Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d194b91c-e616-3721-b0aa-134edc7d7ef7.roa
File: d194b91c-e616-3721-b0aa-134edc7d7ef7.roa (raw, json)
Hash identifier: vTJpgFR/YVxULy3acpDm6l4yJk+6zZF2dX3fbKNQAhI=
Subject key identifier: 95:4D:F1:53:38:44:91:D7:47:AF:D8:96:07:D3:8F:7E:E5:A2:E2:59
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F4328584818BDBD322C0DE4DFE817C980
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d194b91c-e616-3721-b0aa-134edc7d7ef7.roa
Signing time: Wed 04 Dec 2024 16:48:35 +0000
ROA not before: Wed 04 Dec 2024 16:48:35 +0000
ROA not after: Tue 04 Mar 2025 16:48:35 +0000
asID: 834
IP address blocks: 140.228.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:bd:bd:32:2c:0d:e4:df:e8:17:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Dec 4 16:48:35 2024 GMT
Not After : Mar 4 16:48:35 2025 GMT
Subject: CN=3888cb71-2cd7-41b5-8611-b2a7997afaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:be:22:49:74:74:c4:73:17:2e:e8:85:73:
cf:8c:8c:0d:57:86:ac:a8:8b:a7:a4:11:66:16:9d:
d8:2c:78:ce:fd:3d:46:a0:fa:86:63:27:9e:df:46:
87:3e:2d:db:a8:cb:bb:18:04:3a:53:09:7c:d7:87:
8c:94:67:15:de:c4:05:1f:c0:ff:9c:83:07:fe:58:
6c:31:84:b2:7f:42:aa:a0:6f:4b:37:89:1b:ec:1f:
be:e8:45:de:68:5b:fe:7b:4e:c9:41:eb:99:9a:ba:
95:7d:d1:0e:84:a6:8a:fb:cb:7e:ae:20:65:44:01:
06:86:71:9c:a0:92:4a:5c:ea:32:e8:e2:45:50:c5:
10:47:a1:c4:f6:94:a9:6f:19:50:b7:04:14:26:96:
2c:61:82:fc:cd:d8:b0:b4:aa:26:f0:25:23:e4:4f:
42:66:c3:ef:94:91:ac:d7:0d:bd:d9:49:31:04:90:
23:ae:bb:3f:9a:94:91:89:f0:61:cd:c7:46:bd:a0:
4b:49:72:7d:55:1a:e1:7d:50:97:dd:16:03:51:1e:
a3:4e:45:f0:56:9b:ce:b4:60:3f:7e:b9:d3:29:a0:
77:ef:b3:57:4a:d7:53:65:29:f5:dc:47:ab:d5:5f:
85:c5:76:d4:72:20:ec:99:c6:c5:8a:24:fb:28:b5:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:F1:53:38:44:91:D7:47:AF:D8:96:07:D3:8F:7E:E5:A2:E2:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d194b91c-e616-3721-b0aa-134edc7d7ef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.228.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b8:32:32:a8:b4:73:14:72:09:11:86:f9:54:5e:15:69:75:
be:a6:52:f2:c3:5c:1c:05:23:bb:b9:84:66:87:65:8c:4d:09:
87:45:d7:aa:4b:d0:4c:86:72:2b:8e:6c:eb:3c:a1:54:2a:bc:
a0:39:c2:77:c3:93:9e:75:94:53:2d:65:5a:6a:69:f3:f4:97:
d9:48:f0:f9:58:90:86:24:8e:d4:1d:6b:9a:88:e0:d7:98:54:
56:f6:f1:fb:42:ab:4f:ae:a9:da:84:22:b1:3a:a2:39:78:24:
bd:4d:67:be:ab:1f:c3:69:4a:2f:b1:ac:0e:42:34:4c:95:fe:
b4:7a:06:0a:06:16:92:f0:b2:22:e1:99:e7:18:b5:8d:30:6e:
64:c7:4e:55:44:c6:a3:8a:a0:57:d6:2d:83:c8:b6:ff:10:11:
57:52:f2:96:14:ed:d4:e0:74:f8:78:5a:dc:1e:d3:e6:9c:aa:
42:76:3c:22:f8:8e:4f:fd:66:9b:ed:27:56:12:7d:13:3a:3a:
46:73:15:5e:b2:b9:33:3e:86:cd:54:7a:c2:ff:d6:9b:c6:7d:
9c:5e:ff:e4:80:ec:84:42:27:43:3f:88:5e:93:56:7f:dd:0f:
9f:31:2d:3a:28:bc:69:bd:39:34:18:d1:f9:35:99:e2:a3:32:
79:2b:00:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgYvb0yLA3k3+gXyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MTIwNDE2NDgzNVoXDTI1MDMwNDE2NDgzNVowLzEtMCsGA1UEAxMk
Mzg4OGNiNzEtMmNkNy00MWI1LTg2MTEtYjJhNzk5N2FmYWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+K+Ikl0dMRzFy7ohXPPjIwNV4asqIunpBFm
Fp3YLHjO/T1GoPqGYyee30aHPi3bqMu7GAQ6Uwl814eMlGcV3sQFH8D/nIMH/lhs
MYSyf0KqoG9LN4kb7B++6EXeaFv+e07JQeuZmrqVfdEOhKaK+8t+riBlRAEGhnGc
oJJKXOoy6OJFUMUQR6HE9pSpbxlQtwQUJpYsYYL8zdiwtKom8CUj5E9CZsPvlJGs
1w292UkxBJAjrrs/mpSRifBhzcdGvaBLSXJ9VRrhfVCX3RYDUR6jTkXwVpvOtGA/
frnTKaB377NXStdTZSn13Eer1V+FxXbUciDsmcbFiiT7KLVibQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVN8VM4RJHXR6/YlgfTj37louJZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZDE5NGI5MWMtZTYxNi0z
NzIxLWIwYWEtMTM0ZWRjN2Q3ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFG4MjKotHMUcgkRhvlUXhVpdb6mUvLDXBwFI7u5hGaHZYxNCYdF16pL
0EyGciuObOs8oVQqvKA5wnfDk551lFMtZVpqafP0l9lI8PlYkIYkjtQda5qI4NeY
VFb28ftCq0+uqdqEIrE6ojl4JL1NZ76rH8NpSi+xrA5CNEyV/rR6BgoGFpLwsiLh
mecYtY0wbmTHTlVExqOKoFfWLYPItv8QEVdS8pYU7dTgdPh4Wtwe0+acqkJ2PCL4
jk/9ZpvtJ1YSfRM6OkZzFV6yuTM+hs1UesL/1pvGfZxe/+SA7IRCJ0M/iF6TVn/d
D58xLToovGm9OTQY0fk1meKjMnkrAKY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:23 2025 by rpki-client