Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c0072ba-d9f5-39f9-bd0b-b7b03357e87b.roa
File: 5c0072ba-d9f5-39f9-bd0b-b7b03357e87b.roa (raw, json)
Hash identifier: oIiJNz8VfVzDZgMvVPlLTS9fpqMDIzJDR3+t/WK6lgU=
Subject key identifier: 4D:60:13:B8:5A:06:9B:FD:C7:41:05:8C:7E:7E:24:AB:D1:06:7F:18
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF4910CC73E670D87CC04E4
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c0072ba-d9f5-39f9-bd0b-b7b03357e87b.roa
Signing time: Fri 08 Nov 2024 15:05:03 +0000
ROA not before: Fri 08 Nov 2024 15:05:03 +0000
ROA not after: Thu 06 Feb 2025 15:05:03 +0000
asID: 81
IP address blocks: 204.84.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:91:0c:c7:3e:67:0d:87:cc:04:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:03 2024 GMT
Not After : Feb 6 15:05:03 2025 GMT
Subject: CN=db3c9c44-c260-416d-8128-9b8c6a8d95ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:75:55:37:86:6f:19:d8:cb:aa:91:42:66:
a8:e9:76:c2:64:72:52:17:62:1e:26:36:28:0e:39:
0e:0f:35:0f:6b:ce:11:c3:5b:b2:90:09:f0:42:60:
6b:4a:c1:13:35:9b:1e:67:e0:7c:d6:ca:5f:64:5c:
04:d8:3e:22:56:b2:f0:aa:cf:20:1d:c2:90:6a:86:
4a:f3:12:33:58:af:3f:ae:7d:02:9f:ae:0c:61:65:
b5:99:79:01:7d:a4:aa:82:e3:76:2f:45:c3:a5:f7:
a5:6b:88:60:04:b3:ce:b0:a8:63:ad:fb:96:58:12:
04:3d:fb:ac:25:e1:a1:1f:ef:96:32:23:5b:49:25:
e5:2f:fe:01:cd:51:9f:78:d7:08:1b:f9:b6:c0:16:
b7:01:72:53:96:49:0c:61:7e:2c:1f:e9:c3:4e:36:
a1:93:68:0e:7a:a2:1f:98:60:85:6d:08:a2:ed:b5:
8a:3c:6b:85:21:61:0a:f2:81:1b:8d:db:7d:c7:ad:
58:49:37:1e:1d:46:b7:68:b0:29:46:b3:bb:5e:d2:
75:d6:d2:df:10:9b:19:fc:a5:3b:e5:d4:61:28:ad:
2c:e8:6e:dd:7d:64:7d:5f:7c:c9:fe:19:46:e5:8e:
66:b3:cc:1d:15:46:b0:27:4e:7a:5f:a1:cd:59:5d:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:60:13:B8:5A:06:9B:FD:C7:41:05:8C:7E:7E:24:AB:D1:06:7F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5c0072ba-d9f5-39f9-bd0b-b7b03357e87b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:12:68:17:37:64:bc:77:0b:ad:05:c2:44:c6:3a:b4:a1:ea:
8a:eb:ca:46:70:d9:8e:b2:26:67:71:d1:6b:23:3a:f9:8b:79:
e1:15:1f:ae:7c:e9:49:1f:18:a8:05:72:50:93:40:2b:e8:0d:
1e:95:4a:e7:f0:f8:76:04:bf:18:ec:a4:38:3a:c0:f4:f0:03:
fe:7a:a3:29:7e:75:84:8f:33:36:0a:07:da:59:57:33:54:42:
0c:68:36:f7:5e:59:70:d4:f5:9f:0f:49:5d:c0:45:0a:1b:6e:
c4:b0:43:59:7b:2c:8c:06:d7:11:8f:61:d9:dd:b8:55:be:fb:
6b:8a:5c:08:ac:08:dc:49:47:cc:ff:ea:07:3b:e7:4d:ca:89:
11:eb:e1:3d:e7:53:db:b2:62:19:89:0d:55:e4:3c:3e:81:86:
94:03:66:12:c1:df:29:1d:cf:15:c0:fe:77:f0:d5:6e:83:a3:
3b:69:26:fb:72:61:ac:3b:2f:1a:d7:4b:3f:6a:cc:b8:85:4c:
f3:af:b0:5a:8b:a7:4c:7f:42:73:13:32:0e:12:71:f2:2c:ae:
b8:31:7b:6b:d5:a1:6b:64:86:32:c6:b1:c9:ab:96:38:27:e6:
49:a8:28:f3:9a:6f:fb:96:7e:1b:85:96:97:bf:5b:f8:71:06:
3d:ab:ba:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9JEMxz5nDYfMBOQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwM1oXDTI1MDIwNjE1MDUwM1owLzEtMCsGA1UEAxMk
ZGIzYzljNDQtYzI2MC00MTZkLTgxMjgtOWI4YzZhOGQ5NWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HJ1VTeGbxnYy6qRQmao6XbCZHJSF2IeJjYo
DjkODzUPa84Rw1uykAnwQmBrSsETNZseZ+B81spfZFwE2D4iVrLwqs8gHcKQaoZK
8xIzWK8/rn0Cn64MYWW1mXkBfaSqguN2L0XDpfela4hgBLPOsKhjrfuWWBIEPfus
JeGhH++WMiNbSSXlL/4BzVGfeNcIG/m2wBa3AXJTlkkMYX4sH+nDTjahk2gOeqIf
mGCFbQii7bWKPGuFIWEK8oEbjdt9x61YSTceHUa3aLApRrO7XtJ11tLfEJsZ/KU7
5dRhKK0s6G7dfWR9X3zJ/hlG5Y5ms8wdFUawJ056X6HNWV1PIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1gE7haBpv9x0EFjH5+JKvRBn8YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWMwMDcyYmEtZDlmNS0z
OWY5LWJkMGItYjdiMDMzNTdlODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzFRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUSaBc3ZLx3C60FwkTGOrSh6orrykZw2Y6yJmdx0WsjOvmLeeEVH658
6UkfGKgFclCTQCvoDR6VSufw+HYEvxjspDg6wPTwA/56oyl+dYSPMzYKB9pZVzNU
QgxoNvdeWXDU9Z8PSV3ARQobbsSwQ1l7LIwG1xGPYdnduFW++2uKXAisCNxJR8z/
6gc7503KiRHr4T3nU9uyYhmJDVXkPD6BhpQDZhLB3ykdzxXA/nfw1W6DoztpJvty
Yaw7LxrXSz9qzLiFTPOvsFqLp0x/QnMTMg4ScfIsrrgxe2vVoWtkhjLGscmrljgn
5kmoKPOab/uWfhuFlpe/W/hxBj2runA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:05 2025 by rpki-client