Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/3b6b18f2-58e1-30cd-b263-ea43b6032f1f.roa
File: 3b6b18f2-58e1-30cd-b263-ea43b6032f1f.roa (raw, json)
Hash identifier: oBHbf1xl2no33XwaDF0i6jnQTpJBNqeQWuwZWiFzZCU=
Subject key identifier: 05:FD:9E:CF:2C:2A:E2:19:BB:2F:D6:7A:69:46:9B:DD:F2:C4:C8:0E
Certificate issuer: /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial: 010D0C9F4328584325D32F53DBD71980E04CE300
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/3b6b18f2-58e1-30cd-b263-ea43b6032f1f.roa
Signing time: Thu 07 Sep 2023 21:22:37 +0000
ROA not before: Thu 07 Sep 2023 21:22:37 +0000
ROA not after: Wed 06 Dec 2023 22:22:37 +0000
asID: 54816
IP address blocks: 192.30.192.0/22 maxlen: 24
158.51.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:25:d3:2f:53:db:d7:19:80:e0:4c:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Validity
Not Before: Sep 7 21:22:37 2023 GMT
Not After : Dec 6 22:22:37 2023 GMT
Subject: CN=37678ba4-7918-48d2-9347-9ebc69dfed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:e4:76:a3:b2:c5:95:a3:a0:15:e2:c1:90:
fb:e3:12:7b:cf:97:79:76:2d:09:26:dd:98:a4:f7:
73:98:b1:82:8c:ac:7e:9b:6d:00:ff:16:92:4d:f0:
2a:c1:56:cb:0b:28:9a:be:59:35:ad:b5:43:a9:97:
b7:24:be:a6:c0:32:1e:42:75:c4:27:d3:38:81:11:
bd:9f:2f:8d:aa:67:dc:3b:94:91:af:99:10:f2:b6:
1b:69:26:b2:76:1c:5c:d6:8f:ea:f8:fb:3b:14:cb:
1a:a4:75:41:75:18:f0:b8:61:6a:ef:18:40:be:9b:
c7:03:14:a5:27:7f:2f:8d:a9:56:3c:9d:40:17:46:
74:c5:61:c0:15:c9:f0:9c:7f:20:7c:00:43:68:b4:
3d:bd:82:0f:68:2b:12:6e:0f:9d:bb:fc:e7:38:8e:
67:f3:53:11:cb:33:7a:8e:84:0d:2b:55:7e:50:c4:
e9:45:6a:ef:f7:cb:1a:1f:95:c7:eb:19:01:19:20:
16:4d:18:54:68:1e:a6:9b:27:f2:43:f7:f9:a4:ee:
31:89:c4:00:c1:a8:32:62:c8:03:f3:2f:a5:47:c6:
19:4e:22:e9:3c:58:a7:df:13:00:60:8a:d9:b8:cf:
f7:de:26:81:b0:3c:82:24:4b:b4:3f:03:0c:cc:00:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:9E:CF:2C:2A:E2:19:BB:2F:D6:7A:69:46:9B:DD:F2:C4:C8:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/3b6b18f2-58e1-30cd-b263-ea43b6032f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
X509v3 Authority Key Identifier:
keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.56.0/23
192.30.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:e8:22:71:82:82:ea:07:dc:d6:bd:ff:1f:5a:7e:83:9c:e5:
64:3f:8e:e5:f1:bc:e6:bd:11:2b:db:fd:f3:2f:67:70:a4:03:
e3:c2:23:4c:ff:fc:99:77:fa:98:86:a8:55:c4:a0:89:03:2e:
17:fa:de:c7:70:b9:3e:a9:35:0f:48:05:74:f0:a7:af:46:85:
25:a3:ef:8f:dd:98:17:2c:bb:eb:ca:7f:6a:41:ed:f5:a6:82:
93:03:41:05:72:62:19:a7:9a:96:b1:71:c1:86:bc:78:be:a8:
e6:24:7f:55:de:3b:d5:66:72:7c:fb:08:c4:25:b9:e5:4a:fb:
62:91:b9:43:b4:e0:4b:22:b3:2d:99:b0:47:85:63:dd:a0:c6:
0b:d0:45:e8:cc:7f:28:3b:a4:5a:28:59:1d:a3:56:ef:97:fa:
dc:0c:52:34:02:c1:e1:70:7c:dc:bb:e6:9f:56:eb:c3:5f:5e:
bf:88:af:96:ea:b0:d8:d3:cb:0f:e9:48:c9:2e:b1:53:74:c9:
16:12:46:e4:a7:ce:a0:2e:e5:ee:a5:e2:95:cc:f0:40:21:27:
d5:6e:70:1e:8c:9a:34:23:79:29:73:14:60:46:f3:b9:08:b3:
0d:7f:41:4a:d9:ca:16:eb:15:a2:17:56:cb:ce:ca:f0:af:84:
fc:0e:8b:d3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEMl0y9T29cZgOBM4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNmMDVlYTItZWE1Yi00ZTJiLWFiOWYtYzk1YjQ1OTBl
YTExMB4XDTIzMDkwNzIxMjIzN1oXDTIzMTIwNjIyMjIzN1owLzEtMCsGA1UEAxMk
Mzc2NzhiYTQtNzkxOC00OGQyLTkzNDctOWViYzY5ZGZlZDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2vkdqOyxZWjoBXiwZD74xJ7z5d5di0JJt2Y
pPdzmLGCjKx+m20A/xaSTfAqwVbLCyiavlk1rbVDqZe3JL6mwDIeQnXEJ9M4gRG9
ny+NqmfcO5SRr5kQ8rYbaSaydhxc1o/q+Ps7FMsapHVBdRjwuGFq7xhAvpvHAxSl
J38vjalWPJ1AF0Z0xWHAFcnwnH8gfABDaLQ9vYIPaCsSbg+du/znOI5n81MRyzN6
joQNK1V+UMTpRWrv98saH5XH6xkBGSAWTRhUaB6mmyfyQ/f5pO4xicQAwagyYsgD
8y+lR8YZTiLpPFin3xMAYIrZuM/33iaBsDyCJEu0PwMMzADXdwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAX9ns8sKuIZuy/WemlGm93yxMgOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wM2Yw
NWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5MGVhMTEvM2I2YjE4ZjItNThlMS0z
MGNkLWIyNjMtZWE0M2I2MDMyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDNmMDVlYTItZWE1Yi00ZTJiLWFi
OWYtYzk1YjQ1OTBlYTExLzAzZjA1ZWEyLWVhNWItNGUyYi1hYjlmLWM5NWI0NTkw
ZWExMS5jcmwwHwYDVR0jBBgwFoAUrluZTbP2uJ2hUZR+wd/mkBCly6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wM2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTVi
NDU5MGVhMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnjM4AwQC
wB7AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIPoInGCguoH3Na9/x9afoOc5WQ/juXxvOa9ESvb/fMvZ3Ck
A+PCI0z//Jl3+piGqFXEoIkDLhf63sdwuT6pNQ9IBXTwp69GhSWj74/dmBcsu+vK
f2pB7fWmgpMDQQVyYhmnmpaxccGGvHi+qOYkf1XeO9Vmcnz7CMQlueVK+2KRuUO0
4Esisy2ZsEeFY92gxgvQRejMfyg7pFooWR2jVu+X+twMUjQCweFwfNy75p9W68Nf
Xr+Ir5bqsNjTyw/pSMkusVN0yRYSRuSnzqAu5e6l4pXM8EAhJ9VucB6MmjQjeSlz
FGBG87kIsw1/QUrZyhbrFaIXVsvOyvCvhPwOi9M=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:19:40 2025 by rpki-client