Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f4f94e41-9ac5-3234-b1b1-09e01762e1ee.roa
File: f4f94e41-9ac5-3234-b1b1-09e01762e1ee.roa (raw, json)
Hash identifier: Bv75YzKO6Du7YhjbI3F9nETfFmlZCApcrjgMsaq2pKo=
Subject key identifier: AD:02:B9:4A:1B:42:4E:B2:F9:10:19:E6:A4:5F:4D:6E:CC:9F:83:F5
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858480BDA5E8E7FEAE0F98F39E020
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f4f94e41-9ac5-3234-b1b1-09e01762e1ee.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 54203
IP address blocks: 173.255.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:5e:8e:7f:ea:e0:f9:8f:39:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=616d34a1-773d-4cda-86c8-8ccd0893df1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:12:48:9e:13:d7:e6:95:39:84:64:86:d9:
eb:a4:76:90:cc:e0:60:b0:db:c9:48:27:a8:6a:38:
1a:44:a0:f8:d8:c5:d5:42:4e:ed:2f:d8:c5:12:4b:
23:17:f0:26:7b:33:8f:a9:7d:e0:9e:0e:32:1e:df:
6f:a8:da:d2:ea:c4:53:8b:b2:d3:1f:1b:d1:88:62:
03:e0:ae:c0:d6:3d:2f:db:22:95:b2:a5:24:15:e0:
12:28:57:96:6c:ed:f2:c3:a5:ac:02:24:b3:8b:44:
6e:6e:88:37:c5:8a:31:61:6c:78:22:86:4e:3a:d4:
8a:18:7b:21:a9:a3:32:4d:c8:b4:51:b1:6a:73:d6:
13:41:cb:32:de:c8:cd:57:67:4e:1c:cb:dc:e8:00:
2d:70:96:ef:77:f2:28:98:11:47:d9:49:94:43:e9:
1c:e4:22:bc:dc:f1:df:80:b0:6f:1b:8a:a3:8e:d5:
96:c0:28:a9:9e:5e:23:07:b2:5b:cb:a5:4a:1c:1d:
15:27:dd:0e:d1:a0:79:e5:3d:e3:5e:d6:be:f2:78:
f3:08:89:2c:b0:40:10:bc:76:a7:f1:d2:0b:80:6c:
9d:3b:d9:e8:62:e8:d5:9c:c2:93:d4:74:fb:d1:ef:
fd:59:7b:26:e1:a5:14:15:eb:5c:51:9c:3d:52:ad:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:B9:4A:1B:42:4E:B2:F9:10:19:E6:A4:5F:4D:6E:CC:9F:83:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f4f94e41-9ac5-3234-b1b1-09e01762e1ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f9:60:91:49:70:9d:fc:15:ef:1a:cc:ff:35:14:f0:95:de:
41:44:52:21:b5:9c:b9:be:98:1c:df:c9:f5:8b:2c:1c:0b:ad:
2e:9f:c3:44:94:f2:ac:eb:04:df:5b:ff:19:1d:26:9d:0f:28:
7c:4a:95:e5:55:cd:48:91:09:00:36:15:b6:cc:8d:98:03:62:
37:99:e4:a0:b0:61:f3:5b:72:e6:76:4e:c4:8d:c3:6c:81:be:
8a:c7:db:82:62:fc:76:59:69:40:8f:82:cc:bf:42:3c:af:d8:
67:e7:6e:52:19:a0:17:1d:99:c1:d0:7f:06:d3:eb:2a:20:ca:
1f:e9:7d:44:17:35:51:6c:3c:7e:b0:1c:88:1d:aa:13:ae:6a:
30:00:02:3d:0f:16:31:06:15:00:00:c7:71:9e:e9:11:42:2a:
9a:ef:ae:70:93:6b:3a:c7:89:32:63:14:4a:25:da:6e:52:01:
fc:2f:7d:d8:b8:f3:67:6a:75:5b:5b:99:b7:fa:ac:d9:73:ad:
bf:f0:7f:75:d2:a1:92:8e:f9:b5:24:22:3f:c6:70:f5:55:56:
2f:13:7a:a1:84:bb:80:dd:1a:61:7d:2f:55:42:98:21:e6:76:
e0:d2:93:1c:b8:a1:e9:dc:32:6a:eb:ae:de:50:cf:7b:f2:94:
21:c6:e8:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2l6Of+rg+Y854CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
NjE2ZDM0YTEtNzczZC00Y2RhLTg2YzgtOGNjZDA4OTNkZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwSSJ4T1+aVOYRkhtnrpHaQzOBgsNvJSCeo
ajgaRKD42MXVQk7tL9jFEksjF/AmezOPqX3gng4yHt9vqNrS6sRTi7LTHxvRiGID
4K7A1j0v2yKVsqUkFeASKFeWbO3yw6WsAiSzi0Rubog3xYoxYWx4IoZOOtSKGHsh
qaMyTci0UbFqc9YTQcsy3sjNV2dOHMvc6AAtcJbvd/IomBFH2UmUQ+kc5CK83PHf
gLBvG4qjjtWWwCipnl4jB7Jby6VKHB0VJ90O0aB55T3jXta+8njzCIkssEAQvHan
8dILgGydO9noYujVnMKT1HT70e/9WXsm4aUUFetcUZw9Uq0yiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0CuUobQk6y+RAZ5qRfTW7Mn4P1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZjRmOTRlNDEtOWFjNS0z
MjM0LWIxYjEtMDllMDE3NjJlMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACD5YJFJcJ38Fe8azP81FPCV3kFEUiG1nLm+mBzfyfWLLBwLrS6fw0SU
8qzrBN9b/xkdJp0PKHxKleVVzUiRCQA2FbbMjZgDYjeZ5KCwYfNbcuZ2TsSNw2yB
vorH24Ji/HZZaUCPgsy/Qjyv2GfnblIZoBcdmcHQfwbT6yogyh/pfUQXNVFsPH6w
HIgdqhOuajAAAj0PFjEGFQAAx3Ge6RFCKprvrnCTazrHiTJjFEol2m5SAfwvfdi4
82dqdVtbmbf6rNlzrb/wf3XSoZKO+bUkIj/GcPVVVi8TeqGEu4DdGmF9L1VCmCHm
duDSkxy4oencMmrrrt5Qz3vylCHG6H0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:56 2025 by rpki-client