Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d66a3f81-941a-3a31-8bc7-451fa17a314b.roa
File: d66a3f81-941a-3a31-8bc7-451fa17a314b.roa (raw, json)
Hash identifier: KrMCtBMGZgGTbLl9X1hoiW/4+1lX0gXyGTY9vXHpNBs=
Subject key identifier: 15:F7:0F:95:E8:DD:37:91:B8:D4:6B:A6:06:21:58:C2:1F:3B:23:2E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B62462AF68679CA508B240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d66a3f81-941a-3a31-8bc7-451fa17a314b.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:24:62:af:68:67:9c:a5:08:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=60c5aedb-602f-4a88-a483-094ff4e0d5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:73:e1:cd:ab:79:13:97:aa:33:4c:8d:70:
88:05:d7:ff:c1:27:38:7e:ee:d8:68:62:22:0c:6d:
44:f3:b3:11:bf:78:f9:fd:d6:96:73:3f:9e:76:ea:
13:a6:55:e3:ae:40:1f:74:f1:05:00:d1:62:0b:94:
92:de:03:12:74:65:88:c2:12:86:04:ed:bf:c3:ee:
eb:6f:69:79:20:fc:fa:bc:65:ce:11:2c:2b:3a:e9:
e0:19:b7:af:d4:a6:6f:40:5d:a9:a6:76:76:86:0f:
e3:be:34:81:b0:fb:b3:04:11:a7:f4:56:b6:7e:47:
31:c5:16:ce:e5:21:f8:93:2c:9e:d8:17:25:12:85:
c6:45:e2:e6:0c:5b:20:de:ae:e1:70:91:9a:bb:bf:
89:cd:46:c7:43:80:26:ad:30:40:b4:42:d1:ba:8e:
db:ff:44:4a:7c:c9:ef:48:fe:b8:82:e1:f2:36:02:
d2:3f:55:76:1f:66:35:d5:88:1a:9e:ad:60:e1:24:
b6:63:df:65:7f:05:7a:81:3e:55:73:66:b7:87:44:
95:bc:14:f2:e8:4a:f5:76:2a:fc:2e:4f:d9:c8:6a:
b3:78:4c:31:ec:2e:26:ce:52:53:a1:55:b5:a7:15:
3e:fd:d7:af:b2:36:32:f6:74:15:11:e5:0a:d6:fd:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F7:0F:95:E8:DD:37:91:B8:D4:6B:A6:06:21:58:C2:1F:3B:23:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d66a3f81-941a-3a31-8bc7-451fa17a314b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9f:a7:04:38:3d:7b:90:06:10:5b:a2:33:89:c8:82:5a:a8:
0c:cd:fe:c8:41:cb:aa:7b:d3:37:75:e5:78:bb:32:0b:67:a4:
46:fa:9e:ec:e5:3b:66:11:30:c9:72:da:95:60:82:ec:42:4d:
f9:ab:e5:6a:d5:3f:e2:bc:7c:3f:b0:38:28:69:ce:42:d1:61:
ca:c5:48:13:f9:f3:85:ff:f3:4c:e5:0b:a6:da:da:93:db:5f:
7a:6f:06:e3:cd:4d:68:f8:23:72:da:2e:2b:7d:d8:a9:b3:f1:
7b:38:14:d3:a6:b3:00:3e:54:7f:1a:06:25:9a:94:a2:5f:91:
21:00:d1:20:83:ef:2e:a6:6f:26:7c:2a:da:f9:83:0d:44:b1:
a1:db:d6:95:11:00:45:b7:b5:58:24:0b:d6:4f:4f:ed:93:37:
20:68:04:fe:f0:26:95:ef:11:af:e3:b9:9b:41:c3:82:c2:d5:
ca:e2:a3:f9:b8:e4:59:85:99:99:de:0a:cf:4e:d3:f4:16:0e:
81:6f:c7:f2:89:ff:d0:67:18:60:e2:67:db:94:96:29:12:9c:
62:1c:d0:5e:81:fe:fe:61:06:ad:ac:e6:9f:54:cc:85:10:12:
8c:01:cf:00:c4:b6:42:3d:61:e6:40:f6:56:43:4b:c6:ef:65:
6a:f9:c7:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtiRir2hnnKUIskAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjBjNWFlZGItNjAyZi00YTg4LWE0ODMtMDk0ZmY0ZTBkNWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJtz4c2reROXqjNMjXCIBdf/wSc4fu7YaGIi
DG1E87MRv3j5/daWcz+eduoTplXjrkAfdPEFANFiC5SS3gMSdGWIwhKGBO2/w+7r
b2l5IPz6vGXOESwrOungGbev1KZvQF2ppnZ2hg/jvjSBsPuzBBGn9Fa2fkcxxRbO
5SH4kyye2BclEoXGReLmDFsg3q7hcJGau7+JzUbHQ4AmrTBAtELRuo7b/0RKfMnv
SP64guHyNgLSP1V2H2Y11Yganq1g4SS2Y99lfwV6gT5Vc2a3h0SVvBTy6Er1dir8
Lk/ZyGqzeEwx7C4mzlJToVW1pxU+/devsjYy9nQVEeUK1v2LXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBX3D5Xo3TeRuNRrpgYhWMIfOyMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDY2YTNmODEtOTQxYS0z
YTMxLThiYzctNDUxZmExN2EzMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyfpwQ4PXuQBhBbojOJyIJaqAzN/shBy6p70zd15Xi7MgtnpEb6nuzl
O2YRMMly2pVgguxCTfmr5WrVP+K8fD+wOChpzkLRYcrFSBP584X/80zlC6ba2pPb
X3pvBuPNTWj4I3LaLit92Kmz8Xs4FNOmswA+VH8aBiWalKJfkSEA0SCD7y6mbyZ8
Ktr5gw1EsaHb1pURAEW3tVgkC9ZPT+2TNyBoBP7wJpXvEa/juZtBw4LC1crio/m4
5FmFmZneCs9O0/QWDoFvx/KJ/9BnGGDiZ9uUlikSnGIc0F6B/v5hBq2s5p9UzIUQ
EowBzwDEtkI9YeZA9lZDS8bvZWr5x3Q=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:55 2025 by rpki-client