Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219f61e9-69c9-3efb-b1a7-3593febd64dd.roa
File: 219f61e9-69c9-3efb-b1a7-3593febd64dd.roa (raw, json)
Hash identifier: u2DaJdmrcyBlP3FdtALaLXjkhux7uKxTLspLqDIvI3o=
Subject key identifier: EB:96:09:FF:0E:C2:3D:08:B7:50:57:35:FB:EB:CB:23:19:CF:50:17
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584553330FD05E7E80D844565900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219f61e9-69c9-3efb-b1a7-3593febd64dd.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 173.187.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:33:0f:d0:5e:7e:80:d8:44:56:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=936ecffa-7b88-4c85-9073-874526d90dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:ee:1d:2e:41:f1:97:9d:b2:2a:c5:2e:5a:
50:44:ee:07:88:43:78:3a:e5:ae:fb:91:15:16:de:
0f:cb:89:d9:73:c3:8a:69:93:9a:9f:87:98:b9:5d:
8b:1f:e0:a7:09:d7:ba:9d:1d:81:20:09:ae:9d:66:
73:aa:97:74:cc:00:23:dd:23:3a:5d:42:ea:37:91:
82:b0:b4:34:6f:89:8a:ee:cc:05:dd:91:60:c9:75:
ec:06:97:a6:53:41:fb:c9:3d:f5:bc:a9:29:cc:7c:
e9:11:2f:da:09:1b:57:1a:e7:f4:08:39:22:ce:82:
9a:cc:08:e9:4f:8e:55:c4:5f:6b:70:15:63:c7:5b:
1a:5d:33:46:80:ac:d5:9b:2c:c3:26:07:9d:12:18:
bc:94:ec:14:d6:99:3c:c8:00:93:d4:cb:e3:d5:bf:
d8:e2:0c:b0:54:72:a5:5b:10:7b:1e:42:c6:86:c6:
95:19:d6:97:98:e0:52:1b:92:29:35:4c:6c:0b:02:
3d:e2:56:72:20:df:b9:be:a8:ce:25:2a:ea:dc:78:
27:63:2d:72:57:73:1e:30:a2:65:a3:43:2f:99:1b:
61:ee:93:12:fb:f7:09:d1:3f:8c:d7:48:2a:e3:aa:
95:66:48:15:d1:cd:20:b1:2c:9c:71:f5:af:99:d8:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:96:09:FF:0E:C2:3D:08:B7:50:57:35:FB:EB:CB:23:19:CF:50:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/219f61e9-69c9-3efb-b1a7-3593febd64dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ff:87:59:42:e3:33:95:51:28:00:22:e9:6c:d0:9d:8a:14:
44:43:f5:fb:db:29:3c:2d:82:66:f8:fb:a2:ab:ac:67:8b:26:
ca:19:5c:97:fc:16:12:a4:a0:3c:10:e6:74:b9:04:1d:5e:f7:
82:31:cd:de:33:02:4e:ee:13:0b:b4:01:78:ab:6c:91:3f:5d:
89:96:52:c7:99:0c:96:b2:bc:7b:7f:f2:96:65:22:bb:a4:18:
39:38:70:b4:51:bc:29:3d:b1:45:7d:41:b1:09:98:32:79:14:
4d:d3:61:70:44:47:18:47:db:1e:7d:5d:4a:d1:b4:9b:32:1c:
d3:94:3a:e5:7d:1d:8e:07:2f:a0:e7:a6:ec:80:00:9e:1c:1f:
b9:39:96:a1:a2:35:2b:21:1e:31:65:ac:33:f4:81:48:d7:f9:
20:ef:c5:ce:7f:b7:01:6c:ef:38:57:f5:4b:8d:c8:6e:5a:4a:
1a:67:b1:6a:8b:b9:1a:de:49:c1:50:27:dd:45:7a:14:70:fb:
71:b0:28:f7:10:49:cc:24:6b:5c:ca:b8:07:66:4c:3c:ea:ba:
03:d2:61:aa:a1:29:11:2c:0f:78:fa:ef:5a:fc:06:e8:cd:dc:
0a:36:5a:9f:f2:c3:56:de:54:47:0f:12:4a:de:ca:e5:01:f9:
36:90:4e:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMw/QXn6A2ERWWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
OTM2ZWNmZmEtN2I4OC00Yzg1LTkwNzMtODc0NTI2ZDkwZGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgLuHS5B8ZedsirFLlpQRO4HiEN4OuWu+5EV
Ft4Py4nZc8OKaZOan4eYuV2LH+CnCde6nR2BIAmunWZzqpd0zAAj3SM6XULqN5GC
sLQ0b4mK7swF3ZFgyXXsBpemU0H7yT31vKkpzHzpES/aCRtXGuf0CDkizoKazAjp
T45VxF9rcBVjx1saXTNGgKzVmyzDJgedEhi8lOwU1pk8yACT1Mvj1b/Y4gywVHKl
WxB7HkLGhsaVGdaXmOBSG5IpNUxsCwI94lZyIN+5vqjOJSrq3HgnYy1yV3MeMKJl
o0MvmRth7pMS+/cJ0T+M10gq46qVZkgV0c0gsSyccfWvmdjaOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuWCf8Owj0It1BXNfvryyMZz1AXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE5ZjYxZTktNjljOS0z
ZWZiLWIxYTctMzU5M2ZlYmQ2NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAX/h1lC4zOVUSgAIuls0J2KFERD9fvbKTwtgmb4+6KrrGeLJsoZXJf8
FhKkoDwQ5nS5BB1e94Ixzd4zAk7uEwu0AXirbJE/XYmWUseZDJayvHt/8pZlIruk
GDk4cLRRvCk9sUV9QbEJmDJ5FE3TYXBERxhH2x59XUrRtJsyHNOUOuV9HY4HL6Dn
puyAAJ4cH7k5lqGiNSshHjFlrDP0gUjX+SDvxc5/twFs7zhX9UuNyG5aShpnsWqL
uRreScFQJ91FehRw+3GwKPcQScwka1zKuAdmTDzqugPSYaqhKREsD3j671r8BujN
3Ao2Wp/yw1beVEcPEkreyuUB+TaQTvk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:56:02 2025 by rpki-client