Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a5b1810-9336-34bc-b525-5780d0fe145e.roa
File: 3a5b1810-9336-34bc-b525-5780d0fe145e.roa (raw, json)
Hash identifier: fq+RRUlZJj2uiHiJ6PjLX/Bs2+35zc2o2KYSxOV3NhU=
Subject key identifier: 92:0D:64:2A:4A:E2:C2:E5:39:03:9A:3E:76:66:33:CA:13:10:92:C1
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285842FB2650C05DD809560E472700
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a5b1810-9336-34bc-b525-5780d0fe145e.roa
Signing time: Wed 23 Aug 2023 14:30:22 +0000
ROA not before: Wed 23 Aug 2023 14:30:22 +0000
ROA not after: Tue 21 Nov 2023 15:30:22 +0000
asID: 20940
IP address blocks: 2001:418:1430:100::/56 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:fb:26:50:c0:5d:d8:09:56:0e:47:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Aug 23 14:30:22 2023 GMT
Not After : Nov 21 15:30:22 2023 GMT
Subject: CN=0d4bad38-7f5a-41c0-bd0a-1f75b0c41313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:66:32:29:e7:89:b7:f9:48:18:90:7b:80:
21:c0:b7:c6:d8:cb:da:a0:72:95:85:6c:8d:59:d3:
9d:9e:4b:dc:4a:ce:9c:a5:2a:12:8a:29:04:0f:af:
c8:27:81:75:fc:c4:a2:cb:86:47:93:b9:64:cd:9b:
ae:7a:14:ac:a6:8a:87:a1:d7:c9:d8:72:eb:89:2b:
0a:90:4e:9b:aa:69:a2:d0:f0:7d:05:ee:78:89:9c:
65:1b:77:e3:83:d2:29:79:cf:b4:87:4a:ca:45:d4:
f5:41:d8:c9:0b:9f:3a:e1:5b:a1:a0:98:81:85:ca:
86:8b:9a:fd:be:a5:76:81:38:8f:bc:fd:85:8c:4a:
7f:ae:8f:45:19:e1:29:cf:e9:c3:c7:e2:7f:6a:d0:
9c:df:d8:9c:d5:e2:9d:04:fc:a0:aa:ac:36:cc:42:
63:7c:79:9c:15:31:ea:f5:cc:4f:57:05:f6:4c:bc:
28:43:ac:8d:e5:55:77:c8:ad:4d:cc:ff:21:69:1f:
30:cd:67:72:2a:38:63:7b:66:49:60:ae:b0:d1:3f:
5c:dc:2b:f1:5f:dc:de:e2:55:0f:b5:67:e0:6b:33:
da:62:9f:ae:f9:ee:71:e0:dc:f7:cb:c4:01:ee:cb:
ee:58:a0:63:c2:46:7f:0c:b4:90:24:ea:6e:df:65:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:64:2A:4A:E2:C2:E5:39:03:9A:3E:76:66:33:CA:13:10:92:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a5b1810-9336-34bc-b525-5780d0fe145e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:1430:100::/56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:23:15:45:d7:11:c7:c9:06:71:78:6a:68:f2:7d:fc:9a:b7:
ce:9b:20:76:ae:74:33:b9:77:7b:cb:c0:4b:33:27:bf:62:1d:
7a:ea:6d:44:83:ca:da:d0:7e:a4:7c:b1:b4:d2:29:ab:68:a7:
da:32:d6:de:04:1a:16:fc:6d:1f:cc:40:e8:46:24:5a:57:ba:
26:ef:b2:9c:d7:26:d2:b1:f4:ab:f6:f5:cc:27:42:72:30:88:
7b:a3:5f:5a:61:e0:23:46:06:fd:f8:96:d2:fc:0c:d1:d4:55:
18:6c:9d:f7:8d:a1:1d:6c:da:a1:ab:d4:85:a9:02:5f:4e:ed:
22:f4:68:b8:a7:15:e1:f5:e9:88:73:66:73:77:8a:cc:0f:10:
0a:36:bc:c4:35:6e:f3:13:25:d1:a4:a1:1a:49:6b:ab:f2:04:
d6:a9:34:f2:09:c1:80:65:3f:4b:bb:f6:56:00:06:bc:b6:fa:
47:d3:5e:27:c4:6c:e9:6d:67:80:db:22:72:dc:db:96:75:7d:
07:a0:2b:a3:1a:56:fe:58:56:ae:3f:01:2d:17:23:e9:ef:ab:
e6:8c:cd:35:b1:e9:f8:b0:e9:93:97:c5:34:2b:fd:79:13:5f:
fc:06:77:ad:ad:b2:96:55:80:fb:aa:f2:a6:55:a7:3a:08:f7:
7f:fa:6a:b9
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEL7JlDAXdgJVg5HJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTIzMDgyMzE0MzAyMloXDTIzMTEyMTE1MzAyMlowLzEtMCsGA1UEAxMk
MGQ0YmFkMzgtN2Y1YS00MWMwLWJkMGEtMWY3NWIwYzQxMzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk9mMinnibf5SBiQe4AhwLfG2MvaoHKVhWyN
WdOdnkvcSs6cpSoSiikED6/IJ4F1/MSiy4ZHk7lkzZuuehSspoqHodfJ2HLriSsK
kE6bqmmi0PB9Be54iZxlG3fjg9Ipec+0h0rKRdT1QdjJC5864VuhoJiBhcqGi5r9
vqV2gTiPvP2FjEp/ro9FGeEpz+nDx+J/atCc39ic1eKdBPygqqw2zEJjfHmcFTHq
9cxPVwX2TLwoQ6yN5VV3yK1NzP8haR8wzWdyKjhje2ZJYK6w0T9c3CvxX9ze4lUP
tWfgazPaYp+u+e5x4Nz3y8QB7svuWKBjwkZ/DLSQJOpu32U+fwIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFJINZCpK4sLlOQOaPnZmM8oTEJLBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2E1YjE4MTAtOTMzNi0z
NGJjLWI1MjUtNTc4MGQwZmUxNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAEEGBQw
ATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQCcIxVF1xHHyQZxeGpo8n38mrfOmyB2rnQzuXd7y8BLMye/Yh16
6m1Eg8ra0H6kfLG00imraKfaMtbeBBoW/G0fzEDoRiRaV7om77Kc1ybSsfSr9vXM
J0JyMIh7o19aYeAjRgb9+JbS/AzR1FUYbJ33jaEdbNqhq9SFqQJfTu0i9Gi4pxXh
9emIc2Zzd4rMDxAKNrzENW7zEyXRpKEaSWur8gTWqTTyCcGAZT9Lu/ZWAAa8tvpH
014nxGzpbWeA2yJy3NuWdX0HoCujGlb+WFauPwEtFyPp76vmjM01sen4sOmTl8U0
K/15E1/8BnetrbKWVYD7qvKmVac6CPd/+mq5
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:59 2025 by rpki-client