Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/34d6a534-023b-3f25-91a6-9f79969a1d35.roa
File: 34d6a534-023b-3f25-91a6-9f79969a1d35.roa (raw, json)
Hash identifier: fi/eTeIE6zb6hbkdWvRhnR8TcaPAV/3JouTyb0N3fQc=
Subject key identifier: 38:71:EF:D2:34:02:03:79:B7:0F:B9:1C:EB:4A:B5:9C:61:C0:0D:CC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848095E2DB080C8C608494304E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/34d6a534-023b-3f25-91a6-9f79969a1d35.roa
Signing time: Fri 29 Nov 2024 04:38:55 +0000
ROA not before: Fri 29 Nov 2024 04:38:55 +0000
ROA not after: Thu 27 Feb 2025 04:38:55 +0000
asID: 9009
IP address blocks: 172.94.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:5e:2d:b0:80:c8:c6:08:49:43:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 29 04:38:55 2024 GMT
Not After : Feb 27 04:38:55 2025 GMT
Subject: CN=acc29af5-f33a-46ac-847c-16fa87a5ea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:0d:6a:93:5e:e0:f1:53:dd:1f:14:9c:f6:
4d:2d:86:d7:e5:05:98:e8:78:fc:f0:ae:2c:c0:9e:
e3:db:a0:e4:d0:ff:a7:9d:71:a6:53:0d:d8:07:3c:
88:f9:0b:b6:a4:63:fc:3e:c5:52:61:1b:c0:7b:a9:
1e:35:f8:69:54:ed:6c:94:ce:bc:7d:56:67:4f:ab:
74:8c:ac:2b:ef:d8:3c:15:79:e0:d3:e6:2f:13:b9:
88:03:4b:72:f0:c8:78:01:3f:d6:d5:be:02:cc:d6:
ba:76:b8:cd:c4:45:71:7a:3e:b5:6e:ee:f1:b4:64:
78:1f:13:5e:5f:65:4c:4b:7b:93:38:d1:38:a5:fb:
08:1f:de:4a:47:dc:ba:c4:1f:42:94:5a:79:f3:e0:
8a:8f:36:c2:8e:97:28:06:71:0f:aa:ab:6a:c7:20:
24:18:fc:15:4e:e3:26:af:a7:2f:34:a3:88:27:79:
e8:fd:b9:a4:a5:8f:4d:8b:2c:64:a5:a4:3e:6f:55:
68:10:2a:50:8c:b4:34:07:19:6e:78:d4:38:16:ee:
09:bf:62:59:a3:f5:2a:c7:ad:e5:82:08:dd:75:e2:
58:39:fe:73:cf:a8:41:af:07:19:3b:0a:f8:f4:cd:
ad:43:13:4e:77:9b:6e:40:68:b5:57:35:03:69:d7:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:EF:D2:34:02:03:79:B7:0F:B9:1C:EB:4A:B5:9C:61:C0:0D:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/34d6a534-023b-3f25-91a6-9f79969a1d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ff:53:83:3e:33:b4:36:3b:a8:c6:0e:8c:5b:33:33:be:b9:
e9:1b:7b:1e:54:c0:e2:05:27:56:58:a8:f1:f7:6b:08:ce:f5:
3c:af:cb:33:98:16:1f:d3:16:91:9f:65:28:3d:e9:ea:53:9c:
31:84:d8:24:d3:a6:a1:bc:dd:76:0c:85:fd:90:ee:c6:2a:d7:
b5:43:33:3b:cb:29:2f:be:bc:a3:cf:92:19:f6:fd:fa:6d:f5:
04:8e:f6:12:55:3c:81:67:9f:7a:3e:cf:5a:25:1e:88:aa:7d:
98:ab:7d:22:4d:e3:c1:3c:bd:4b:13:26:24:3f:b4:74:32:36:
19:b3:94:77:aa:c2:d3:93:b9:a1:ba:13:bb:d4:29:08:f6:17:
3b:f8:c3:40:46:89:2f:02:08:59:32:5a:60:50:08:09:7c:88:
d8:56:28:93:ae:87:e2:52:a5:83:2b:ff:63:18:dd:db:fd:3e:
32:16:9d:95:b2:97:bd:09:a2:78:30:e9:ab:24:13:2a:bd:f0:
b4:34:b9:1e:b4:2b:ef:5d:93:7c:c6:5e:0f:79:29:ac:6a:b6:
26:20:97:46:ac:97:7c:17:a8:c3:d4:d3:d3:6e:d5:5b:f1:97:
2a:75:a4:ae:fd:b7:32:79:dc:79:1a:01:5f:87:3c:98:5b:04:
cc:d8:ea:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJXi2wgMjGCElDBOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTEyOTA0Mzg1NVoXDTI1MDIyNzA0Mzg1NVowLzEtMCsGA1UEAxMk
YWNjMjlhZjUtZjMzYS00NmFjLTg0N2MtMTZmYTg3YTVlYTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8gNapNe4PFT3R8UnPZNLYbX5QWY6Hj88K4s
wJ7j26Dk0P+nnXGmUw3YBzyI+Qu2pGP8PsVSYRvAe6keNfhpVO1slM68fVZnT6t0
jKwr79g8FXng0+YvE7mIA0ty8Mh4AT/W1b4CzNa6drjNxEVxej61bu7xtGR4HxNe
X2VMS3uTONE4pfsIH95KR9y6xB9ClFp58+CKjzbCjpcoBnEPqqtqxyAkGPwVTuMm
r6cvNKOIJ3no/bmkpY9NiyxkpaQ+b1VoECpQjLQ0BxlueNQ4Fu4Jv2JZo/Uqx63l
ggjddeJYOf5zz6hBrwcZOwr49M2tQxNOd5tuQGi1VzUDadeMXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhx79I0AgN5tw+5HOtKtZxhwA3MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzRkNmE1MzQtMDIzYi0z
ZjI1LTkxYTYtOWY3OTk2OWExZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADT/U4M+M7Q2O6jGDoxbMzO+uekbex5UwOIFJ1ZYqPH3awjO9TyvyzOY
Fh/TFpGfZSg96epTnDGE2CTTpqG83XYMhf2Q7sYq17VDMzvLKS++vKPPkhn2/fpt
9QSO9hJVPIFnn3o+z1olHoiqfZirfSJN48E8vUsTJiQ/tHQyNhmzlHeqwtOTuaG6
E7vUKQj2Fzv4w0BGiS8CCFkyWmBQCAl8iNhWKJOuh+JSpYMr/2MY3dv9PjIWnZWy
l70Jongw6askEyq98LQ0uR60K+9dk3zGXg95KaxqtiYgl0asl3wXqMPU09Nu1Vvx
lyp1pK79tzJ53HkaAV+HPJhbBMzY6sY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:46 2025 by rpki-client