Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/fff55382-8368-3f48-bdd7-a73f2a28d32f.roa
File: fff55382-8368-3f48-bdd7-a73f2a28d32f.roa (raw, json)
Hash identifier: 8Iu5Lz4YdSdYci4DZPLBeUgl1ShWm57pFV/CWtbvbGE=
Subject key identifier: E2:BC:F8:DF:69:F1:55:1D:11:23:73:26:55:DF:A0:E9:31:43:85:C4
Certificate issuer: /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial: 010D0C9F43285841E46D8E1259729F689CBD8F80
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/fff55382-8368-3f48-bdd7-a73f2a28d32f.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Mon 03 Jul 2023 17:12:20 +0000
asID: 398646
IP address blocks: 23.130.97.0/24 maxlen: 24
23.130.96.0/24 maxlen: 24
204.10.89.0/24 maxlen: 24
2602:fe6b:1000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:8e:12:59:72:9f:68:9c:bd:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 3 17:12:20 2023 GMT
Subject: CN=d4e6041e-b7b1-4691-9c79-aa1dbcb6ec33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:31:fc:71:d1:87:00:e5:c0:99:2c:09:8a:
a8:47:1a:c6:3d:d3:45:04:42:77:5b:08:2d:9d:0c:
1f:d7:01:92:25:fe:8a:0c:8e:90:19:88:d7:45:c5:
2c:35:6f:e0:70:3f:9c:08:bf:52:f5:19:a3:95:40:
84:19:81:1f:18:41:69:71:e6:81:fa:b5:eb:1c:29:
79:68:1b:5a:dc:13:e6:9a:2a:c7:f7:2b:4c:4d:9c:
d1:ee:be:24:40:15:af:4c:33:ff:89:a5:bf:fd:18:
c2:03:3e:0a:30:27:74:3a:4c:ca:e9:05:09:e2:d3:
ca:7b:c8:85:bd:7d:d7:fe:b1:16:e4:d9:ae:e7:85:
36:43:a6:53:82:2a:0e:25:08:79:85:11:a8:bc:4e:
f2:d4:4a:e5:f8:fd:d6:66:95:e0:a7:9f:f5:9c:d9:
9b:78:ea:89:d4:d5:f9:c1:c1:11:9d:55:db:f4:b9:
8d:60:3a:f1:14:3d:03:3c:5e:34:df:05:71:7b:be:
bb:77:5b:7e:ff:8d:37:a4:89:ba:9b:ec:ad:c5:88:
63:fe:da:4b:65:18:02:be:60:c5:7b:a3:4e:6f:90:
21:cb:65:01:a4:10:fc:b5:a7:91:57:df:50:8b:ff:
a9:9b:87:7f:9a:ab:ef:e8:e6:2c:1a:cc:6f:e5:35:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:F8:DF:69:F1:55:1D:11:23:73:26:55:DF:A0:E9:31:43:85:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/fff55382-8368-3f48-bdd7-a73f2a28d32f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
X509v3 Authority Key Identifier:
keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.96.0/23
204.10.89.0/24
IPv6:
2602:fe6b:1000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9b:29:c8:78:d2:45:11:54:18:fd:fd:f1:95:71:fe:53:4e:
f6:e2:4a:be:e4:ac:88:33:cd:7e:9a:a1:48:d7:4f:25:1e:27:
35:c7:df:c0:39:83:34:90:67:6c:c0:d8:00:d9:e9:1a:0d:de:
bd:38:8f:76:a5:52:d8:49:f5:85:62:1a:06:45:42:d4:68:3d:
76:09:9c:76:1b:68:08:e3:d1:cf:eb:11:4e:db:ec:ba:d9:85:
e8:d5:44:25:5e:11:94:44:ce:aa:26:e3:44:b8:f0:ba:f7:51:
ab:fc:ce:bf:04:c4:b1:d5:ca:db:38:f6:3e:34:14:a2:a3:e3:
e0:41:d3:0f:6e:29:c7:f1:92:b9:0e:a1:fa:b0:78:f0:a2:5c:
f4:d4:58:a9:6c:e5:12:c3:41:1e:c2:59:8c:a1:39:20:5a:1a:
24:52:ed:6c:3a:7e:b0:c1:56:7a:7c:aa:51:78:f7:2c:ca:47:
d3:7e:ab:f4:f7:1b:c8:7e:a7:d4:1d:b9:e7:23:58:58:e6:f9:
1e:4c:b0:8f:fa:a0:6e:ee:2f:25:d0:e1:15:bf:d1:d6:a6:ab:
36:58:a5:6b:fc:c6:4b:f2:1e:84:36:1e:71:31:b7:0f:0c:d0:
c1:eb:c1:df:58:c5:7a:62:0d:35:fb:f4:00:ff:22:67:90:d1:
08:e8:c5:d1
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEHkbY4SWXKfaJy9j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZWRhNDItMWI4OS00MTI0LThhMDYtNjMzODEyNzgz
NzVkMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwMzE3MTIyMFowLzEtMCsGA1UEAxMk
ZDRlNjA0MWUtYjdiMS00NjkxLTljNzktYWExZGJjYjZlYzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUx/HHRhwDlwJksCYqoRxrGPdNFBEJ3Wwgt
nQwf1wGSJf6KDI6QGYjXRcUsNW/gcD+cCL9S9RmjlUCEGYEfGEFpceaB+rXrHCl5
aBta3BPmmirH9ytMTZzR7r4kQBWvTDP/iaW//RjCAz4KMCd0OkzK6QUJ4tPKe8iF
vX3X/rEW5Nmu54U2Q6ZTgioOJQh5hRGovE7y1Erl+P3WZpXgp5/1nNmbeOqJ1NX5
wcERnVXb9LmNYDrxFD0DPF403wVxe767d1t+/403pIm6m+ytxYhj/tpLZRgCvmDF
e6NOb5Ahy2UBpBD8taeRV99Qi/+pm4d/mqvv6OYsGsxv5TUuxQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFOK8+N9p8VUdESNzJlXfoOkxQ4XEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRl
ZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4MTI3ODM3NWQvZmZmNTUzODItODM2OC0z
ZjQ4LWJkZDctYTczZjJhMjhkMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2U0ZWRhNDItMWI4OS00MTI0LThh
MDYtNjMzODEyNzgzNzVkLzdlNGVkYTQyLTFiODktNDEyNC04YTA2LTYzMzgxMjc4
Mzc1ZC5jcmwwHwYDVR0jBBgwFoAUik9e9/o52EdQMpAXHOPDy+bTsGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRlZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4
MTI3ODM3NWQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBF4JgAwQA
zApZMA4EAgACMAgDBgQmAv5rEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/mynIeNJFEVQY/f3xlXH+U072
4kq+5KyIM81+mqFI108lHic1x9/AOYM0kGdswNgA2ekaDd69OI92pVLYSfWFYhoG
RULUaD12CZx2G2gI49HP6xFO2+y62YXo1UQlXhGURM6qJuNEuPC691Gr/M6/BMSx
1crbOPY+NBSio+PgQdMPbinH8ZK5DqH6sHjwolz01FipbOUSw0EewlmMoTkgWhok
Uu1sOn6wwVZ6fKpRePcsykfTfqv09xvIfqfUHbnnI1hY5vkeTLCP+qBu7i8l0OEV
v9HWpqs2WKVr/MZL8h6ENh5xMbcPDNDB68HfWMV6Yg01+/QA/yJnkNEI6MXR
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:27 2025 by rpki-client