Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/c119cc04-50b3-38e3-a98b-c68e2e7b1642.roa
File: c119cc04-50b3-38e3-a98b-c68e2e7b1642.roa (raw, json)
Hash identifier: 8LKJb7ZYB+5sJKpwLJ3I9uZj48IGehtdezMxaxwR2Ok=
Subject key identifier: 77:2D:0E:D9:3F:22:00:C7:8B:BB:D3:7B:94:09:D8:41:D7:94:68:D0
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858482A8FE0F1F30CB10FA4F14840
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/c119cc04-50b3-38e3-a98b-c68e2e7b1642.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 394437
IP address blocks: 206.198.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e0:f1:f3:0c:b1:0f:a4:f1:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=d36f4a9f-67c6-4f7e-8aff-d364eedf8a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:82:87:9b:42:0e:15:fb:5c:06:ff:30:b3:
b3:e2:b1:68:ed:9a:25:1f:81:e3:fd:de:89:6f:9f:
3c:8e:db:59:2f:68:e6:d4:a5:77:0f:12:46:11:d9:
cf:af:6c:9a:af:c5:27:fe:ce:57:94:b8:2e:d3:52:
98:c9:4d:0a:b0:ee:28:f3:6a:ba:30:a4:a5:8e:bf:
90:3c:5f:e4:aa:6a:e0:bf:88:8b:e0:90:70:76:e4:
92:0d:be:b9:35:d8:ec:5a:7a:be:68:4c:3d:a8:1c:
28:d3:5c:60:90:6e:07:24:bc:a5:b2:16:9a:95:40:
ab:14:d8:1b:04:05:61:4a:79:82:b9:46:69:2b:28:
c3:e5:4c:cd:e1:c5:42:2c:83:2a:3b:8e:b5:14:72:
10:62:11:51:72:45:fc:47:5b:77:23:24:d7:59:06:
7a:c1:6f:02:c1:33:f3:02:22:08:f9:a4:05:e6:c7:
8d:eb:08:e2:d9:32:60:ef:4d:95:43:21:46:86:b5:
1d:46:e0:5f:eb:61:d3:52:34:cb:6e:ae:6a:4a:06:
e0:2f:89:b6:9f:8b:3d:01:34:b3:5c:7f:37:63:86:
f5:b7:c2:b8:46:ae:c8:dc:b9:45:b6:cf:08:9e:48:
70:52:79:75:1b:f4:bb:fb:80:6c:1d:be:3e:31:04:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:0E:D9:3F:22:00:C7:8B:BB:D3:7B:94:09:D8:41:D7:94:68:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/c119cc04-50b3-38e3-a98b-c68e2e7b1642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.198.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:10:4c:56:95:f5:fc:26:5e:fc:41:c6:21:b2:68:2b:74:9a:
ae:57:ab:6c:23:24:89:ff:aa:2a:1e:7f:82:20:2f:bf:8c:b5:
22:48:1a:e0:a8:8c:87:c3:0f:90:21:fb:eb:cc:89:0a:e3:d2:
cc:7d:95:29:55:1c:64:d0:d5:36:9b:dc:56:a9:bb:6e:73:f4:
23:17:84:c2:a2:d2:cd:1f:90:9f:50:ef:da:78:a7:28:58:85:
fc:05:6a:c6:3b:f7:f2:bc:db:89:74:e4:76:59:c6:68:b1:8b:
78:6a:44:7e:1f:13:0c:ac:09:f0:3a:4f:cf:05:25:48:78:2e:
47:06:7f:c5:68:a7:62:69:01:7a:7c:ce:14:cc:6e:d0:1d:f3:
59:1e:c8:05:c6:33:4b:20:e8:62:cc:07:38:3d:ce:f2:49:bf:
74:d7:7d:8e:7a:fc:df:75:1e:cc:a4:24:bd:dc:0f:d6:9f:01:
90:8c:7c:70:c1:3c:87:ff:4b:12:32:85:63:79:3b:8a:10:6a:
f6:91:b7:7c:03:e7:0c:34:47:93:27:3e:67:fb:40:78:b2:90:
be:32:77:8a:29:c8:91:fa:8e:af:bb:9d:cd:75:09:4c:5d:67:
d2:ba:8b:16:e4:69:60:93:72:bd:ec:67:34:4e:36:64:aa:ac:
bb:e8:84:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj+Dx8wyxD6TxSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
ZDM2ZjRhOWYtNjdjNi00ZjdlLThhZmYtZDM2NGVlZGY4YTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZSCh5tCDhX7XAb/MLOz4rFo7ZolH4Hj/d6J
b588jttZL2jm1KV3DxJGEdnPr2yar8Un/s5XlLgu01KYyU0KsO4o82q6MKSljr+Q
PF/kqmrgv4iL4JBwduSSDb65NdjsWnq+aEw9qBwo01xgkG4HJLylshaalUCrFNgb
BAVhSnmCuUZpKyjD5UzN4cVCLIMqO461FHIQYhFRckX8R1t3IyTXWQZ6wW8CwTPz
AiII+aQF5seN6wji2TJg702VQyFGhrUdRuBf62HTUjTLbq5qSgbgL4m2n4s9ATSz
XH83Y4b1t8K4Rq7I3LlFts8InkhwUnl1G/S7+4BsHb4+MQSZlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHctDtk/IgDHi7vTe5QJ2EHXlGjQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYzExOWNjMDQtNTBiMy0z
OGUzLWE5OGItYzY4ZTJlN2IxNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzsbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoQTFaV9fwmXvxBxiGyaCt0mq5Xq2wjJIn/qioef4IgL7+MtSJIGuCo
jIfDD5Ah++vMiQrj0sx9lSlVHGTQ1Tab3Fapu25z9CMXhMKi0s0fkJ9Q79p4pyhY
hfwFasY79/K824l05HZZxmixi3hqRH4fEwysCfA6T88FJUh4LkcGf8Vop2JpAXp8
zhTMbtAd81keyAXGM0sg6GLMBzg9zvJJv3TXfY56/N91HsykJL3cD9afAZCMfHDB
PIf/SxIyhWN5O4oQavaRt3wD5ww0R5MnPmf7QHiykL4yd4opyJH6jq+7nc11CUxd
Z9K6ixbkaWCTcr3sZzRONmSqrLvohGA=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:50:42 2025 by rpki-client