b7:a1:2b:c9:38:
61:6b:6e:2b:d6:cb:0b:2b:41:53:b5:1b:17:e5:46:
f2:89:46:68:fc:16:2f:22:10:b5:bf:f5:d6:42:64:
5e:21:56:72:71:a4:3d:01:b2:e9:68:de:c7:db:91:
86:a5:da:ad:13:85:3b:49:8a:8f:01:e8:e6:8f:2d:
67:e5:5c:86:66:5e:92:5a:63:8e:09:cd:29:d9:f9:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:51:4A:B3:75:FB:BF:B9:E9:5A:F1:38:0C:8F:4D:CD:3A:FE:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d341029a-b0f5-3f56-b867-5b35188b009f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4958:1808::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f9:e5:86:b9:65:9a:ce:1f:3d:86:45:18:97:c5:78:10:17:
93:53:b8:f1:96:a4:34:e6:2a:d4:6a:88:64:fd:d5:0a:4d:1c:
06:29:21:f5:dd:67:57:2e:8d:8e:70:b9:10:b1:17:b9:d3:0e:
aa:f5:8d:80:79:f0:59:62:96:81:17:d8:6f:af:af:91:d0:e7:
1c:19:32:cc:95:06:09:93:e6:19:a3:55:a1:1b:ac:06:00:6d:
99:a3:72:64:22:3e:2c:1b:84:0e:ba:13:30:8e:31:c7:6b:8c:
ba:df:59:6c:03:57:3c:1c:92:53:bd:03:39:7e:75:01:1a:f2:
6f:fe:f6:07:25:53:40:b1:e3:57:79:66:64:f2:81:cf:ce:97:
9a:80:39:38:bc:5e:21:7a:fc:15:fc:b6:78:6c:46:f9:bd:e7:
fe:42:8f:25:58:fc:39:f1:b3:52:9f:28:7b:33:e2:48:b9:90:
89:cd:27:45:9c:5e:d8:24:81:8e:be:45:3e:09:ef:5d:98:a1:
aa:05:1e:f0:a4:b6:bb:06:8c:f3:69:dc:f4:76:88:8c:80:25:
11:30:f5:20:f8:22:a3:a5:2a:4d:46:b1:65:6d:b7:f8:39:9b:
dd:bb:c3:a4:23:59:70:07:20:e6:92:0c:c5:3b:97:71:10:97:
97:2d:4d:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVWth9eArxzZB7V0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
YWFhNGZlMTQtMWRjNC00ZWRjLTg0NzYtMWQxMTVhY2ZjNzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY9etG5aq0qvMWJNmes2+WviaKZyZgpsX7zF
o6LujcHz8TMZC9TsE55ATiHEKIwA2ybDNpHFqqOtoto+wkKAfvFv/o2zlKymsj72
4Dk17O08Ehlku2ZCsi4JyIGCL/PkTnRdrqAqNOjbaFSkUhd8RprsyJW+jmtSrDLj
UTyW9CsqP8wK3kgs4lGEmmzFeZaXT7+6ocnvZ3DvJbCzrGlp8gyLgITqVoRbELEr
qL+ot6EryThha24r1ssLK0FTtRsX5UbyiUZo/BYvIhC1v/XWQmReIVZycaQ9AbLp
aN7H25GGpdqtE4U7SYqPAejmjy1n5VyGZl6SWmOOCc0p2fkABwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKCrUUqzdfu/uela8TgMj03NOv6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDM0MTAyOWEtYjBmNS0z
ZjU2LWI4NjctNWIzNTE4OGIwMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJWBgI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADf55Ya5ZZrOHz2GRRiXxXgQF5NTuPGWpDTmKtRqiGT91QpNHAYp
IfXdZ1cujY5wuRCxF7nTDqr1jYB58FliloEX2G+vr5HQ5xwZMsyVBgmT5hmjVaEb
rAYAbZmjcmQiPiwbhA66EzCOMcdrjLrfWWwDVzwcklO9Azl+dQEa8m/+9gclU0Cx
41d5ZmTygc/Ol5qAOTi8XiF6/BX8tnhsRvm95/5CjyVY/Dnxs1KfKHsz4ki5kInN
J0WcXtgkgY6+RT4J712YoaoFHvCktrsGjPNp3PR2iIyAJREw9SD4IqOlKk1GsWVt
t/g5m927w6QjWXAHIOaSDMU7l3EQl5ctTfs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:25 2025 by rpki-client