Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/938b9325-3c36-3c0a-aaf2-6ad4cbcd3578.roa
File: 938b9325-3c36-3c0a-aaf2-6ad4cbcd3578.roa (raw, json)
Hash identifier: MaF3CYmxvdtkdcAblU+Ii/VyvtrXqLcxAv4aFwm4QP8=
Subject key identifier: DC:E1:5E:9A:DF:0D:3C:0F:50:5D:DD:69:AA:74:30:A1:7A:D6:EF:51
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289A92CE85BD3E3A4995E80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/938b9325-3c36-3c0a-aaf2-6ad4cbcd3578.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 98.21.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:a9:2c:e8:5b:d3:e3:a4:99:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=ef031db2-01da-4ce5-9522-46f159de1a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:26:b8:00:7e:17:8a:ce:9b:b0:6c:9b:b7:
1c:e2:25:e8:a5:0a:35:ce:66:d4:a0:42:7c:e9:c1:
5c:fa:75:c3:5a:f9:f8:88:01:5d:8e:df:ee:85:e3:
39:c9:8e:0a:df:d1:ff:94:76:cc:56:9a:96:f1:72:
0a:3b:cd:fe:6d:54:2d:c0:cb:26:98:59:8f:ff:ad:
5b:2f:ae:5a:1f:15:47:75:d2:fb:d9:7f:a5:88:8a:
29:1d:ec:e3:48:44:27:b5:77:f1:22:ad:ba:02:4f:
44:ec:8f:cf:be:6f:aa:b9:57:da:3e:3d:9f:54:c2:
2f:87:f9:32:f3:45:63:c6:ee:a1:cc:62:fd:7b:78:
dc:9d:3e:8b:98:78:91:62:61:c0:28:c8:8b:53:9d:
15:d1:92:a4:58:35:bd:c5:c6:e7:b4:96:46:b0:f0:
5d:10:18:de:fb:31:3a:c7:23:bc:20:e6:55:45:0d:
38:7f:a6:07:e8:82:a1:11:72:79:cc:2c:cc:5a:14:
2c:fa:95:b7:46:a4:b5:b3:61:89:9b:1d:84:77:0c:
d3:3d:0a:4a:b0:2d:19:be:b2:99:76:ad:2b:9d:b6:
29:f0:18:b2:69:c0:79:39:4d:66:ab:dc:42:92:db:
37:74:c3:10:75:c4:6b:91:00:25:3b:6c:59:80:cb:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:5E:9A:DF:0D:3C:0F:50:5D:DD:69:AA:74:30:A1:7A:D6:EF:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/938b9325-3c36-3c0a-aaf2-6ad4cbcd3578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:75:9d:ef:03:16:50:6a:8b:18:7e:87:7d:cf:dd:9b:f9:2b:
6f:7b:5b:34:79:be:cd:af:75:95:f1:9a:8f:e8:37:e5:95:76:
6e:cf:d0:57:54:59:a1:f1:9a:ed:9a:7a:80:93:1d:e2:64:28:
ad:c7:2d:64:a8:14:ce:a3:9e:5e:a6:0f:3a:54:d7:fc:39:a6:
bb:00:5b:1a:f8:18:ec:c0:2f:9e:e7:49:bf:5e:3a:7b:9a:f0:
ba:39:48:e1:24:ae:dc:d6:81:c8:24:fe:66:00:ac:9e:6d:80:
5e:35:3b:ff:a1:be:39:a1:13:b9:ba:30:82:40:f3:e8:df:f5:
bb:c3:d9:bc:f9:99:8a:42:47:3d:b9:f8:a5:6c:b7:c3:ea:ce:
31:af:eb:6c:f9:6e:bf:0e:80:10:7b:f5:47:d8:04:8d:16:93:
9f:ef:e6:e7:96:78:06:73:95:74:f2:7f:2a:56:4b:34:21:22:
4c:b1:31:9e:63:90:5b:4c:63:c4:bc:95:01:29:68:56:8c:f6:
15:58:e5:31:59:a9:fd:1f:fd:c8:7e:19:7c:29:57:ee:84:16:
5b:42:31:78:7d:ad:82:cc:6f:66:e9:f1:98:cf:63:d3:b7:85:
af:ea:7d:ba:63:69:a8:04:0b:4f:53:f4:d3:ff:ea:f4:9d:c4:
cd:6f:f8:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyiaks6FvT46SZXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
ZWYwMzFkYjItMDFkYS00Y2U1LTk1MjItNDZmMTU5ZGUxYTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSkmuAB+F4rOm7Bsm7cc4iXopQo1zmbUoEJ8
6cFc+nXDWvn4iAFdjt/uheM5yY4K39H/lHbMVpqW8XIKO83+bVQtwMsmmFmP/61b
L65aHxVHddL72X+liIopHezjSEQntXfxIq26Ak9E7I/Pvm+quVfaPj2fVMIvh/ky
80Vjxu6hzGL9e3jcnT6LmHiRYmHAKMiLU50V0ZKkWDW9xcbntJZGsPBdEBje+zE6
xyO8IOZVRQ04f6YH6IKhEXJ5zCzMWhQs+pW3RqS1s2GJmx2EdwzTPQpKsC0ZvrKZ
dq0rnbYp8BiyacB5OU1mq9xCkts3dMMQdcRrkQAlO2xZgMsQqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzhXprfDTwPUF3daap0MKF61u9RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTM4YjkzMjUtM2MzNi0z
YzBhLWFhZjItNmFkNGNiY2QzNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx1ne8DFlBqixh+h33P3Zv5K297WzR5vs2vdZXxmo/oN+WVdm7P0FdU
WaHxmu2aeoCTHeJkKK3HLWSoFM6jnl6mDzpU1/w5prsAWxr4GOzAL57nSb9eOnua
8Lo5SOEkrtzWgcgk/mYArJ5tgF41O/+hvjmhE7m6MIJA8+jf9bvD2bz5mYpCRz25
+KVst8PqzjGv62z5br8OgBB79UfYBI0Wk5/v5ueWeAZzlXTyfypWSzQhIkyxMZ5j
kFtMY8S8lQEpaFaM9hVY5TFZqf0f/ch+GXwpV+6EFltCMXh9rYLMb2bp8ZjPY9O3
ha/qfbpjaagEC09T9NP/6vSdxM1v+Ns=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:25 2025 by rpki-client