Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f4e2f1d4-d961-3510-9d89-9aee4dfc191d.roa
File: f4e2f1d4-d961-3510-9d89-9aee4dfc191d.roa (raw, json)
Hash identifier: +ZIKS/ORe7X58mAGNRkKaa6YMCPE6g38igcpf2pKd20=
Subject key identifier: 39:B9:10:8B:21:4C:42:F0:D9:11:05:EF:0B:47:02:42:C8:82:50:6E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC02BCCFBC5BCFDDEA010
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f4e2f1d4-d961-3510-9d89-9aee4dfc191d.roa
Signing time: Wed 16 Oct 2024 14:26:36 +0000
ROA not before: Wed 16 Oct 2024 14:26:36 +0000
ROA not after: Tue 14 Jan 2025 15:26:36 +0000
asID: 32711
IP address blocks: 198.85.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c0:2b:cc:fb:c5:bc:fd:de:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:36 2024 GMT
Not After : Jan 14 15:26:36 2025 GMT
Subject: CN=bc91cf12-2172-430b-b36a-1393fb7fe883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:cf:d5:49:b2:52:25:c8:9f:9f:66:aa:4c:
7c:dc:c7:d9:2c:ed:fb:a7:41:e2:2c:d2:33:65:a6:
af:2b:1b:31:61:5c:16:60:08:b9:ba:09:7d:49:ce:
73:63:2d:25:0f:5f:c6:99:b0:c6:0f:4b:e1:21:a5:
33:ab:a3:24:27:51:58:9c:ee:d7:e3:7b:86:a8:e2:
2d:e7:90:60:b4:ba:27:c9:21:3c:9d:7c:15:9f:89:
0b:a0:8b:0a:8f:ef:74:09:4f:49:38:93:8c:80:67:
af:c4:bc:bf:f9:87:46:a5:fa:20:73:be:45:96:21:
5b:9d:9c:b9:83:41:2e:3c:71:f1:31:16:aa:4e:e7:
5b:7a:32:e8:60:97:5d:5e:31:4e:ae:a9:0c:4b:52:
0c:fc:20:8c:03:07:ef:de:87:3e:e4:55:c3:10:bd:
07:e3:a0:8a:a0:f7:4f:a1:6e:96:e9:16:6c:a2:84:
c9:f5:31:87:d6:92:1b:dc:11:be:63:51:d5:b6:f1:
a9:cb:a2:99:74:5b:e5:de:42:9a:65:b4:af:bf:d8:
d2:42:80:8e:71:d1:8a:ea:8e:4e:63:75:98:ca:26:
eb:8c:55:79:59:25:d1:82:10:a6:1e:aa:dd:f5:35:
db:3b:e0:eb:95:f2:e3:85:9d:15:bf:39:ea:d1:1b:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:10:8B:21:4C:42:F0:D9:11:05:EF:0B:47:02:42:C8:82:50:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f4e2f1d4-d961-3510-9d89-9aee4dfc191d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.85.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:96:c4:f7:55:6f:08:40:24:70:90:05:40:97:32:d5:17:8d:
85:b7:a6:65:37:d6:56:ac:9c:8e:bd:63:a1:0a:eb:fb:7e:20:
33:b5:a1:09:ae:72:26:a2:af:b0:2f:7e:e8:b2:41:aa:72:40:
20:f2:f7:4e:08:c0:eb:d0:9b:40:bc:64:d3:78:a1:53:2c:31:
de:b1:97:0d:9f:2a:9f:24:0f:13:32:41:39:cc:13:e2:76:43:
98:bc:b7:0d:88:26:a0:c2:f1:7c:89:b5:5d:23:41:4a:e0:8c:
05:ac:12:c9:1b:96:96:d3:f9:c1:33:78:76:0d:2e:bb:88:b0:
a5:47:68:25:13:3e:7c:e5:03:8b:61:9f:b4:61:b6:b7:44:54:
85:f3:91:69:18:41:60:fc:af:f6:e1:e2:4e:91:1d:b6:75:85:
f4:29:39:81:e9:7d:30:39:c9:f7:3c:48:4d:cc:9d:37:6e:e6:
c9:c3:75:c2:d7:22:d9:56:d5:5b:8f:6d:e0:73:3f:bb:3f:1d:
89:60:69:2f:e5:67:95:a1:84:2a:f4:2c:25:10:bf:c8:0d:a3:
0d:ae:4c:59:11:1f:cf:cb:39:c9:67:4a:62:9c:07:5a:bd:40:
30:86:fd:92:f6:7e:c8:99:8a:f2:9d:03:27:ca:68:d1:bb:58:
3f:61:6c:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq8ArzPvFvP3eoBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNloXDTI1MDExNDE1MjYzNlowLzEtMCsGA1UEAxMk
YmM5MWNmMTItMjE3Mi00MzBiLWIzNmEtMTM5M2ZiN2ZlODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX3P1UmyUiXIn59mqkx83MfZLO37p0HiLNIz
ZaavKxsxYVwWYAi5ugl9Sc5zYy0lD1/GmbDGD0vhIaUzq6MkJ1FYnO7X43uGqOIt
55BgtLonySE8nXwVn4kLoIsKj+90CU9JOJOMgGevxLy/+YdGpfogc75FliFbnZy5
g0EuPHHxMRaqTudbejLoYJddXjFOrqkMS1IM/CCMAwfv3oc+5FXDEL0H46CKoPdP
oW6W6RZsooTJ9TGH1pIb3BG+Y1HVtvGpy6KZdFvl3kKaZbSvv9jSQoCOcdGK6o5O
Y3WYyibrjFV5WSXRghCmHqrd9TXbO+DrlfLjhZ0Vvznq0RsmywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDm5EIshTELw2REF7wtHAkLIglBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjRlMmYxZDQtZDk2MS0z
NTEwLTlkODktOWFlZTRkZmMxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKWxPdVbwhAJHCQBUCXMtUXjYW3pmU31lasnI69Y6EK6/t+IDO1oQmu
ciair7AvfuiyQapyQCDy904IwOvQm0C8ZNN4oVMsMd6xlw2fKp8kDxMyQTnME+J2
Q5i8tw2IJqDC8XyJtV0jQUrgjAWsEskblpbT+cEzeHYNLruIsKVHaCUTPnzlA4th
n7RhtrdEVIXzkWkYQWD8r/bh4k6RHbZ1hfQpOYHpfTA5yfc8SE3MnTdu5snDdcLX
ItlW1VuPbeBzP7s/HYlgaS/lZ5WhhCr0LCUQv8gNow2uTFkRH8/LOclnSmKcB1q9
QDCG/ZL2fsiZivKdAyfKaNG7WD9hbIw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:00 2025 by rpki-client