Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81564919-afbb-35ec-91ee-e5c8aaef2edd.roa
File: 81564919-afbb-35ec-91ee-e5c8aaef2edd.roa (raw, json)
Hash identifier: fEVXFc1R24qbySKErlcWwjqMlUKKTr/Mb/XyboljIu8=
Subject key identifier: 45:74:BA:C9:C5:DA:89:6C:C3:23:7A:28:E8:A6:D9:1D:BB:A8:E2:4E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848095C577DAE6560E4B0EBD480
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81564919-afbb-35ec-91ee-e5c8aaef2edd.roa
Signing time: Fri 29 Nov 2024 04:35:13 +0000
ROA not before: Fri 29 Nov 2024 04:35:13 +0000
ROA not after: Thu 27 Feb 2025 04:35:13 +0000
asID: 9009
IP address blocks: 172.94.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:5c:57:7d:ae:65:60:e4:b0:eb:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 29 04:35:13 2024 GMT
Not After : Feb 27 04:35:13 2025 GMT
Subject: CN=65813bc8-f7de-4ae9-8627-72f298e7d7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:06:00:bd:d1:b3:6a:f4:b1:fa:09:8f:06:
6d:1e:58:97:c2:04:e5:17:e6:d1:b6:7b:90:03:00:
8a:9e:af:da:6a:fc:8e:b5:86:5c:17:8c:b3:43:4b:
32:79:7b:53:95:a7:2d:99:c4:7e:f5:9a:24:ea:da:
59:e7:66:8e:a5:24:a9:df:ea:c1:94:86:fb:ac:22:
8c:9f:10:16:c5:7d:05:d7:99:9b:b2:6a:52:2d:69:
00:14:11:20:cf:a3:bb:42:d4:7b:30:70:49:75:30:
43:24:dc:1f:6e:a8:0d:e6:16:74:48:35:71:9d:d7:
ee:fc:3f:15:0e:7c:e3:9f:ad:a8:d2:e3:42:55:5f:
47:26:61:18:4b:f7:69:df:66:f1:8c:66:bd:9b:e6:
b8:bf:6b:1e:ff:b7:7d:ed:16:85:6d:e7:18:6f:33:
d5:34:ef:7f:d1:ed:48:4d:c4:c6:2c:70:43:5b:87:
2a:19:1f:7f:3d:1b:56:cc:8c:81:33:1d:40:48:f4:
d7:5e:ed:8b:70:eb:4f:f8:05:ca:fe:a6:60:e8:ec:
13:48:d5:40:3d:05:13:a2:24:40:02:0d:8a:0b:02:
66:0c:88:82:0c:63:f3:9d:5c:c6:19:b8:72:b8:f3:
4f:a3:10:be:da:90:d3:f1:06:4b:e0:9d:93:34:2a:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:BA:C9:C5:DA:89:6C:C3:23:7A:28:E8:A6:D9:1D:BB:A8:E2:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81564919-afbb-35ec-91ee-e5c8aaef2edd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:40:a4:7f:73:66:25:c9:cb:59:f1:82:dd:15:aa:c5:c7:70:
b8:7b:96:c3:72:80:50:31:9f:5a:8b:1e:8e:99:01:8d:a7:33:
52:05:be:26:93:ae:13:29:26:93:85:be:c8:30:f0:6a:ae:5e:
78:22:15:68:d7:62:e9:3b:26:aa:c0:97:5b:2b:f9:44:17:34:
f7:bf:79:c3:85:d9:2e:75:1b:35:c0:47:10:df:84:27:e4:f1:
2e:2b:14:46:6e:60:6c:3f:4a:2b:37:70:c2:ae:cc:a9:96:10:
df:a8:1e:80:f9:d6:ba:4b:0c:39:19:4e:b0:6d:fe:34:4c:81:
68:6a:4f:19:62:a0:9b:81:38:a4:1c:ee:dc:c5:24:dc:57:15:
61:cb:df:96:23:f5:07:26:1b:e7:cb:34:6a:7b:2b:3b:ce:fc:
39:1e:e1:19:3c:e2:20:c4:14:3c:7e:8b:45:ac:00:8e:de:25:
ce:fd:27:bf:0d:30:cc:2f:98:f6:b6:69:5b:61:e4:23:8e:f7:
7f:44:1e:64:aa:d9:9a:f0:65:df:c7:42:72:19:5a:a5:e1:64:
0e:bb:2d:7c:3e:e7:9c:ae:35:3c:29:4f:b6:cd:4c:cd:92:e3:
45:c3:ec:2a:7a:34:d9:f9:1a:53:8b:53:22:d0:c1:29:e8:28:
4a:17:36:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJXFd9rmVg5LDr1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTEyOTA0MzUxM1oXDTI1MDIyNzA0MzUxM1owLzEtMCsGA1UEAxMk
NjU4MTNiYzgtZjdkZS00YWU5LTg2MjctNzJmMjk4ZTdkN2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxsGAL3Rs2r0sfoJjwZtHliXwgTlF+bRtnuQ
AwCKnq/aavyOtYZcF4yzQ0syeXtTlactmcR+9Zok6tpZ52aOpSSp3+rBlIb7rCKM
nxAWxX0F15mbsmpSLWkAFBEgz6O7QtR7MHBJdTBDJNwfbqgN5hZ0SDVxndfu/D8V
Dnzjn62o0uNCVV9HJmEYS/dp32bxjGa9m+a4v2se/7d97RaFbecYbzPVNO9/0e1I
TcTGLHBDW4cqGR9/PRtWzIyBMx1ASPTXXu2LcOtP+AXK/qZg6OwTSNVAPQUToiRA
Ag2KCwJmDIiCDGPznVzGGbhyuPNPoxC+2pDT8QZL4J2TNCrE9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEV0usnF2olswyN6KOim2R27qOJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODE1NjQ5MTktYWZiYi0z
NWVjLTkxZWUtZTVjOGFhZWYyZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANApH9zZiXJy1nxgt0VqsXHcLh7lsNygFAxn1qLHo6ZAY2nM1IFviaT
rhMpJpOFvsgw8GquXngiFWjXYuk7JqrAl1sr+UQXNPe/ecOF2S51GzXARxDfhCfk
8S4rFEZuYGw/Sis3cMKuzKmWEN+oHoD51rpLDDkZTrBt/jRMgWhqTxlioJuBOKQc
7tzFJNxXFWHL35Yj9QcmG+fLNGp7KzvO/Dke4Rk84iDEFDx+i0WsAI7eJc79J78N
MMwvmPa2aVth5COO939EHmSq2ZrwZd/HQnIZWqXhZA67LXw+55yuNTwpT7bNTM2S
40XD7Cp6NNn5GlOLUyLQwSnoKEoXNrg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:33 2025 by rpki-client