Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b3d04f5-1ad6-395a-bfe3-1cfcd1eceb4d.roa
File: 9b3d04f5-1ad6-395a-bfe3-1cfcd1eceb4d.roa (raw, json)
Hash identifier: qGXQjOmnphcs8aaIBdkXpfuOzSDCpWHbrTENjj0PQp8=
Subject key identifier: F0:E1:B7:BF:B8:D7:FB:BE:92:F3:E1:F0:30:7F:E7:27:8D:AA:5A:8A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858463289A4BB93DCF4A33892F140
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b3d04f5-1ad6-395a-bfe3-1cfcd1eceb4d.roa
Signing time: Thu 13 Jun 2024 13:00:34 +0000
ROA not before: Thu 13 Jun 2024 13:00:34 +0000
ROA not after: Wed 11 Sep 2024 13:00:34 +0000
asID: 7029
IP address blocks: 75.91.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:89:a4:bb:93:dc:f4:a3:38:92:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jun 13 13:00:34 2024 GMT
Not After : Sep 11 13:00:34 2024 GMT
Subject: CN=d45269d2-a2e8-448f-b697-87201658d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:13:05:55:2f:70:a9:44:b5:65:4b:b8:ad:
bf:3c:fc:be:f3:84:f2:56:a7:36:33:74:c9:63:ee:
77:32:30:37:e6:32:ab:45:ed:52:92:4f:69:ef:e7:
b4:53:ca:33:97:11:6a:16:3d:b2:6f:42:db:2c:65:
b6:04:1d:db:b5:58:94:dc:d3:e4:f7:18:8c:f2:39:
b6:7e:80:8c:28:3a:56:36:57:0b:0c:7c:22:6b:6e:
9b:a0:77:7d:53:97:6e:b2:a7:17:45:bb:b7:4f:77:
09:ac:75:25:6e:e9:8a:80:04:e6:32:07:eb:a2:4c:
26:6f:cb:61:07:37:8d:c5:07:07:1f:36:49:43:c0:
2c:43:8c:a5:4e:b1:61:fd:fe:6a:54:b7:58:75:2f:
4c:fc:9a:a2:8d:56:97:d6:ad:8c:98:32:85:f9:a9:
73:e6:8b:d0:30:f4:c0:00:34:8f:88:db:57:68:10:
f3:6b:64:ef:9a:68:b2:5a:71:9f:d5:9f:d9:98:06:
4c:35:3e:93:b5:81:f6:79:a6:25:a9:6a:87:86:32:
6e:cb:77:ce:1d:4c:62:39:14:96:85:96:d4:72:b7:
67:0b:8b:05:a2:57:f2:2f:e1:2f:c4:ec:35:53:22:
0c:bc:fc:38:95:81:a2:33:6d:38:10:ec:b1:7c:bb:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:B7:BF:B8:D7:FB:BE:92:F3:E1:F0:30:7F:E7:27:8D:AA:5A:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9b3d04f5-1ad6-395a-bfe3-1cfcd1eceb4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.91.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6f:01:7a:31:de:9a:bf:d0:25:e8:a9:a1:b8:08:2d:57:5f:
97:4a:82:99:f2:ec:69:2d:bc:af:ed:78:13:27:61:57:8f:70:
f9:04:08:97:f5:ca:f3:83:49:cf:62:c7:46:c4:03:07:c1:ca:
2e:29:d3:3d:2b:39:18:46:e5:27:41:85:65:25:fc:d9:5e:03:
1c:91:01:ce:48:80:7e:df:ba:90:c2:e6:18:73:c3:29:a7:f6:
c6:7a:d5:7f:f0:f8:ab:45:51:09:34:a6:df:7a:34:42:b8:ed:
ec:c2:bc:ef:c3:9c:d1:26:31:8c:e3:a2:1a:c2:05:3b:a4:11:
c8:35:cf:d0:06:2a:f8:53:50:a5:c0:ea:07:c7:d3:da:47:7c:
50:e8:ba:4a:a6:c9:30:12:60:c3:7c:ad:8c:d0:b9:1d:c2:40:
f5:9c:ae:c0:3a:47:24:53:4d:1d:33:e5:1f:47:f2:e3:7d:83:
e4:2e:33:0a:b6:d8:3c:6f:9a:b4:46:63:91:15:b3:e9:60:de:
34:2a:16:80:47:43:d2:7e:01:36:e3:a8:20:25:36:bc:ed:05:
41:7d:b5:3e:57:73:df:41:95:28:ab:ee:cd:f3:c8:93:6f:24:
be:65:9b:45:65:f2:18:f2:93:6d:0f:6e:78:2f:81:38:dc:86:
e3:58:57:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyiaS7k9z0oziS8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
ZDQ1MjY5ZDItYTJlOC00NDhmLWI2OTctODcyMDE2NThkMjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt64TBVUvcKlEtWVLuK2/PPy+84TyVqc2M3TJ
Y+53MjA35jKrRe1Skk9p7+e0U8ozlxFqFj2yb0LbLGW2BB3btViU3NPk9xiM8jm2
foCMKDpWNlcLDHwia26boHd9U5dusqcXRbu3T3cJrHUlbumKgATmMgfrokwmb8th
BzeNxQcHHzZJQ8AsQ4ylTrFh/f5qVLdYdS9M/JqijVaX1q2MmDKF+alz5ovQMPTA
ADSPiNtXaBDza2TvmmiyWnGf1Z/ZmAZMNT6TtYH2eaYlqWqHhjJuy3fOHUxiORSW
hZbUcrdnC4sFolfyL+EvxOw1UyIMvPw4lYGiM204EOyxfLsGkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDht7+41/u+kvPh8DB/5yeNqlqKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWIzZDA0ZjUtMWFkNi0z
OTVhLWJmZTMtMWNmY2QxZWNlYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZvAXox3pq/0CXoqaG4CC1XX5dKgpny7GktvK/teBMnYVePcPkECJf1
yvODSc9ix0bEAwfByi4p0z0rORhG5SdBhWUl/NleAxyRAc5IgH7fupDC5hhzwymn
9sZ61X/w+KtFUQk0pt96NEK47ezCvO/DnNEmMYzjohrCBTukEcg1z9AGKvhTUKXA
6gfH09pHfFDoukqmyTASYMN8rYzQuR3CQPWcrsA6RyRTTR0z5R9H8uN9g+QuMwq2
2DxvmrRGY5EVs+lg3jQqFoBHQ9J+ATbjqCAlNrztBUF9tT5Xc99BlSir7s3zyJNv
JL5lm0Vl8hjyk20PbngvgTjchuNYV+w=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:14 2025 by rpki-client