Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/97f88796-7ebf-3a81-a5e8-517970fb6e31.roa
File: 97f88796-7ebf-3a81-a5e8-517970fb6e31.roa (raw, json)
Hash identifier: IxU/yYwHtchLUIA10+GJrilZA+kabfRUvvSZSEFDjzI=
Subject key identifier: 3D:2F:F7:99:00:C4:7A:52:1A:1B:7C:80:D0:41:48:38:C3:0F:98:56
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F43285848090FB874669FB3C415E01980
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/97f88796-7ebf-3a81-a5e8-517970fb6e31.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 63351
IP address blocks: 74.112.232.0/21 maxlen: 21
74.116.95.0/24 maxlen: 24
199.19.28.0/22 maxlen: 22
208.78.48.0/21 maxlen: 21
208.91.192.0/22 maxlen: 22
2604:25c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b8:74:66:9f:b3:c4:15:e0:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=6ffccaa2-f79b-43d1-86fb-38474fd95b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:42:02:68:00:b6:58:eb:1a:f5:3f:3b:ad:
28:55:0f:55:a6:c4:48:a5:c4:2d:ad:b6:42:27:16:
aa:da:85:54:96:3c:e9:f5:d9:df:83:f6:0e:61:cd:
76:f4:98:cf:0a:08:71:95:f3:52:c5:84:09:73:9d:
b2:fa:b6:7c:a8:2e:f9:8c:f7:fe:a5:da:84:87:d0:
90:2e:6b:ab:19:90:39:40:92:1a:10:4d:76:4c:23:
88:4b:2b:c1:93:25:68:ac:d9:7c:1c:4d:81:0a:77:
bf:e1:2d:31:b6:55:f7:24:ad:73:a5:51:f7:f5:d8:
9b:75:74:38:9c:2d:87:f9:c7:7c:2c:09:c0:b2:97:
05:94:66:dd:5a:b5:f6:88:6c:50:1e:e0:ae:a9:61:
79:f1:c0:d2:19:eb:f5:1c:fe:61:5a:2a:4f:21:23:
96:bb:a7:b2:9e:14:6b:05:41:7f:1c:88:3a:2f:ed:
3d:8b:b1:d5:a5:c9:cb:43:19:d8:13:f4:19:86:e6:
5e:10:9b:33:b5:33:dd:91:9e:cf:18:7f:6b:64:e2:
03:ce:96:b1:56:a2:1c:a0:22:55:d0:06:b1:44:93:
08:ac:9a:de:80:67:77:c0:98:b8:7f:02:cc:3f:b7:
65:21:36:5e:a4:8c:ea:e5:5a:ae:db:d9:42:b1:52:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:F7:99:00:C4:7A:52:1A:1B:7C:80:D0:41:48:38:C3:0F:98:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/97f88796-7ebf-3a81-a5e8-517970fb6e31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.232.0/21
74.116.95.0/24
199.19.28.0/22
208.78.48.0/21
208.91.192.0/22
IPv6:
2604:25c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:3f:9f:3e:81:6d:db:5a:4f:0b:01:0c:29:13:85:08:9e:6e:
bf:b3:ed:a9:50:0f:2c:87:be:ff:68:b0:d2:80:b2:00:62:74:
9b:cb:e2:66:d6:c3:35:fa:a9:11:95:49:d4:63:19:bf:e0:45:
67:be:3d:47:7d:08:21:23:6e:d9:f1:28:ac:a4:44:4c:c9:c2:
24:e1:5d:68:30:39:12:91:c3:98:ad:47:b1:e7:0c:d6:d4:18:
58:03:2d:2d:1a:6c:2a:a8:b7:e2:19:d6:3a:a5:a1:b1:2b:03:
76:96:e4:4b:db:96:9b:f4:22:08:63:e6:50:af:9a:fd:de:06:
87:ed:7a:ec:d6:50:b8:03:86:14:cf:cc:6e:f4:94:68:a6:83:
c4:36:ed:40:52:49:89:46:a1:7c:e9:f8:b1:d6:af:a0:fd:b6:
75:d1:7d:66:74:99:fd:7e:7b:40:fa:f1:be:1b:a7:7b:49:59:
cf:29:07:cb:c4:ac:1f:33:7c:26:f5:ed:a9:07:3c:21:ce:6c:
12:9b:a7:93:10:25:c8:f3:06:e6:ef:5b:f5:12:1a:9f:ee:71:
05:a2:19:15:50:1b:25:e7:d6:15:4b:cc:5f:59:db:12:2a:ed:
0c:b2:e7:91:32:df:3b:be:d3:d3:e8:ac:9d:8b:2e:ab:8e:27:
65:43:28:46
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEgJD7h0Zp+zxBXgGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
NmZmY2NhYTItZjc5Yi00M2QxLTg2ZmItMzg0NzRmZDk1YjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE5CAmgAtljrGvU/O60oVQ9VpsRIpcQtrbZC
Jxaq2oVUljzp9dnfg/YOYc129JjPCghxlfNSxYQJc52y+rZ8qC75jPf+pdqEh9CQ
LmurGZA5QJIaEE12TCOISyvBkyVorNl8HE2BCne/4S0xtlX3JK1zpVH39dibdXQ4
nC2H+cd8LAnAspcFlGbdWrX2iGxQHuCuqWF58cDSGev1HP5hWipPISOWu6eynhRr
BUF/HIg6L+09i7HVpcnLQxnYE/QZhuZeEJsztTPdkZ7PGH9rZOIDzpaxVqIcoCJV
0AaxRJMIrJregGd3wJi4fwLMP7dlITZepIzq5Vqu29lCsVKtrwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFD0v95kAxHpSGht8gNBBSDjDD5hWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvOTdmODg3OTYtN2ViZi0z
YTgxLWE1ZTgtNTE3OTcwZmI2ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDSnDoAwQA
SnRfAwQCxxMcAwQD0E4wAwQC0FvAMA0EAgACMAcDBQAmBCXAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFA/
nz6BbdtaTwsBDCkThQiebr+z7alQDyyHvv9osNKAsgBidJvL4mbWwzX6qRGVSdRj
Gb/gRWe+PUd9CCEjbtnxKKykREzJwiThXWgwORKRw5itR7HnDNbUGFgDLS0abCqo
t+IZ1jqlobErA3aW5Evblpv0Ighj5lCvmv3eBofteuzWULgDhhTPzG70lGimg8Q2
7UBSSYlGoXzp+LHWr6D9tnXRfWZ0mf1+e0D68b4bp3tJWc8pB8vErB8zfCb17akH
PCHObBKbp5MQJcjzBubvW/USGp/ucQWiGRVQGyXn1hVLzF9Z2xIq7Qyy55Ey3zu+
09PorJ2LLquOJ2VDKEY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:10:23 2025 by rpki-client