Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/2b8d0465-d59d-3354-82e3-351826ad34e0.roa
File: 2b8d0465-d59d-3354-82e3-351826ad34e0.roa (raw, json)
Hash identifier: /zBurs2EawVYCiqQa+BB8qjgXISBtF7An8T5WONpoq4=
Subject key identifier: 9E:8E:35:BC:D3:40:35:B4:E1:81:6C:21:0B:60:EB:22:AF:6F:E0:E3
Certificate issuer: /CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Certificate serial: 010D0C9F43285848909F4DE14DBAAF83E94F3180
Authority key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/2b8d0465-d59d-3354-82e3-351826ad34e0.roa
Signing time: Thu 16 Jan 2025 15:24:16 +0000
ROA not before: Thu 16 Jan 2025 15:24:16 +0000
ROA not after: Wed 16 Apr 2025 14:24:16 +0000
asID: 27501
IP address blocks: 103.25.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:9f:4d:e1:4d:ba:af:83:e9:4f:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa
Validity
Not Before: Jan 16 15:24:16 2025 GMT
Not After : Apr 16 14:24:16 2025 GMT
Subject: CN=03483da5-f191-49f4-a59a-102409001c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:a4:c3:60:6e:0a:67:a6:99:39:a7:35:89:
8c:14:5e:2c:d9:9b:5a:c2:5c:54:5e:0a:49:26:75:
af:cc:95:aa:29:88:58:39:9f:d3:25:44:32:28:3d:
9d:1b:9b:29:dc:18:b2:24:fc:99:55:c9:f5:27:c9:
3d:f7:6b:0d:a3:9b:ea:ba:3b:c0:7f:89:52:b4:57:
20:14:c1:2a:8c:4e:de:de:93:70:bb:c0:ad:b3:e5:
67:12:eb:20:8c:fd:89:38:b7:49:01:47:f8:6a:20:
43:e9:0a:93:93:aa:49:03:3a:58:a8:da:82:ae:eb:
b6:e9:48:b1:a6:b1:54:f7:84:48:30:5d:3d:00:08:
8a:34:49:6d:cc:98:5b:b0:1b:fc:35:ae:01:79:59:
6f:cd:9e:0e:e5:04:ee:2c:26:2b:5b:7a:5c:30:c4:
a4:7c:43:46:9f:35:b0:cf:7f:31:07:59:0d:3a:c8:
1a:ac:2d:e6:f8:b3:89:88:df:de:1f:3d:5a:40:42:
ac:22:8b:0d:ee:62:fc:59:6a:4f:48:02:3b:2f:50:
74:6b:ae:aa:88:53:cc:b6:d4:17:af:ba:f3:89:72:
c9:dd:c7:40:99:cc:17:fd:c1:94:0f:14:01:d4:28:
76:63:69:20:89:eb:27:0b:3a:8a:dc:86:78:26:0f:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:35:BC:D3:40:35:B4:E1:81:6C:21:0B:60:EB:22:AF:6F:E0:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/2b8d0465-d59d-3354-82e3-351826ad34e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.crl
X509v3 Authority Key Identifier:
keyid:F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.25.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:ea:05:e4:9a:1e:7c:7e:b7:37:72:7e:23:bf:2f:df:e5:47:
a7:b3:81:37:0e:90:80:ab:9f:45:a8:f7:b3:87:59:76:5e:06:
cc:d0:b9:8a:14:22:f3:28:35:68:0c:c0:46:d2:20:f6:58:7b:
12:90:f9:8b:b6:17:da:1f:47:ab:07:0a:a9:ae:f3:c7:42:6e:
8d:40:c2:8d:36:15:cc:ea:d2:da:fb:93:b0:19:bc:29:32:f6:
b0:d0:ac:2a:43:8d:c3:da:bd:e3:2f:08:b4:31:c7:a9:6a:6c:
30:b5:01:c6:79:8f:93:43:35:99:9d:76:c2:da:98:95:fd:b0:
1a:8f:11:64:f5:37:d5:dc:c8:db:42:fe:0e:c6:57:08:40:32:
ad:c3:0e:e2:8c:c8:81:29:76:2e:d6:6d:2e:55:8e:bc:69:59:
fb:b2:aa:c1:6c:00:67:76:7a:03:7b:db:bd:bf:b9:b4:81:b7:
35:a4:2b:8a:04:89:ae:b5:5d:d4:64:52:ad:d9:0c:fb:c9:2b:
8c:74:8a:7f:58:35:52:bc:55:f6:ed:ab:fd:98:fc:e3:0c:26:
58:d0:7f:8c:10:7b:fb:17:aa:59:de:70:6c:e3:43:f7:1c:bb:
cd:55:2d:84:60:d4:24:b4:0d:27:4d:7e:9f:f8:21:e9:4d:13:
a2:b6:fb:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQn03hTbqvg+lPMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwYWFiZDgtZDIxOS00N2NiLTlhMWMtZjcxNWE0YTNk
M2FhMB4XDTI1MDExNjE1MjQxNloXDTI1MDQxNjE0MjQxNlowLzEtMCsGA1UEAxMk
MDM0ODNkYTUtZjE5MS00OWY0LWE1OWEtMTAyNDA5MDAxYzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXWkw2BuCmemmTmnNYmMFF4s2ZtawlxUXgpJ
JnWvzJWqKYhYOZ/TJUQyKD2dG5sp3BiyJPyZVcn1J8k992sNo5vqujvAf4lStFcg
FMEqjE7e3pNwu8Cts+VnEusgjP2JOLdJAUf4aiBD6QqTk6pJAzpYqNqCruu26Uix
prFU94RIMF09AAiKNEltzJhbsBv8Na4BeVlvzZ4O5QTuLCYrW3pcMMSkfENGnzWw
z38xB1kNOsgarC3m+LOJiN/eHz1aQEKsIosN7mL8WWpPSAI7L1B0a66qiFPMttQX
r7rziXLJ3cdAmcwX/cGUDxQB1Ch2Y2kgiesnCzqK3IZ4Jg+WSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6ONbzTQDW04YFsIQtg6yKvb+DjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZTBh
YWJkOC1kMjE5LTQ3Y2ItOWExYy1mNzE1YTRhM2QzYWEvMmI4ZDA0NjUtZDU5ZC0z
MzU0LTgyZTMtMzUxODI2YWQzNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGUwYWFiZDgtZDIxOS00N2NiLTlh
MWMtZjcxNWE0YTNkM2FhLzhlMGFhYmQ4LWQyMTktNDdjYi05YTFjLWY3MTVhNGEz
ZDNhYS5jcmwwHwYDVR0jBBgwFoAU9s8mRbpY8URQDq8TgdfNWc8S9c8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZTBhYWJkOC1kMjE5LTQ3Y2ItOWExYy1mNzE1
YTRhM2QzYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALvqBeSaHnx+tzdyfiO/L9/lR6ezgTcOkICrn0Wo97OHWXZeBszQuYoU
IvMoNWgMwEbSIPZYexKQ+Yu2F9ofR6sHCqmu88dCbo1Awo02Fczq0tr7k7AZvCky
9rDQrCpDjcPaveMvCLQxx6lqbDC1AcZ5j5NDNZmddsLamJX9sBqPEWT1N9XcyNtC
/g7GVwhAMq3DDuKMyIEpdi7WbS5VjrxpWfuyqsFsAGd2egN7272/ubSBtzWkK4oE
ia61XdRkUq3ZDPvJK4x0in9YNVK8Vfbtq/2Y/OMMJljQf4wQe/sXqlnecGzjQ/cc
u81VLYRg1CS0DSdNfp/4IelNE6K2+w0=
-----END CERTIFICATE-----
Generated at Sun May 11 18:17:11 2025 by rpki-client