Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8338a63-420b-392a-956b-7dfec5af4381.roa
File: f8338a63-420b-392a-956b-7dfec5af4381.roa (raw, json)
Hash identifier: a40mexRwCrMQYooFv9SuiczL10QJ9lvdn2gQRq3F96I=
Subject key identifier: 97:95:94:D4:DB:C3:9E:05:D7:31:81:F4:12:F3:E2:2B:E0:34:25:D5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858468D24454C5C7E5997C0CEB440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8338a63-420b-392a-956b-7dfec5af4381.roa
Signing time: Sun 14 Jul 2024 12:00:00 +0000
ROA not before: Sun 14 Jul 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 162.158.120.0/24 maxlen: 24
162.158.121.0/24 maxlen: 24
162.158.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8d:24:45:4c:5c:7e:59:97:c0:ce:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 14 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=bdbec517-301f-482c-9b2f-c28c4b55cd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:e1:a2:64:1c:1d:fe:81:6d:43:ad:f8:f7:
f8:a6:52:14:08:02:91:97:f2:40:9a:f7:5f:82:78:
0b:5e:65:4f:aa:a5:b9:42:eb:65:15:55:b5:35:eb:
14:6f:dc:d9:60:5f:b1:f7:67:57:be:48:8e:c8:88:
e9:dd:fa:9f:9b:a6:6b:10:25:09:40:44:e3:32:b0:
cd:a5:79:39:e5:d5:2f:5e:63:cf:5d:e3:0f:f5:e8:
a3:98:5e:bd:5f:3c:1e:d4:ab:8d:0c:93:fa:3d:6a:
42:c2:e2:de:3b:39:51:aa:6b:30:3a:a6:a7:8b:61:
e8:f9:f4:8f:ee:7e:69:6d:7b:f1:02:6d:6f:4c:dd:
de:a4:5b:36:c9:79:06:80:43:1a:3a:07:89:5f:25:
1d:17:e1:5a:e5:3e:25:46:f8:ce:a9:3e:b9:34:df:
b4:7f:e8:7d:d3:f2:c9:a6:45:7e:44:43:2a:cc:05:
fe:2a:77:ee:b2:d1:f1:0f:69:9e:d7:e2:4a:75:7c:
a9:e3:b4:d8:f2:a8:a1:05:8e:8d:c3:ad:29:40:01:
d2:9f:16:d6:d2:2f:3c:ae:ad:48:86:05:c8:9b:05:
7a:5a:e7:5a:48:6b:06:7e:bb:ce:ca:fd:2d:b6:b3:
96:31:07:1c:27:6a:0b:e1:95:77:77:ea:d2:e3:a5:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:94:D4:DB:C3:9E:05:D7:31:81:F4:12:F3:E2:2B:E0:34:25:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8338a63-420b-392a-956b-7dfec5af4381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.120.0-162.158.122.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:45:79:04:4c:46:18:40:c0:c7:a3:0e:d8:1d:1c:4a:9d:db:
69:a2:2d:1f:55:64:0f:30:72:ca:c5:00:d9:62:52:a3:cd:2d:
73:cb:9f:2b:44:82:ce:57:e5:30:ba:2b:61:d1:a2:c7:14:d3:
19:43:8e:ab:32:e9:d0:94:14:8b:fa:81:d6:19:16:80:df:1c:
7c:33:fc:ec:bb:da:21:ee:62:cd:83:a9:1f:1e:ca:6f:40:a3:
19:f4:80:b9:f0:33:1f:c4:f0:ab:50:58:a9:f3:c8:6a:ea:11:
6e:f7:36:d6:5f:18:34:e4:d3:34:69:5f:3c:a9:6d:7a:2a:8f:
f4:1b:e4:09:61:75:2b:12:54:3e:32:c6:51:3d:90:ae:a5:26:
e6:e9:16:15:f0:c5:0f:43:4f:bc:56:34:d8:61:36:22:c2:b9:
b7:7e:25:8b:bd:ec:ed:b6:f7:12:f2:10:cb:f1:c7:ca:b7:36:
4c:ee:9d:6c:2f:41:80:45:d4:2a:48:01:ad:33:34:4e:9b:93:
54:c3:b2:2f:f2:c5:ac:b2:44:e8:a1:6f:33:66:a5:61:f5:49:
cf:98:fc:19:cd:30:9c:3f:7b:30:80:1d:7d:2b:f9:d0:11:21:
7d:8d:5a:04:0e:4f:91:ff:d0:bf:d2:e5:39:9b:ae:b2:10:99:
f8:f4:2c:33
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEaNJEVMXH5Zl8DOtEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDcxNDEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YmRiZWM1MTctMzAxZi00ODJjLTliMmYtYzI4YzRiNTVjZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssfhomQcHf6BbUOt+Pf4plIUCAKRl/JAmvdf
gngLXmVPqqW5QutlFVW1NesUb9zZYF+x92dXvkiOyIjp3fqfm6ZrECUJQETjMrDN
pXk55dUvXmPPXeMP9eijmF69Xzwe1KuNDJP6PWpCwuLeOzlRqmswOqani2Ho+fSP
7n5pbXvxAm1vTN3epFs2yXkGgEMaOgeJXyUdF+Fa5T4lRvjOqT65NN+0f+h90/LJ
pkV+REMqzAX+KnfustHxD2me1+JKdXyp47TY8qihBY6Nw60pQAHSnxbW0i88rq1I
hgXImwV6WudaSGsGfrvOyv0ttrOWMQccJ2oL4ZV3d+rS46Vg8wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJeVlNTbw54F1zGB9BLz4ivgNCXVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjgzMzhhNjMtNDIwYi0z
OTJhLTk1NmItN2RmZWM1YWY0MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOinngD
BACinnowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlkV5BExGGEDAx6MO2B0cSp3baaItH1VkDzByysUA2WJS
o80tc8ufK0SCzlflMLorYdGixxTTGUOOqzLp0JQUi/qB1hkWgN8cfDP87LvaIe5i
zYOpHx7Kb0CjGfSAufAzH8Twq1BYqfPIauoRbvc21l8YNOTTNGlfPKlteiqP9Bvk
CWF1KxJUPjLGUT2QrqUm5ukWFfDFD0NPvFY02GE2IsK5t34li73s7bb3EvIQy/HH
yrc2TO6dbC9BgEXUKkgBrTM0TpuTVMOyL/LFrLJE6KFvM2alYfVJz5j8Gc0wnD97
MIAdfSv50BEhfY1aBA5Pkf/Qv9LlOZuushCZ+PQsMw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:06:04 2025 by rpki-client