Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/68088004-a42d-31a1-b263-b1ea5cfc291d.roa
File: 68088004-a42d-31a1-b263-b1ea5cfc291d.roa (raw, json)
Hash identifier: jxahYbnHYtTWhVFo8wpZ+hqCaY5z6dHVjEJKT+NFK4g=
Subject key identifier: 3F:AD:DB:CE:DF:F8:DA:32:51:3B:10:92:A6:7A:1A:65:3C:49:86:FB
Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa
Certificate serial: 010D0C9F432858484B9F2145496963AB617A5C00
Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/68088004-a42d-31a1-b263-b1ea5cfc291d.roa
Signing time: Sun 22 Dec 2024 22:13:08 +0000
ROA not before: Sun 22 Dec 2024 22:13:08 +0000
ROA not after: Sat 22 Mar 2025 21:13:08 +0000
asID: 4637
IP address blocks: 206.218.248.0/24 maxlen: 24
206.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4b:9f:21:45:49:69:63:ab:61:7a:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa
Validity
Not Before: Dec 22 22:13:08 2024 GMT
Not After : Mar 22 21:13:08 2025 GMT
Subject: CN=1d1c3398-699f-4487-b813-e595004f41ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:34:87:38:e8:16:52:01:25:ce:61:4f:33:
e6:1f:1e:57:d7:0e:65:7d:43:cb:c7:8f:3d:79:d1:
24:2a:1e:1f:c3:ab:5a:81:0a:bd:32:ca:6c:e7:ce:
4d:7b:e6:c5:46:28:a8:e9:1b:20:14:75:ec:d2:cb:
b5:ce:d9:f5:7e:1f:39:b5:c6:51:e8:bf:a7:54:69:
72:d1:20:ea:98:59:4b:71:ae:c8:64:ae:c5:9c:83:
20:c1:7e:fb:ec:6a:6c:e6:d8:23:3c:02:5c:29:f5:
8e:10:7d:f6:e5:32:ab:7d:14:54:c3:fc:f3:da:ab:
90:44:ad:d8:b0:6c:27:8d:8c:0e:1e:a5:5d:c8:b7:
97:d3:3c:31:5d:c4:25:f0:ed:5f:f0:77:df:0f:d6:
c5:2f:c4:36:2b:3a:2b:66:e9:9d:9c:28:17:7e:4f:
77:ad:b5:63:d3:a6:05:b0:79:47:c4:19:45:6f:d2:
df:b9:05:71:ad:85:97:6d:74:a7:48:98:42:68:cf:
e1:97:cd:87:b6:1d:20:f9:2c:88:9b:95:97:28:5b:
06:a7:52:87:91:9f:58:6b:8f:ca:7d:45:e2:2f:98:
ee:30:e1:29:f9:4e:b3:3a:07:1d:57:0a:4b:fb:24:
f6:01:dd:0e:56:30:7b:bf:0f:7d:8c:87:2c:cc:08:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AD:DB:CE:DF:F8:DA:32:51:3B:10:92:A6:7A:1A:65:3C:49:86:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/68088004-a42d-31a1-b263-b1ea5cfc291d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl
X509v3 Authority Key Identifier:
keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
sbgp-ipAddrBlock: critical
IPv4:
206.218.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:03:96:44:26:dd:02:6f:aa:a1:e9:f7:6a:5a:6d:5a:4b:eb:
f8:67:9b:8c:39:57:ff:67:04:46:44:57:d5:7e:61:ee:a4:d3:
15:1b:5f:71:f3:70:d1:47:03:3d:b1:9a:e5:b6:76:74:22:90:
bf:8e:95:90:23:bb:ed:f1:56:e0:3d:9d:96:24:a2:b3:55:c2:
02:8d:87:77:21:fc:b4:6a:c3:a8:8d:cf:74:99:8a:62:bc:64:
ff:56:35:24:c9:22:29:c1:cc:ed:79:41:c6:57:17:08:a6:db:
4e:b7:cf:2c:fb:02:c7:1d:dc:67:c0:1b:47:67:cb:cd:01:08:
0a:62:b8:9b:ad:54:43:b0:b9:1a:80:e6:dc:ec:8f:1f:8d:72:
29:c5:e8:d8:a8:2a:6b:2c:0f:ec:8d:2d:b9:ba:08:58:29:19:
6a:fd:84:83:86:18:9a:f1:d5:01:a5:49:1a:5b:95:de:33:7d:
d0:c2:ca:ac:d0:8e:cd:a4:d3:6d:3a:f6:d5:78:d4:b9:05:ff:
4f:e0:56:00:90:0b:74:21:9c:aa:82:92:69:f8:78:eb:76:ff:
ca:c9:12:1f:1d:83:f6:ca:7d:d4:91:e1:ed:e3:1c:27:38:8c:
9d:38:25:96:02:bb:59:57:fa:16:e1:0e:04:7b:d8:0b:53:68:
03:3e:d3:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhLnyFFSWljq2F6XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk
N2FhMB4XDTI0MTIyMjIyMTMwOFoXDTI1MDMyMjIxMTMwOFowLzEtMCsGA1UEAxMk
MWQxYzMzOTgtNjk5Zi00NDg3LWI4MTMtZTU5NTAwNGY0MWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yc0hzjoFlIBJc5hTzPmHx5X1w5lfUPLx489
edEkKh4fw6tagQq9Msps585Ne+bFRiio6RsgFHXs0su1ztn1fh85tcZR6L+nVGly
0SDqmFlLca7IZK7FnIMgwX777Gps5tgjPAJcKfWOEH325TKrfRRUw/zz2quQRK3Y
sGwnjYwOHqVdyLeX0zwxXcQl8O1f8HffD9bFL8Q2KzorZumdnCgXfk93rbVj06YF
sHlHxBlFb9LfuQVxrYWXbXSnSJhCaM/hl82Hth0g+SyIm5WXKFsGp1KHkZ9Ya4/K
fUXiL5juMOEp+U6zOgcdVwpL+yT2Ad0OVjB7vw99jIcszAhVpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+t287f+NoyUTsQkqZ6GmU8SYb7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1
OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvNjgwODgwMDQtYTQyZC0z
MWExLWIyNjMtYjFlYTVjZmMyOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh
ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk
ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh
Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcDlkQm3QJvqqHp92pabVpL6/hnm4w5V/9nBEZEV9V+Ye6k0xUbX3Hz
cNFHAz2xmuW2dnQikL+OlZAju+3xVuA9nZYkorNVwgKNh3ch/LRqw6iNz3SZimK8
ZP9WNSTJIinBzO15QcZXFwim2063zyz7Ascd3GfAG0dny80BCApiuJutVEOwuRqA
5tzsjx+NcinF6NioKmssD+yNLbm6CFgpGWr9hIOGGJrx1QGlSRpbld4zfdDCyqzQ
js2k02069tV41LkF/0/gVgCQC3QhnKqCkmn4eOt2/8rJEh8dg/bKfdSR4e3jHCc4
jJ04JZYCu1lX+hbhDgR72AtTaAM+0wI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:40 2025 by rpki-client