Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f961571a-ba3e-3df9-9d13-a4fc8e1b80cd.roa
File: f961571a-ba3e-3df9-9d13-a4fc8e1b80cd.roa (raw, json)
Hash identifier: TCTWJ26wxBxUz0ENcomXxmOjlyd7YNU+02Gr6RgBt+I=
Subject key identifier: 35:07:4A:07:D4:4F:11:09:AB:E2:C7:80:D6:95:8E:C7:50:EB:F6:8C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316405DDDCD336B1D08C1E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f961571a-ba3e-3df9-9d13-a4fc8e1b80cd.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 209.139.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:40:5d:dd:cd:33:6b:1d:08:c1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=cbc27e85-2b2b-4ba0-9e9c-dfd5ac20cab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:6c:6f:96:61:68:14:03:49:1f:36:51:5f:
22:7e:f9:b7:ad:b8:1f:1d:9b:2c:79:77:01:fb:4e:
23:a7:a6:31:72:4b:ff:62:4c:72:9b:d5:b5:6d:17:
62:05:71:22:86:0a:8f:2f:ce:16:67:20:fc:28:e7:
72:2e:fc:09:db:c0:6b:30:fe:ca:eb:e5:ac:70:c6:
36:2e:d7:b9:c3:5d:39:48:c9:da:ec:d8:0c:21:28:
b5:5b:90:a6:9f:eb:fc:89:45:57:63:9c:a8:93:7d:
29:35:83:de:23:9c:00:8e:3e:5e:72:12:ff:37:95:
0f:3f:3e:65:50:00:92:b1:6a:7b:2a:d3:97:35:76:
0d:a9:9d:52:01:c6:e7:a8:7e:1a:59:f3:2d:8d:e5:
41:62:9f:d5:bc:f2:a3:be:e4:b8:e0:d2:43:92:f9:
6d:1e:9f:4a:58:c1:17:67:c4:c8:26:c6:c4:f7:98:
bc:0d:13:de:7f:8d:96:54:8f:d0:e6:9d:c3:dd:69:
72:2b:80:f8:c8:0b:c0:96:11:0c:a0:33:d6:5f:bd:
0c:b6:73:33:68:05:3d:ac:7a:ee:a3:e9:a9:2c:e4:
69:6a:ef:ea:2a:ec:d8:f0:56:39:f4:e6:bc:ce:77:
ca:d7:b9:4b:ee:e1:8e:63:f0:57:4d:5b:0e:96:c0:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:4A:07:D4:4F:11:09:AB:E2:C7:80:D6:95:8E:C7:50:EB:F6:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f961571a-ba3e-3df9-9d13-a4fc8e1b80cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:26:79:ed:66:7f:2b:04:b5:55:23:18:93:d6:f1:56:8e:03:
e5:8b:4f:af:65:9c:87:1d:6d:11:b7:46:2d:cd:a1:2a:43:76:
28:2f:5c:72:fa:f4:3f:e4:30:17:b9:1c:8a:11:1e:c1:fd:d4:
a1:c0:5b:37:b4:41:2b:6d:5c:2d:98:b2:cd:b8:ff:69:bd:18:
a3:b1:b9:f9:53:a0:66:36:81:1b:b2:9c:5f:40:95:3a:a0:11:
c7:6c:c6:1e:a4:6f:cc:56:83:21:45:57:b9:c6:ad:36:65:59:
9b:48:6c:83:43:11:a2:aa:c1:03:12:92:5c:56:c3:fd:b7:f8:
fc:cd:02:71:7d:3c:5e:28:ef:44:14:1c:79:08:bd:b6:b1:18:
1f:d4:05:38:83:5a:d0:ff:08:fe:3d:21:be:9c:86:af:6b:64:
e4:49:00:a7:fa:09:81:2d:2a:13:44:80:56:05:53:8b:20:d3:
9e:57:b7:0c:28:bf:be:a9:45:12:cc:42:a4:02:88:e7:d2:1a:
2e:d4:53:e6:bd:ad:85:95:b1:e6:72:5b:2d:67:64:db:de:05:
95:2a:4e:c5:f7:4d:30:81:a6:90:0b:fc:cc:0e:c1:b1:ae:38:
4f:4d:ea:0e:ec:b5:e0:81:c8:0e:5e:f8:8b:d7:60:c5:c8:75:
21:80:a6:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFkBd3c0zax0IweAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2JjMjdlODUtMmIyYi00YmEwLTllOWMtZGZkNWFjMjBjYWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Nsb5ZhaBQDSR82UV8ifvm3rbgfHZsseXcB
+04jp6Yxckv/Ykxym9W1bRdiBXEihgqPL84WZyD8KOdyLvwJ28BrMP7K6+WscMY2
Lte5w105SMna7NgMISi1W5Cmn+v8iUVXY5yok30pNYPeI5wAjj5echL/N5UPPz5l
UACSsWp7KtOXNXYNqZ1SAcbnqH4aWfMtjeVBYp/VvPKjvuS44NJDkvltHp9KWMEX
Z8TIJsbE95i8DRPef42WVI/Q5p3D3WlyK4D4yAvAlhEMoDPWX70MtnMzaAU9rHru
o+mpLORpau/qKuzY8FY59Oa8znfK17lL7uGOY/BXTVsOlsBnmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUHSgfUTxEJq+LHgNaVjsdQ6/aMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjk2MTU3MWEtYmEzZS0z
ZGY5LTlkMTMtYTRmYzhlMWI4MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0YvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkmee1mfysEtVUjGJPW8VaOA+WLT69lnIcdbRG3Ri3NoSpDdigvXHL6
9D/kMBe5HIoRHsH91KHAWze0QSttXC2Yss24/2m9GKOxuflToGY2gRuynF9AlTqg
Ecdsxh6kb8xWgyFFV7nGrTZlWZtIbINDEaKqwQMSklxWw/23+PzNAnF9PF4o70QU
HHkIvbaxGB/UBTiDWtD/CP49Ib6chq9rZORJAKf6CYEtKhNEgFYFU4sg055Xtwwo
v76pRRLMQqQCiOfSGi7UU+a9rYWVseZyWy1nZNveBZUqTsX3TTCBppAL/MwOwbGu
OE9N6g7steCByA5e+IvXYMXIdSGApu0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:51:46 2025 by rpki-client