Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/70347ebe-3e09-3ca5-8799-7f0a68f82b92.roa
File: 70347ebe-3e09-3ca5-8799-7f0a68f82b92.roa (raw, json)
Hash identifier: lZjTb3vHYD8MjWX4eZohfg13u1jDzp+m4XXuhsS3dV8=
Subject key identifier: 91:47:3A:2F:D1:DE:11:30:98:FE:15:02:E4:04:18:97:92:CE:02:21
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285842808A2F98FEC54B8544AED280
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/70347ebe-3e09-3ca5-8799-7f0a68f82b92.roa
Signing time: Mon 10 Jul 2023 16:27:09 +0000
ROA not before: Mon 10 Jul 2023 16:27:09 +0000
ROA not after: Sun 08 Oct 2023 16:27:09 +0000
asID: 834
IP address blocks: 140.228.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:80:8a:2f:98:fe:c5:4b:85:44:ae:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jul 10 16:27:09 2023 GMT
Not After : Oct 8 16:27:09 2023 GMT
Subject: CN=83117076-22db-484c-aaba-fa5eb1b6728b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:a6:fc:08:9b:77:34:78:46:8d:0f:90:bf:
4e:2a:47:7f:99:5d:28:f4:be:a7:67:02:0f:4a:a6:
db:45:b5:97:7a:0a:55:00:e2:55:57:3b:14:c9:9e:
d9:77:d4:fd:fc:24:c2:84:06:1e:66:90:00:2f:49:
32:47:7c:57:60:35:46:93:db:fb:51:ff:37:8d:cd:
ec:83:a5:cc:6d:87:61:9e:60:ee:10:fe:cc:62:b0:
02:f4:51:75:13:c0:f2:aa:55:a0:eb:28:ac:a3:07:
2b:30:54:59:64:e2:74:70:72:5a:05:92:5e:ec:33:
90:82:7d:c4:cf:7a:f2:a8:9a:06:2f:2a:57:f3:a3:
e7:51:03:d1:a2:72:ed:47:b9:67:5b:35:5e:4c:c2:
c5:09:2e:8e:ef:16:3a:c2:d0:2d:c7:6e:b1:3d:df:
60:02:bf:c9:e2:2a:56:bc:13:fc:0b:97:14:10:62:
5b:62:71:b6:ea:ca:af:7d:43:d0:24:90:ac:bb:2e:
30:2d:53:b1:d1:a3:b8:9d:41:40:ea:f2:02:91:39:
95:0a:d9:7b:55:25:5a:a6:ce:56:54:ae:0b:78:b1:
ca:70:53:f1:04:f5:0d:01:79:fe:03:90:2d:4d:33:
42:33:76:4b:e1:05:e4:73:4c:ed:bc:8b:09:79:b0:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:3A:2F:D1:DE:11:30:98:FE:15:02:E4:04:18:97:92:CE:02:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/70347ebe-3e09-3ca5-8799-7f0a68f82b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.228.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ff:d0:d1:5e:8a:d7:a3:0b:74:a6:7a:de:31:dd:41:59:a1:
47:eb:f3:b5:97:c2:0f:fc:a5:a4:4c:6d:e0:90:04:53:50:f1:
ac:ec:12:12:30:07:10:e2:35:d9:b1:54:c3:54:05:5c:cc:f8:
97:b5:f8:ea:f6:01:7b:d7:bc:9b:99:0c:bf:5a:65:59:e1:67:
77:d9:aa:8a:5e:8b:6f:26:62:49:74:af:7e:a2:78:09:78:08:
ea:70:b9:70:40:db:25:9c:4a:f1:6d:83:72:66:8a:a1:fa:67:
7c:6f:1a:5d:67:91:c6:dd:b7:8c:59:a4:42:2d:ba:d7:5e:18:
d5:86:5a:04:61:b1:5b:c3:b4:18:58:d2:82:2a:39:3a:98:22:
b5:af:fb:e1:36:90:5d:af:3e:ea:12:0a:23:a5:f3:cd:eb:25:
08:59:dc:1c:d8:95:5f:dc:f6:09:f9:a5:7e:6e:3a:41:28:77:
09:03:38:86:f7:00:81:47:a3:60:8e:35:3d:4f:99:18:b6:4e:
c7:01:1f:dc:79:55:73:66:1e:99:1a:88:87:af:10:12:93:44:
21:7b:1b:80:a1:9e:1e:1c:b0:0c:21:9b:bd:99:a3:fb:5e:ec:
13:49:b9:df:30:f0:db:b7:a0:ba:6a:79:a7:0f:5e:30:e4:3a:
7a:e6:35:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKAii+Y/sVLhUSu0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDcxMDE2MjcwOVoXDTIzMTAwODE2MjcwOVowLzEtMCsGA1UEAxMk
ODMxMTcwNzYtMjJkYi00ODRjLWFhYmEtZmE1ZWIxYjY3MjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aum/AibdzR4Ro0PkL9OKkd/mV0o9L6nZwIP
SqbbRbWXegpVAOJVVzsUyZ7Zd9T9/CTChAYeZpAAL0kyR3xXYDVGk9v7Uf83jc3s
g6XMbYdhnmDuEP7MYrAC9FF1E8DyqlWg6yisowcrMFRZZOJ0cHJaBZJe7DOQgn3E
z3ryqJoGLypX86PnUQPRonLtR7lnWzVeTMLFCS6O7xY6wtAtx26xPd9gAr/J4ipW
vBP8C5cUEGJbYnG26sqvfUPQJJCsuy4wLVOx0aO4nUFA6vICkTmVCtl7VSVaps5W
VK4LeLHKcFPxBPUNAXn+A5AtTTNCM3ZL4QXkc0ztvIsJebB7awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFHOi/R3hEwmP4VAuQEGJeSzgIhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNzAzNDdlYmUtM2UwOS0z
Y2E1LTg3OTktN2YwYTY4ZjgyYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH/0NFeitejC3Smet4x3UFZoUfr87WXwg/8paRMbeCQBFNQ8azsEhIw
BxDiNdmxVMNUBVzM+Je1+Or2AXvXvJuZDL9aZVnhZ3fZqopei28mYkl0r36ieAl4
COpwuXBA2yWcSvFtg3JmiqH6Z3xvGl1nkcbdt4xZpEItutdeGNWGWgRhsVvDtBhY
0oIqOTqYIrWv++E2kF2vPuoSCiOl883rJQhZ3BzYlV/c9gn5pX5uOkEodwkDOIb3
AIFHo2CONT1PmRi2TscBH9x5VXNmHpkaiIevEBKTRCF7G4Chnh4csAwhm72Zo/te
7BNJud8w8Nu3oLpqeacPXjDkOnrmNS0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:42 2025 by rpki-client