Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa
File: afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa (raw, json)
Hash identifier: q4SyFhCZFoEfPfU0oYSvi/MbQ+fqsfK2FQf6mzeIOKc=
Subject key identifier: FF:E4:9F:2D:E8:18:71:1F:62:C5:35:74:40:42:8F:03:83:C4:CF:A6
Certificate issuer: /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial: 010D0C9F432858429FD28352F46F1777DC46F800
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa
Signing time: Fri 21 Jul 2023 21:22:57 +0000
ROA not before: Fri 21 Jul 2023 21:22:57 +0000
ROA not after: Thu 19 Oct 2023 21:22:57 +0000
asID: 397735
IP address blocks: 198.175.20.0/24 maxlen: 24
198.175.21.0/24 maxlen: 24
198.175.22.0/24 maxlen: 24
198.175.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9f:d2:83:52:f4:6f:17:77:dc:46:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Validity
Not Before: Jul 21 21:22:57 2023 GMT
Not After : Oct 19 21:22:57 2023 GMT
Subject: CN=cd46d725-f5ba-4713-8e8f-a877b6e3fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:37:5c:89:e9:3f:74:fa:5f:db:79:8e:5a:
e6:5f:01:6c:8f:20:2e:2d:8f:32:8f:dc:49:15:19:
15:d5:e7:16:27:8d:f9:be:4d:4a:47:01:36:d7:09:
c4:57:f4:bc:df:42:a2:76:2b:ba:0e:80:e9:89:46:
c3:73:2c:a8:ae:65:19:27:c2:c1:cd:a9:b3:89:e8:
c7:4d:e7:17:09:33:2d:4a:9e:5e:db:7a:fb:13:30:
32:6d:9a:6f:d7:99:c1:c1:82:99:7d:7e:63:8f:d6:
f3:e6:ae:29:af:da:f5:1b:58:29:df:83:3a:a3:32:
38:bc:21:dc:31:1b:0e:f7:86:7a:41:88:bb:90:e6:
cb:2e:18:09:dd:e6:21:cc:e9:f6:60:c4:d2:8c:68:
97:35:7c:b7:e4:59:d0:a6:88:88:5d:6f:21:67:89:
2f:cf:f4:ad:8d:6d:e0:e1:60:7f:bb:da:80:b1:c5:
e5:52:3c:d4:fe:15:e7:20:b5:cf:c9:25:02:70:e5:
1f:d5:fd:37:6e:6e:61:0e:2a:82:b6:de:9a:07:7e:
d7:fb:a7:2b:da:f1:78:85:2d:68:d3:a0:b6:66:e8:
60:f9:3f:7c:4e:5d:21:72:9d:dc:59:40:20:f6:1c:
7d:37:85:55:e5:a7:36:b3:61:02:5c:9e:3f:97:bc:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:9F:2D:E8:18:71:1F:62:C5:35:74:40:42:8F:03:83:C4:CF:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
X509v3 Authority Key Identifier:
keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
sbgp-ipAddrBlock: critical
IPv4:
198.175.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5e:87:7f:81:e1:1f:ac:8a:c1:6c:25:38:cb:ac:4b:d5:1d:
07:23:eb:5a:21:7d:73:3f:81:11:b1:f2:fc:16:5e:33:64:a1:
f2:fd:07:3e:27:1f:73:30:90:9d:24:cd:42:75:a6:d7:68:2a:
ff:63:ed:b9:4c:52:46:3d:97:0a:19:dd:02:11:16:f9:7f:93:
4d:ed:61:b9:2d:39:49:f3:d5:ae:64:3f:ad:bb:59:99:17:57:
b9:01:af:b1:67:12:9b:23:37:2a:0a:c2:d0:ae:92:7b:35:56:
ff:92:66:d1:89:6d:8e:99:89:1f:5f:b4:aa:e0:fc:0c:aa:f6:
0f:1f:28:60:50:e2:08:d1:8a:34:bc:e7:16:d5:fa:11:bb:22:
36:97:58:d1:ff:32:75:6e:e6:e8:06:54:72:8e:d5:76:68:41:
66:74:37:ad:64:86:a6:73:01:61:12:9c:f3:14:c9:91:57:95:
97:b1:6b:c5:1b:96:0c:1d:91:03:38:d1:f5:03:d2:d2:34:e0:
d3:c1:d0:67:d1:1d:77:91:84:d4:95:21:82:ff:4a:30:13:53:
d2:44:b3:0e:aa:2f:5e:01:8a:0c:a6:a1:9f:51:ff:64:3d:6f:
fd:13:2a:d6:67:0b:2a:68:5c:08:1c:0a:9f:12:50:7a:22:91:
49:f0:5c:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKf0oNS9G8Xd9xG+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjcxOWM1ZjItNTgxOS00OTcyLWI0MzAtOWQ3NmViODhj
YjM2MB4XDTIzMDcyMTIxMjI1N1oXDTIzMTAxOTIxMjI1N1owLzEtMCsGA1UEAxMk
Y2Q0NmQ3MjUtZjViYS00NzEzLThlOGYtYTg3N2I2ZTNmYWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaQ3XInpP3T6X9t5jlrmXwFsjyAuLY8yj9xJ
FRkV1ecWJ435vk1KRwE21wnEV/S830Kidiu6DoDpiUbDcyyormUZJ8LBzamziejH
TecXCTMtSp5e23r7EzAybZpv15nBwYKZfX5jj9bz5q4pr9r1G1gp34M6ozI4vCHc
MRsO94Z6QYi7kObLLhgJ3eYhzOn2YMTSjGiXNXy35FnQpoiIXW8hZ4kvz/StjW3g
4WB/u9qAscXlUjzU/hXnILXPySUCcOUf1f03bm5hDiqCtt6aB37X+6cr2vF4hS1o
06C2Zuhg+T98Tl0hcp3cWUAg9hx9N4VV5ac2s2ECXJ4/l7yiuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/kny3oGHEfYsU1dEBCjwODxM+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5
YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2ZWI4OGNiMzYvYWZiZTVhZTktNGNhMy0z
YWU0LWFjMzYtMzY4N2M2MTI2YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjcxOWM1ZjItNTgxOS00OTcyLWI0
MzAtOWQ3NmViODhjYjM2LzY3MTljNWYyLTU4MTktNDk3Mi1iNDMwLTlkNzZlYjg4
Y2IzNi5jcmwwHwYDVR0jBBgwFoAU0huBRRStte2piy2/HvpBB1BUquwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2
ZWI4OGNiMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxq8UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1eh3+B4R+sisFsJTjLrEvVHQcj61ohfXM/gRGx8vwWXjNkofL9Bz4n
H3MwkJ0kzUJ1ptdoKv9j7blMUkY9lwoZ3QIRFvl/k03tYbktOUnz1a5kP627WZkX
V7kBr7FnEpsjNyoKwtCukns1Vv+SZtGJbY6ZiR9ftKrg/Ayq9g8fKGBQ4gjRijS8
5xbV+hG7IjaXWNH/MnVu5ugGVHKO1XZoQWZ0N61khqZzAWESnPMUyZFXlZexa8Ub
lgwdkQM40fUD0tI04NPB0GfRHXeRhNSVIYL/SjATU9JEsw6qL14BigymoZ9R/2Q9
b/0TKtZnCypoXAgcCp8SUHoikUnwXFo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:57 2025 by rpki-client