Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd355b17-405b-31fd-86ce-77f081176fc7.roa
File: bd355b17-405b-31fd-86ce-77f081176fc7.roa (raw, json)
Hash identifier: NgOsDjNUmTKDdQELZoDPNp+w6NsXvbKBugJ4vMxv8SQ=
Subject key identifier: 21:84:5D:B4:8C:13:A7:C0:E1:47:C7:91:C4:4A:65:DE:57:7F:62:51
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858455332F762A816B1D458004600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd355b17-405b-31fd-86ce-77f081176fc7.roa
Signing time: Mon 25 Mar 2024 13:00:33 +0000
ROA not before: Mon 25 Mar 2024 13:00:33 +0000
ROA not after: Sun 23 Jun 2024 13:00:33 +0000
asID: 7029
IP address blocks: 75.88.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:53:32:f7:62:a8:16:b1:d4:58:00:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 25 13:00:33 2024 GMT
Not After : Jun 23 13:00:33 2024 GMT
Subject: CN=76c67df2-ac3d-4254-93f6-8d42158bfca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:17:d2:77:01:05:bc:83:f6:a4:42:64:04:
5e:5f:e3:aa:d9:c0:1b:86:7b:1b:33:44:c8:a4:4d:
55:cf:71:7e:05:4f:85:5c:10:57:42:f0:47:5c:46:
3c:77:4a:eb:ee:24:18:6b:37:72:55:12:ce:e5:c6:
1d:a7:1a:71:72:fe:8f:bd:18:67:cc:db:d5:a5:1f:
04:5d:76:cd:13:3b:87:05:67:22:43:b7:78:6d:b1:
6f:0e:c5:d7:c6:b2:85:2b:ce:b6:11:17:8c:31:34:
16:8a:40:21:28:0c:88:e9:16:36:8b:73:c8:5c:dd:
0a:9d:49:16:51:f1:e4:22:9d:16:b4:10:df:9f:96:
92:2a:04:1d:25:57:ec:a8:1c:5d:c6:c9:d3:fe:f7:
fb:ed:8a:6c:96:08:7d:04:54:3d:99:89:11:60:2a:
20:18:d0:54:54:78:06:05:de:11:8d:d1:97:84:15:
95:f3:83:2b:d5:20:2c:dd:93:e7:c3:9f:00:fa:f5:
93:dd:96:6c:f5:73:0a:68:e1:56:c6:be:36:9b:89:
f7:81:f6:dd:89:28:1b:5d:ba:26:61:f0:9f:6f:56:
0c:3d:e8:c3:2e:31:26:e2:02:4d:b5:a9:cf:37:b0:
ab:f0:a8:76:70:15:0c:b5:a3:33:6d:a8:69:5e:bb:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:5D:B4:8C:13:A7:C0:E1:47:C7:91:C4:4A:65:DE:57:7F:62:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd355b17-405b-31fd-86ce-77f081176fc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.88.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:a0:cb:ec:07:f7:dc:50:30:7e:b3:62:4b:1f:3d:36:9a:41:
8b:de:d5:7f:18:c8:4c:51:97:bf:41:a1:92:37:0e:8e:3e:16:
cb:c6:bc:55:1c:77:1b:9c:8d:ce:1d:46:e4:fb:a9:90:4d:a8:
d1:a1:74:0b:61:ba:70:55:b4:92:ef:4c:fe:7d:90:df:5d:f7:
29:04:44:f5:8b:9f:28:7c:da:34:a3:32:bc:30:27:14:55:11:
b8:0a:f7:a3:b1:a6:b3:52:ad:24:47:5f:ef:d7:11:cd:24:e9:
89:8a:66:3f:6b:6a:f7:ed:3f:09:df:d7:93:58:2a:12:bd:73:
ed:b6:e5:0f:9e:fa:9c:1e:04:f1:88:45:52:0b:de:4c:2f:bc:
90:10:ec:bc:62:50:58:2a:d2:d6:e8:f7:65:c6:1a:0c:43:b5:
7a:df:f1:d6:b6:bc:45:46:35:02:c7:9d:9b:66:fc:45:5b:af:
27:2b:61:d3:53:5e:2f:cb:c4:ec:0f:b1:68:75:9f:49:57:42:
24:84:8b:b5:0b:e1:de:2b:9c:a1:45:b9:9c:1a:53:5e:f4:08:
70:87:76:5a:7f:8b:5c:8c:84:d7:b6:b1:49:f4:2d:9a:a7:16:
ff:2f:f2:57:a1:3e:13:fb:41:53:b5:d4:2b:de:26:53:3c:25:
b8:83:5e:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvdiqBax1FgARgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
NzZjNjdkZjItYWMzZC00MjU0LTkzZjYtOGQ0MjE1OGJmY2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVMX0ncBBbyD9qRCZAReX+Oq2cAbhnsbM0TI
pE1Vz3F+BU+FXBBXQvBHXEY8d0rr7iQYazdyVRLO5cYdpxpxcv6PvRhnzNvVpR8E
XXbNEzuHBWciQ7d4bbFvDsXXxrKFK862EReMMTQWikAhKAyI6RY2i3PIXN0KnUkW
UfHkIp0WtBDfn5aSKgQdJVfsqBxdxsnT/vf77Ypslgh9BFQ9mYkRYCogGNBUVHgG
Bd4RjdGXhBWV84Mr1SAs3ZPnw58A+vWT3ZZs9XMKaOFWxr42m4n3gfbdiSgbXbom
YfCfb1YMPejDLjEm4gJNtanPN7Cr8Kh2cBUMtaMzbahpXrtZqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGEXbSME6fA4UfHkcRKZd5Xf2JRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQzNTViMTctNDA1Yi0z
MWZkLTg2Y2UtNzdmMDgxMTc2ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1hwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOgy+wH99xQMH6zYksfPTaaQYve1X8YyExRl79BoZI3Do4+FsvGvFUc
dxucjc4dRuT7qZBNqNGhdAthunBVtJLvTP59kN9d9ykERPWLnyh82jSjMrwwJxRV
EbgK96OxprNSrSRHX+/XEc0k6YmKZj9ravftPwnf15NYKhK9c+225Q+e+pweBPGI
RVIL3kwvvJAQ7LxiUFgq0tbo92XGGgxDtXrf8da2vEVGNQLHnZtm/EVbrycrYdNT
Xi/LxOwPsWh1n0lXQiSEi7UL4d4rnKFFuZwaU170CHCHdlp/i1yMhNe2sUn0LZqn
Fv8v8lehPhP7QVO11CveJlM8JbiDXiY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:17 2025 by rpki-client