Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc7db900-a43d-3bf8-9e64-ce8d51fad23c.roa
File: dc7db900-a43d-3bf8-9e64-ce8d51fad23c.roa (raw, json)
Hash identifier: 3Z/5z2OlaLS/nSZLyBjgzJIc0BYTKnSk+S221Xiuie4=
Subject key identifier: 43:9A:F4:B1:A6:BC:3B:2E:C8:E7:CC:72:11:B1:7F:83:5B:58:B8:CE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B80820C72368968F0C61AC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc7db900-a43d-3bf8-9e64-ce8d51fad23c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b8:08:20:c7:23:68:96:8f:0c:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=e531bf08-5f0e-4910-856f-d8da98066d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:24:fb:43:13:22:d3:b8:1b:e9:26:44:53:
bd:17:0c:11:75:40:77:53:e1:38:48:1f:1a:b5:21:
f9:62:e1:3d:67:2a:b0:23:ea:cf:24:a8:d8:56:6f:
fd:7f:40:df:0f:c2:5c:be:23:10:4e:43:34:5b:9e:
a7:2e:af:ac:f5:a7:be:55:50:5f:cc:53:e5:15:6e:
f6:92:b9:dd:df:34:05:f7:06:8e:fa:a9:8a:18:ee:
83:f9:28:74:52:06:2b:6e:d8:29:46:dd:ec:3b:72:
99:eb:e4:df:65:28:d5:f2:b1:3e:26:5d:99:7d:9c:
29:d1:68:4c:71:3a:30:cc:41:f7:3e:8e:da:5b:2a:
65:90:cb:52:e6:58:d5:55:75:60:23:f8:73:82:c2:
c8:40:ab:0c:c8:2f:7a:06:3c:fe:43:3c:d9:0e:90:
36:bb:39:e4:2b:1b:bd:aa:c6:5c:e7:0f:2f:1a:d6:
f9:a2:1f:31:e3:bd:55:39:84:c1:ee:f9:f6:47:4e:
75:d3:c5:39:e3:0f:d3:60:6a:0f:94:d2:3c:18:68:
79:97:52:09:f4:3b:d9:b0:26:e9:49:0e:9a:32:00:
82:3c:36:73:2d:1c:1a:08:a5:7d:5d:f4:42:1c:01:
93:b7:49:85:14:77:4f:7c:29:f9:c6:6c:f8:a6:9b:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:F4:B1:A6:BC:3B:2E:C8:E7:CC:72:11:B1:7F:83:5B:58:B8:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc7db900-a43d-3bf8-9e64-ce8d51fad23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:41:75:e9:64:31:30:aa:83:26:e6:bc:f1:7f:3c:6e:f3:79:
ec:76:94:52:88:5c:b1:23:a8:dc:0e:c5:cf:18:36:93:64:46:
be:31:12:4b:cf:8d:a6:56:1a:d1:81:47:09:33:be:dd:ab:5a:
64:62:45:fd:a0:d6:80:60:62:cd:01:f0:f6:00:16:de:54:82:
b7:01:82:54:99:62:6e:1a:e4:55:61:05:5b:de:f0:9d:04:e2:
ff:b4:bf:fb:94:67:b5:20:71:1d:d6:34:04:e4:a8:40:b8:20:
44:46:0f:e9:cf:f7:41:26:4a:50:09:ee:b2:5d:15:2c:65:70:
70:9c:61:a8:25:89:14:70:be:3f:4d:b7:7c:aa:28:77:af:9b:
10:1a:d9:8f:4e:30:38:25:41:19:d3:eb:36:cd:1f:bd:6f:cf:
b2:90:f7:d9:bc:d9:7e:45:1b:c6:ed:fa:5a:5a:61:f6:81:20:
fe:f2:bb:80:ea:c0:62:9b:d1:80:8a:19:d3:41:a8:d2:aa:7a:
6c:6a:89:42:47:a9:4c:98:63:5c:ce:68:fa:06:a8:62:d4:bc:
05:33:33:dd:54:ee:06:7b:ed:64:a9:bf:6a:cf:e6:eb:5d:72:
bb:aa:05:6d:36:26:e4:e9:9b:0a:c7:7c:7d:14:32:51:82:6a:
b4:73:6a:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmuAggxyNolo8MYawwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTUzMWJmMDgtNWYwZS00OTEwLTg1NmYtZDhkYTk4MDY2ZDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT0k+0MTItO4G+kmRFO9FwwRdUB3U+E4SB8a
tSH5YuE9ZyqwI+rPJKjYVm/9f0DfD8JcviMQTkM0W56nLq+s9ae+VVBfzFPlFW72
krnd3zQF9waO+qmKGO6D+Sh0UgYrbtgpRt3sO3KZ6+TfZSjV8rE+Jl2ZfZwp0WhM
cTowzEH3Po7aWyplkMtS5ljVVXVgI/hzgsLIQKsMyC96Bjz+QzzZDpA2uznkKxu9
qsZc5w8vGtb5oh8x471VOYTB7vn2R05108U54w/TYGoPlNI8GGh5l1IJ9DvZsCbp
SQ6aMgCCPDZzLRwaCKV9XfRCHAGTt0mFFHdPfCn5xmz4ppvP3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOa9LGmvDsuyOfMchGxf4NbWLjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZGM3ZGI5MDAtYTQzZC0z
YmY4LTllNjQtY2U4ZDUxZmFkMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NHPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdBdelkMTCqgybmvPF/PG7zeex2lFKIXLEjqNwOxc8YNpNkRr4xEkvP
jaZWGtGBRwkzvt2rWmRiRf2g1oBgYs0B8PYAFt5UgrcBglSZYm4a5FVhBVve8J0E
4v+0v/uUZ7UgcR3WNATkqEC4IERGD+nP90EmSlAJ7rJdFSxlcHCcYagliRRwvj9N
t3yqKHevmxAa2Y9OMDglQRnT6zbNH71vz7KQ99m82X5FG8bt+lpaYfaBIP7yu4Dq
wGKb0YCKGdNBqNKqemxqiUJHqUyYY1zOaPoGqGLUvAUzM91U7gZ77WSpv2rP5utd
cruqBW02JuTpmwrHfH0UMlGCarRzavc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:41 2025 by rpki-client