Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/bd21dcd4-aa61-33f1-a2e2-35710d28d455.roa
File: bd21dcd4-aa61-33f1-a2e2-35710d28d455.roa (raw, json)
Hash identifier: XrUB8LCnqnM7vyCPtbzsPss1EJ4TYiQr3NLTwMosz9I=
Subject key identifier: 5D:79:71:14:41:8F:FB:9D:A8:BB:B7:91:E2:22:D4:13:9F:91:96:A8
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285847FF4A5480ECC7CA62A3200400
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/bd21dcd4-aa61-33f1-a2e2-35710d28d455.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36040
IP address blocks: 207.126.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:54:80:ec:c7:ca:62:a3:20:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=246681b6-e85c-421b-b838-5ea1e00a656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:8e:55:91:5b:ca:30:f8:5b:dc:38:70:da:
65:31:98:ce:46:0e:d3:b2:ce:81:d3:b9:f8:06:a2:
64:7b:4b:24:63:a5:44:ff:cf:30:66:5b:40:a9:3c:
12:2c:26:4f:02:51:a9:75:a2:27:a6:5f:90:4b:da:
a2:04:b3:8d:a2:ea:47:e6:ca:9e:3e:01:72:0a:19:
2f:94:cf:da:c5:89:95:32:b9:9b:2f:ed:ce:98:4a:
7b:ed:fb:13:f2:51:50:af:31:2b:d1:31:ee:42:75:
eb:ca:78:6f:d5:8c:0d:2a:3f:ce:23:b5:de:10:16:
4b:1f:05:af:6d:9a:1d:ad:66:8c:cb:b4:8a:3c:a9:
64:ce:e0:4c:8f:43:1a:1f:28:0b:af:72:08:c3:b1:
42:52:4a:b9:fe:78:b5:10:de:bb:57:66:bd:f3:da:
2d:9d:6c:95:99:d8:cc:47:6e:e0:94:db:35:84:96:
6c:34:7e:2c:5c:40:2f:6e:8f:66:4c:0b:22:ee:f6:
f4:5c:9f:33:b7:0c:21:6f:18:c5:3d:14:d2:72:d1:
8e:1e:4a:f8:47:26:92:ce:f1:34:ab:0e:31:91:a4:
ed:53:e8:96:1f:a1:6c:3a:81:3c:1a:e0:3e:03:4d:
6f:39:c6:05:fb:65:53:73:b5:66:3e:7a:2f:5a:08:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:71:14:41:8F:FB:9D:A8:BB:B7:91:E2:22:D4:13:9F:91:96:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/bd21dcd4-aa61-33f1-a2e2-35710d28d455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e9:0f:42:04:39:92:5d:97:55:1a:21:f1:83:81:51:e7:ea:
e2:d1:1f:bb:01:2f:fb:f0:ba:bf:3d:f3:f0:ea:9b:71:7e:bd:
f1:b2:78:50:cf:2b:c2:8c:5f:9a:85:e9:e4:fd:e9:aa:c0:3b:
08:32:fa:d5:ef:66:c4:27:a0:bb:8f:92:9e:5d:73:fb:49:a3:
b1:5e:39:3e:02:f9:5c:98:b4:03:2e:00:e7:7d:29:30:9f:9b:
c7:4b:cf:33:49:7f:2c:33:e0:bb:1a:03:b8:b0:81:20:1c:d9:
9a:9c:08:a2:47:9d:22:d1:1a:22:00:69:75:36:2f:f1:ed:b0:
c5:2e:5f:11:0b:e8:3f:e3:3c:83:90:32:bd:52:31:7f:db:26:
ed:ca:fa:ee:d5:fe:6f:cd:0f:65:53:78:2f:e8:7b:b6:dd:df:
e8:fe:a6:e4:9a:1b:74:6d:09:86:43:e2:33:61:9c:fe:48:c5:
de:a2:c4:da:52:b8:3c:b2:d1:83:8b:1f:85:7b:df:c7:93:f9:
7b:be:df:fe:c3:0a:14:87:eb:e4:6e:6e:30:8a:3f:d3:bd:5c:
e2:cb:d5:54:fd:16:ab:d0:af:35:f8:b3:c7:53:cb:f6:d3:50:
50:e4:7c:9c:31:ff:45:12:5a:70:07:d1:a7:4e:19:1f:4f:74:
16:9e:e4:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlSA7MfKYqMgBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MjQ2NjgxYjYtZTg1Yy00MjFiLWI4MzgtNWVhMWUwMGE2NTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwqOVZFbyjD4W9w4cNplMZjORg7Tss6B07n4
BqJke0skY6VE/88wZltAqTwSLCZPAlGpdaInpl+QS9qiBLONoupH5sqePgFyChkv
lM/axYmVMrmbL+3OmEp77fsT8lFQrzEr0THuQnXrynhv1YwNKj/OI7XeEBZLHwWv
bZodrWaMy7SKPKlkzuBMj0MaHygLr3IIw7FCUkq5/ni1EN67V2a989otnWyVmdjM
R27glNs1hJZsNH4sXEAvbo9mTAsi7vb0XJ8ztwwhbxjFPRTSctGOHkr4RyaSzvE0
qw4xkaTtU+iWH6FsOoE8GuA+A01vOcYF+2VTc7VmPnovWgjwswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF15cRRBj/udqLu3keIi1BOfkZaoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvYmQyMWRjZDQtYWE2MS0z
M2YxLWEyZTItMzU3MTBkMjhkNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLpD0IEOZJdl1UaIfGDgVHn6uLRH7sBL/vwur898/Dqm3F+vfGyeFDP
K8KMX5qF6eT96arAOwgy+tXvZsQnoLuPkp5dc/tJo7FeOT4C+VyYtAMuAOd9KTCf
m8dLzzNJfywz4LsaA7iwgSAc2ZqcCKJHnSLRGiIAaXU2L/HtsMUuXxEL6D/jPIOQ
Mr1SMX/bJu3K+u7V/m/ND2VTeC/oe7bd3+j+puSaG3RtCYZD4jNhnP5Ixd6ixNpS
uDyy0YOLH4V738eT+Xu+3/7DChSH6+RubjCKP9O9XOLL1VT9FqvQrzX4s8dTy/bT
UFDkfJwx/0USWnAH0adOGR9PdBae5Mw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:48 2025 by rpki-client