Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/ac32b07a-072f-3398-bf1c-2ad0fec9f2c6.roa
File: ac32b07a-072f-3398-bf1c-2ad0fec9f2c6.roa (raw, json)
Hash identifier: CnXxvoboDQEowa/F9bwV7tyoH9SBUaGz+D/u0ru0EUQ=
Subject key identifier: 9E:B2:A3:20:0C:38:2E:5F:63:54:2C:F0:4E:4A:23:06:90:10:28:5B
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F43285843789A804D143193FE96AEB580
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/ac32b07a-072f-3398-bf1c-2ad0fec9f2c6.roa
Signing time: Sat 07 Oct 2023 13:00:25 +0000
ROA not before: Sat 07 Oct 2023 13:00:25 +0000
ROA not after: Fri 05 Jan 2024 14:00:25 +0000
asID: 209
IP address blocks: 209.16.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:78:9a:80:4d:14:31:93:fe:96:ae:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Oct 7 13:00:25 2023 GMT
Not After : Jan 5 14:00:25 2024 GMT
Subject: CN=335b08a1-0406-4aec-99fc-57bd520176c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:da:15:4f:b0:2e:e5:5e:c0:7a:7a:54:28:16:
0d:92:d7:e7:ed:67:6c:73:79:86:ee:ff:13:e2:b5:
7f:aa:c9:b9:7a:f5:2c:e3:38:a3:70:49:75:a0:8f:
ac:d8:09:b9:18:b3:ee:f4:21:0a:87:25:dd:3a:fe:
e6:99:80:b9:3f:08:88:84:e3:18:16:51:5d:df:46:
ca:f4:26:80:5e:f1:2b:ea:5c:25:b2:b8:25:ec:cc:
4e:fe:e8:52:05:4a:7e:96:f7:7c:af:72:ba:87:71:
08:93:a7:f6:4c:79:ad:f5:05:f3:43:ca:65:61:5c:
63:a8:78:ff:8d:05:51:ca:1e:db:9a:8a:6d:d5:48:
6c:83:dd:38:f5:8f:6f:cc:49:1f:96:b5:ee:47:d9:
33:02:45:d5:90:5f:10:28:bd:82:d7:75:ea:fb:39:
ff:5e:44:01:56:a0:b8:6e:39:ad:3e:4d:85:0a:d6:
80:66:69:40:f5:fe:61:67:2c:fc:f0:46:90:4f:e4:
7c:d4:4f:f7:77:a0:fd:cb:8b:ce:d8:72:af:9a:0e:
48:8a:9f:87:f4:b5:85:8a:a1:c2:4d:37:da:a9:f4:
e6:b5:7b:d8:ee:a1:ed:04:48:51:3a:3a:63:bc:a4:
b5:79:ef:b9:2e:dc:ce:08:cb:27:41:35:31:9a:b4:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B2:A3:20:0C:38:2E:5F:63:54:2C:F0:4E:4A:23:06:90:10:28:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/ac32b07a-072f-3398-bf1c-2ad0fec9f2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
209.16.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:9f:5c:dc:a6:64:a4:c0:87:0b:48:f9:aa:35:68:5c:c8:bc:
59:6b:23:16:54:70:e5:d1:6a:b9:cd:a3:ac:9d:dc:ab:39:85:
54:ff:49:f9:20:45:4a:ca:da:11:0f:8b:bd:f5:21:93:99:9a:
94:f3:d1:86:ec:52:0e:01:a2:ca:02:8a:91:7e:fd:ed:a0:5c:
8d:25:9b:b3:f3:35:4e:e5:2b:f6:47:66:97:4f:6e:e5:d8:af:
21:5b:0b:98:0a:79:6a:fe:e6:d2:03:5a:ea:9e:c3:ae:36:79:
73:c4:2b:82:e8:24:48:fd:e8:dc:de:67:3a:73:83:6f:87:31:
9b:c1:40:0b:60:2e:d7:b2:ab:c8:7f:13:9b:92:ee:21:d3:4e:
77:94:b4:dd:3e:c2:e7:35:19:1a:a4:bc:ca:b5:43:cc:d9:9b:
60:dc:00:19:93:fd:70:ae:07:9c:ff:f9:aa:a1:f1:11:11:e3:
8a:e6:03:29:f9:4a:db:48:e2:c6:fa:6a:96:d1:20:4e:09:dd:
04:9f:af:bb:55:68:ef:7a:4c:f0:25:4b:a0:44:f1:ff:90:f2:
62:e7:cf:bd:7b:18:97:c0:e1:4a:a2:39:65:74:f2:87:97:4a:
a4:5c:b3:50:7b:12:e8:2f:39:c0:c6:5b:5d:23:13:aa:d3:1a:
72:56:e1:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEN4moBNFDGT/pautYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTIzMTAwNzEzMDAyNVoXDTI0MDEwNTE0MDAyNVowLzEtMCsGA1UEAxMk
MzM1YjA4YTEtMDQwNi00YWVjLTk5ZmMtNTdiZDUyMDE3NmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9doVT7Au5V7AenpUKBYNktfn7Wdsc3mG7v8T
4rV/qsm5evUs4zijcEl1oI+s2Am5GLPu9CEKhyXdOv7mmYC5PwiIhOMYFlFd30bK
9CaAXvEr6lwlsrgl7MxO/uhSBUp+lvd8r3K6h3EIk6f2THmt9QXzQ8plYVxjqHj/
jQVRyh7bmopt1Uhsg9049Y9vzEkflrXuR9kzAkXVkF8QKL2C13Xq+zn/XkQBVqC4
bjmtPk2FCtaAZmlA9f5hZyz88EaQT+R81E/3d6D9y4vO2HKvmg5Iip+H9LWFiqHC
TTfaqfTmtXvY7qHtBEhROjpjvKS1ee+5LtzOCMsnQTUxmrRycwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6yoyAMOC5fY1Qs8E5KIwaQEChbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWMzMmIwN2EtMDcyZi0z
Mzk4LWJmMWMtMmFkMGZlYzlmMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RDSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqfXNymZKTAhwtI+ao1aFzIvFlrIxZUcOXRarnNo6yd3Ks5hVT/Sfkg
RUrK2hEPi731IZOZmpTz0YbsUg4BosoCipF+/e2gXI0lm7PzNU7lK/ZHZpdPbuXY
ryFbC5gKeWr+5tIDWuqew642eXPEK4LoJEj96NzeZzpzg2+HMZvBQAtgLteyq8h/
E5uS7iHTTneUtN0+wuc1GRqkvMq1Q8zZm2DcABmT/XCuB5z/+aqh8RER44rmAyn5
SttI4sb6apbRIE4J3QSfr7tVaO96TPAlS6BE8f+Q8mLnz717GJfA4UqiOWV08oeX
SqRcs1B7EugvOcDGW10jE6rTGnJW4cU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:36 2025 by rpki-client