Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/fbe5b2c5-2056-34f8-9fd9-fbdd7fee803c.roa
File: fbe5b2c5-2056-34f8-9fd9-fbdd7fee803c.roa (raw, json)
Hash identifier: 9C5LLml7VZTaXt8SRKB9dXL/8xzoWeoACotZZoJl2uY=
Subject key identifier: 99:24:71:6B:7D:9B:41:A2:62:92:08:F5:A3:4A:40:EF:B5:DF:03:1F
Certificate issuer: /CN=50387df9-d607-4f34-b9cc-5e58269883cf
Certificate serial: 010D0C9F432858476170CAA554591DE88E69F340
Authority key identifier: 4D:C8:A1:E2:8A:08:81:2C:49:EA:F8:18:50:83:6D:3D:A4:86:C9:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/fbe5b2c5-2056-34f8-9fd9-fbdd7fee803c.roa
Signing time: Mon 30 Sep 2024 01:00:31 +0000
ROA not before: Mon 30 Sep 2024 01:00:31 +0000
ROA not after: Sun 29 Dec 2024 02:00:31 +0000
asID: 20473
IP address blocks: 209.250.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:61:70:ca:a5:54:59:1d:e8:8e:69:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50387df9-d607-4f34-b9cc-5e58269883cf
Validity
Not Before: Sep 30 01:00:31 2024 GMT
Not After : Dec 29 02:00:31 2024 GMT
Subject: CN=243257ff-bad2-4c19-b54f-2b193151ced8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:a4:f7:32:75:ec:33:8c:44:25:24:15:42:
76:20:7e:4a:04:70:52:94:35:c7:de:38:6c:4d:6d:
a6:49:cb:00:31:a5:3e:80:08:a9:68:e5:e0:60:6d:
96:0c:1e:13:52:bc:8a:93:bc:99:26:3a:a2:af:7b:
f7:c1:03:3e:da:36:2a:de:68:7c:2c:c1:0c:fe:03:
ec:f8:d3:96:61:3f:8e:cb:3f:dd:33:42:15:1f:14:
aa:d8:cb:3f:f6:7e:35:2a:21:1c:fa:bb:02:f6:30:
14:03:5c:cc:0e:40:db:25:dc:27:fa:b0:b6:43:62:
a5:94:c2:6b:e6:a4:17:94:17:ac:51:84:d7:4f:ba:
bf:40:5c:35:6e:3c:b3:17:dc:8d:08:d0:bf:95:36:
aa:8d:92:2c:64:65:53:2d:31:66:44:86:63:3f:43:
43:27:9e:31:d7:19:95:3b:ad:79:f8:58:d8:4c:5c:
b0:ee:6d:3b:96:90:71:b4:9e:43:ff:8a:f9:66:fc:
61:c1:0b:55:76:fc:5f:3b:ee:53:4a:88:50:cb:10:
df:7b:92:f3:7e:ea:87:fd:89:56:ac:61:40:ea:a8:
cf:c3:92:a7:d5:69:a4:08:3d:89:1a:6c:0c:26:a6:
a3:35:2e:3a:4f:3c:aa:0b:d7:97:9d:76:a7:08:d8:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:24:71:6B:7D:9B:41:A2:62:92:08:F5:A3:4A:40:EF:B5:DF:03:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/fbe5b2c5-2056-34f8-9fd9-fbdd7fee803c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/50387df9-d607-4f34-b9cc-5e58269883cf.crl
X509v3 Authority Key Identifier:
keyid:4D:C8:A1:E2:8A:08:81:2C:49:EA:F8:18:50:83:6D:3D:A4:86:C9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:c2:0b:f3:8b:2f:ce:3c:54:46:a4:20:46:74:82:52:45:7b:
5c:b4:03:78:9a:8b:3f:50:07:e2:de:ed:aa:d0:d4:bf:2e:c3:
fc:bd:2f:d2:07:ea:f5:c4:3f:91:9e:d1:41:39:86:ea:28:1e:
c9:c0:f3:29:57:a3:8b:b9:95:43:cd:f4:08:7e:c0:bf:b8:bc:
64:72:48:7a:99:d1:c5:c3:5a:02:8c:71:bc:13:53:ce:a8:e7:
32:b1:de:1e:43:fb:61:19:10:04:50:ff:c6:23:89:4b:d5:1d:
47:86:74:e0:48:17:bd:e4:a0:e5:3d:36:a5:1b:93:6c:2d:13:
d6:fc:61:fc:ca:60:47:4b:46:83:49:79:9a:f3:f8:ca:ea:89:
2a:f6:ae:c2:38:51:9d:fb:1b:4c:38:66:f6:52:d7:d6:ff:bc:
94:5a:2c:43:4d:7a:08:31:63:69:83:9d:66:4e:b0:9b:4c:09:
f5:bd:b2:9e:2a:36:58:c0:ea:28:e3:9d:f3:09:a1:c3:3e:2b:
85:ab:59:45:61:b0:8c:c9:19:54:72:f3:34:0e:db:eb:a7:be:
b9:9b:7f:b6:90:6b:cb:6f:c7:9b:cb:1c:13:da:f8:df:04:3b:
35:97:77:bf:b5:86:d5:8b:cc:4d:c4:84:28:f6:ac:2e:25:43:
25:f9:97:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcMqlVFkd6I5p80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAzODdkZjktZDYwNy00ZjM0LWI5Y2MtNWU1ODI2OTg4
M2NmMB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
MjQzMjU3ZmYtYmFkMi00YzE5LWI1NGYtMmIxOTMxNTFjZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphmk9zJ17DOMRCUkFUJ2IH5KBHBSlDXH3jhs
TW2mScsAMaU+gAipaOXgYG2WDB4TUryKk7yZJjqir3v3wQM+2jYq3mh8LMEM/gPs
+NOWYT+Oyz/dM0IVHxSq2Ms/9n41KiEc+rsC9jAUA1zMDkDbJdwn+rC2Q2KllMJr
5qQXlBesUYTXT7q/QFw1bjyzF9yNCNC/lTaqjZIsZGVTLTFmRIZjP0NDJ54x1xmV
O615+FjYTFyw7m07lpBxtJ5D/4r5ZvxhwQtVdvxfO+5TSohQyxDfe5LzfuqH/YlW
rGFA6qjPw5Kn1WmkCD2JGmwMJqajNS46TzyqC9eXnXanCNhPxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkkcWt9m0GiYpII9aNKQO+13wMfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MDM4
N2RmOS1kNjA3LTRmMzQtYjljYy01ZTU4MjY5ODgzY2YvZmJlNWIyYzUtMjA1Ni0z
NGY4LTlmZDktZmJkZDdmZWU4MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTAzODdkZjktZDYwNy00ZjM0LWI5
Y2MtNWU1ODI2OTg4M2NmLzUwMzg3ZGY5LWQ2MDctNGYzNC1iOWNjLTVlNTgyNjk4
ODNjZi5jcmwwHwYDVR0jBBgwFoAUTcih4ooIgSxJ6vgYUINtPaSGya0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MDM4N2RmOS1kNjA3LTRmMzQtYjljYy01ZTU4
MjY5ODgzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fpBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/CC/OLL848VEakIEZ0glJFe1y0A3iaiz9QB+Le7arQ1L8uw/y9L9IH
6vXEP5Ge0UE5huooHsnA8ylXo4u5lUPN9Ah+wL+4vGRySHqZ0cXDWgKMcbwTU86o
5zKx3h5D+2EZEARQ/8YjiUvVHUeGdOBIF73koOU9NqUbk2wtE9b8YfzKYEdLRoNJ
eZrz+MrqiSr2rsI4UZ37G0w4ZvZS19b/vJRaLENNeggxY2mDnWZOsJtMCfW9sp4q
NljA6ijjnfMJocM+K4WrWUVhsIzJGVRy8zQO2+unvrmbf7aQa8tvx5vLHBPa+N8E
OzWXd7+1htWLzE3EhCj2rC4lQyX5l24=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:10:45 2025 by rpki-client