Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a3143e-f06c-3be8-93e2-49b2da69ada5.roa
File: 13a3143e-f06c-3be8-93e2-49b2da69ada5.roa (raw, json)
Hash identifier: fdCq7LZX46jlrN9O+n0Y4QKNaNkj4SPOS24oOky1XAw=
Subject key identifier: 7E:E3:3C:B8:62:FE:8E:54:58:BE:35:13:02:3E:01:2B:29:33:E8:33
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0A2021089DEB83FA35FE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a3143e-f06c-3be8-93e2-49b2da69ada5.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 7029
IP address blocks: 98.22.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:a2:02:10:89:de:b8:3f:a3:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=7b423b97-8d30-44e7-9120-e937a6d83fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:c1:66:d3:e2:d7:ee:70:dc:f9:1b:8d:56:
53:3a:75:7a:76:72:71:9f:9c:98:87:08:73:a3:58:
43:3a:31:b4:ae:d0:d2:2d:de:ac:44:92:85:fe:36:
b5:83:c0:55:78:4c:df:12:3a:80:07:2f:05:5f:d0:
4d:30:89:e3:54:9f:1b:f5:69:a5:b1:76:78:30:48:
a9:98:a3:1c:36:11:11:25:97:30:a0:28:90:36:34:
4f:c6:14:56:86:17:63:ca:36:7d:78:85:e3:6f:0f:
b2:12:5e:8a:c5:78:a9:75:3b:21:ec:f8:55:28:c4:
35:fb:ec:67:a5:cf:5b:e6:9d:f1:23:18:37:0c:52:
ba:f2:7d:97:40:f5:93:c4:16:4b:55:5b:a4:11:ab:
55:09:0c:55:57:4f:af:4d:30:77:b0:4d:8c:22:b4:
b5:3a:dd:0d:31:c2:03:b1:7e:5f:3b:92:28:84:36:
e6:b1:d0:df:47:2a:7c:19:e1:ac:a8:c1:9f:5c:27:
cb:29:61:ff:85:dc:59:92:80:07:f5:46:3f:40:d0:
cc:59:5c:d8:3a:5b:01:17:b7:50:ff:4a:72:ef:7c:
c0:80:73:5e:fd:59:6a:29:ad:42:0b:18:57:ed:be:
70:dd:c5:11:ef:8d:c7:16:64:80:b9:e1:1c:57:08:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:3C:B8:62:FE:8E:54:58:BE:35:13:02:3E:01:2B:29:33:E8:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a3143e-f06c-3be8-93e2-49b2da69ada5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c1:fd:79:34:70:40:84:0c:96:73:45:fa:1c:21:6e:9f:7e:
1f:a9:f8:29:3b:f2:94:ce:2b:bd:9d:91:ce:83:e5:e4:44:ab:
78:7b:0e:d2:4b:ba:b4:68:f1:b2:24:eb:6e:ca:4e:1e:ec:bb:
10:57:0c:ee:48:aa:35:a0:a9:db:dc:92:79:84:a3:5c:fa:ca:
c6:fc:ea:1f:61:0c:7f:4c:0e:c2:a9:f3:5a:89:70:19:58:ed:
d3:15:10:7d:62:06:40:d1:4c:ba:78:0b:6e:b8:7a:ca:d5:81:
f5:b7:0c:6b:f6:9f:c2:84:fe:7d:39:b8:0c:73:f8:64:0d:1d:
81:70:78:f9:4d:c4:43:72:95:6f:7c:62:7c:00:85:64:06:f4:
a7:43:de:1c:b1:4c:7d:25:42:cf:16:ea:a3:1d:ad:66:17:18:
72:0f:be:86:0c:6e:8f:7e:10:36:73:8a:ff:bd:5b:d8:d5:6c:
a1:43:7b:2d:e1:f5:a3:38:ab:0b:06:90:2e:65:4b:ed:97:e7:
8d:1d:8d:b3:d3:61:1a:3f:f1:66:4c:dd:54:33:58:7e:4d:c7:
4e:33:1e:62:2f:fe:aa:3e:7e:8d:41:0a:bf:9b:53:e2:3e:59:
ca:4e:8c:66:9d:34:be:13:bd:14:ae:d0:a6:3c:47:81:14:0d:
d2:3b:5f:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcR4KICEIneuD+jX+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDkwMTEzMDA0MVoXDTI0MTEzMDE0MDA0MVowLzEtMCsGA1UEAxMk
N2I0MjNiOTctOGQzMC00NGU3LTkxMjAtZTkzN2E2ZDgzZmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/jBZtPi1+5w3PkbjVZTOnV6dnJxn5yYhwhz
o1hDOjG0rtDSLd6sRJKF/ja1g8BVeEzfEjqABy8FX9BNMInjVJ8b9WmlsXZ4MEip
mKMcNhERJZcwoCiQNjRPxhRWhhdjyjZ9eIXjbw+yEl6KxXipdTsh7PhVKMQ1++xn
pc9b5p3xIxg3DFK68n2XQPWTxBZLVVukEatVCQxVV0+vTTB3sE2MIrS1Ot0NMcID
sX5fO5IohDbmsdDfRyp8GeGsqMGfXCfLKWH/hdxZkoAH9UY/QNDMWVzYOlsBF7dQ
/0py73zAgHNe/VlqKa1CCxhX7b5w3cUR743HFmSAueEcVwiXIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7jPLhi/o5UWL41EwI+ASspM+gzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNhMzE0M2UtZjA2Yy0z
YmU4LTkzZTItNDliMmRhNjlhZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILB/Xk0cECEDJZzRfocIW6ffh+p+Ck78pTOK72dkc6D5eREq3h7DtJL
urRo8bIk627KTh7suxBXDO5IqjWgqdvcknmEo1z6ysb86h9hDH9MDsKp81qJcBlY
7dMVEH1iBkDRTLp4C264esrVgfW3DGv2n8KE/n05uAxz+GQNHYFwePlNxENylW98
YnwAhWQG9KdD3hyxTH0lQs8W6qMdrWYXGHIPvoYMbo9+EDZziv+9W9jVbKFDey3h
9aM4qwsGkC5lS+2X540djbPTYRo/8WZM3VQzWH5Nx04zHmIv/qo+fo1BCr+bU+I+
WcpOjGadNL4TvRSu0KY8R4EUDdI7X9U=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:34 2025 by rpki-client