Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0542009a-e169-329a-9907-03d90de26a10.roa
File: 0542009a-e169-329a-9907-03d90de26a10.roa (raw, json)
Hash identifier: B4heN6VLSi9XPGVGQPEYPWE7GHFtE/V+X/uvZjD3KfA=
Subject key identifier: 73:CD:FD:94:90:42:90:69:13:C1:74:CB:06:3C:D1:E6:68:FF:71:2A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289B0A45A164757785D3400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0542009a-e169-329a-9907-03d90de26a10.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 173.191.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:b0:a4:5a:16:47:57:78:5d:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=fcad5789-745f-417a-abd8-850efa0b46d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:ca:01:a3:89:86:81:ab:82:4f:53:f1:9a:
35:c5:79:8f:cd:8c:44:f1:0c:a5:76:ab:5f:c3:37:
7c:2f:31:67:45:d7:b2:17:bb:11:68:88:b7:55:2e:
00:18:27:a2:27:04:15:13:38:f9:12:f5:40:4b:45:
f4:1c:1b:36:ff:d2:09:32:1e:ad:18:32:85:b3:f5:
62:6a:95:98:42:ac:9b:4b:e0:e2:72:55:7f:72:77:
df:30:98:bc:23:ec:e4:5c:61:fc:7c:d5:d4:22:5f:
da:10:cb:32:1e:9f:3d:94:fc:e8:31:9a:f0:ee:73:
2c:55:67:3a:76:ab:07:5b:39:2c:33:a0:26:4e:33:
31:3c:0f:1b:49:49:be:29:30:f3:e2:32:a5:04:e1:
54:a2:2a:19:5c:72:3c:63:f4:e0:86:ed:23:ad:ea:
19:1d:1a:2d:8e:03:28:79:25:f5:95:7b:8e:07:0e:
fc:a8:6d:9b:4d:d4:03:4d:fd:bf:16:8c:3d:15:90:
52:96:68:67:69:69:2e:a7:eb:13:b0:93:3f:47:c2:
bb:89:0d:18:ef:4f:dc:b8:de:89:29:28:e8:86:4b:
b6:11:1b:82:2d:4d:5d:a8:53:ad:71:78:d8:ff:c9:
fa:df:19:bc:04:85:fb:bd:6a:00:9d:30:c9:ac:e7:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CD:FD:94:90:42:90:69:13:C1:74:CB:06:3C:D1:E6:68:FF:71:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0542009a-e169-329a-9907-03d90de26a10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.191.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:94:cd:bd:30:cb:0e:86:a5:32:a6:c0:e9:73:9c:df:94:80:
31:12:9b:93:e9:5b:9c:34:3f:e1:92:f3:e4:53:15:c0:7c:bb:
e5:e1:ff:0e:28:d5:98:0d:fa:ff:4a:2a:8d:12:91:de:82:fe:
c9:d7:c3:d7:0a:3d:05:bb:c3:ee:3e:4d:02:2f:ad:30:bd:a5:
b3:9e:d7:ee:04:35:fa:ba:5c:cc:99:38:54:d1:60:fe:f1:f1:
69:ff:16:c0:9c:cc:b9:c4:90:4f:d5:bf:36:7c:77:38:19:86:
6a:36:e7:ca:37:55:d6:4c:d5:3c:5a:11:50:64:a1:8c:ea:f4:
03:05:e3:f9:80:eb:13:df:5b:ce:1d:30:4d:c8:56:fd:ba:e5:
58:13:8f:95:c1:53:1b:9e:a4:98:9f:3e:c8:e1:98:44:e1:a7:
93:d3:a8:4b:19:1a:07:90:b2:66:c7:39:44:f8:ab:8d:81:38:
ff:40:c7:e4:22:ce:ff:33:d0:df:a0:a4:77:33:91:26:d2:d5:
33:a1:af:8f:c6:00:35:75:82:06:ef:88:79:c9:b3:a0:38:37:
a0:0c:ff:c9:41:a5:36:6c:3b:55:af:24:01:19:0c:0b:c9:23:
02:f3:01:51:c1:f8:c2:a5:5a:53:09:c0:16:37:4f:75:7f:88:
7e:0a:a2:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyibCkWhZHV3hdNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
ZmNhZDU3ODktNzQ1Zi00MTdhLWFiZDgtODUwZWZhMGI0NmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1DKAaOJhoGrgk9T8Zo1xXmPzYxE8Qyldqtf
wzd8LzFnRdeyF7sRaIi3VS4AGCeiJwQVEzj5EvVAS0X0HBs2/9IJMh6tGDKFs/Vi
apWYQqybS+DiclV/cnffMJi8I+zkXGH8fNXUIl/aEMsyHp89lPzoMZrw7nMsVWc6
dqsHWzksM6AmTjMxPA8bSUm+KTDz4jKlBOFUoioZXHI8Y/Tghu0jreoZHRotjgMo
eSX1lXuOBw78qG2bTdQDTf2/Fow9FZBSlmhnaWkup+sTsJM/R8K7iQ0Y70/cuN6J
KSjohku2ERuCLU1dqFOtcXjY/8n63xm8BIX7vWoAnTDJrOcj/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPN/ZSQQpBpE8F0ywY80eZo/3EqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDU0MjAwOWEtZTE2OS0z
MjlhLTk5MDctMDNkOTBkZTI2YTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSUzb0wyw6GpTKmwOlznN+UgDESm5PpW5w0P+GS8+RTFcB8u+Xh/w4o
1ZgN+v9KKo0Skd6C/snXw9cKPQW7w+4+TQIvrTC9pbOe1+4ENfq6XMyZOFTRYP7x
8Wn/FsCczLnEkE/VvzZ8dzgZhmo258o3VdZM1TxaEVBkoYzq9AMF4/mA6xPfW84d
ME3IVv265VgTj5XBUxuepJifPsjhmEThp5PTqEsZGgeQsmbHOUT4q42BOP9Ax+Qi
zv8z0N+gpHczkSbS1TOhr4/GADV1ggbviHnJs6A4N6AM/8lBpTZsO1WvJAEZDAvJ
IwLzAVHB+MKlWlMJwBY3T3V/iH4Kov4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:57 2025 by rpki-client