Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/dc309d15-7c15-3299-a84e-a69443219572.roa
File: dc309d15-7c15-3299-a84e-a69443219572.roa (raw, json)
Hash identifier: ytcRYfLMS6PW8tuwmAF6nbF6wZjNgX+qqy8CSt5tknQ=
Subject key identifier: 58:FD:37:18:01:D7:40:73:D9:8D:9B:A6:45:AA:22:0D:AF:FE:1A:8F
Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial: 010D0C9F432858488882E553B38029FF89755500
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/dc309d15-7c15-3299-a84e-a69443219572.roa
Signing time: Mon 13 Jan 2025 17:40:34 +0000
ROA not before: Mon 13 Jan 2025 17:40:34 +0000
ROA not after: Sun 13 Apr 2025 16:40:34 +0000
asID: 16589
IP address blocks: 192.101.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:82:e5:53:b3:80:29:ff:89:75:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
Validity
Not Before: Jan 13 17:40:34 2025 GMT
Not After : Apr 13 16:40:34 2025 GMT
Subject: CN=d0fe337b-acb5-4ce6-a60d-3147614d434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:95:6f:bc:da:fa:20:5e:d5:e9:0f:68:48:
7f:4e:0b:ad:cb:28:22:ed:97:46:63:f0:80:3e:17:
7e:dc:8a:1a:8f:26:1a:00:c7:99:29:16:f8:dc:16:
e0:9c:05:b2:db:9f:22:61:53:38:eb:dd:09:e0:2b:
40:03:bb:cf:30:51:7d:14:98:fd:48:29:f9:f3:4a:
82:c4:05:0c:96:d6:19:2f:c5:14:54:b6:39:53:2c:
a5:e5:e7:8e:4b:eb:c5:8f:b2:0a:51:2e:e2:5f:90:
67:13:16:26:17:05:85:b6:3a:e1:ca:39:51:08:ef:
e4:28:30:3b:c4:34:99:73:49:d7:0b:2f:88:51:fb:
d6:e4:fd:98:f5:25:9f:a4:a7:ed:c2:de:58:53:cc:
84:88:c0:22:f1:5c:f6:26:75:61:c5:c0:af:30:6f:
be:12:26:3c:86:cc:15:df:91:9b:00:43:60:2c:e3:
bb:ea:4f:30:4e:4b:42:80:56:6f:97:e7:45:6b:e0:
81:3d:07:54:00:98:98:71:17:84:cc:28:10:60:62:
26:f3:c9:63:a5:a8:1e:a8:ac:3e:54:7c:e8:c9:f1:
14:37:3c:8d:43:0f:25:41:e5:cd:27:65:45:34:f3:
a0:e1:0a:d1:01:ce:9a:c3:f3:70:a8:22:50:af:17:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:37:18:01:D7:40:73:D9:8D:9B:A6:45:AA:22:0D:AF:FE:1A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/dc309d15-7c15-3299-a84e-a69443219572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
X509v3 Authority Key Identifier:
keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:2b:a2:91:cd:58:b5:96:6f:ed:02:d8:6b:98:90:78:a1:c6:
ca:1e:71:70:33:ee:79:24:9c:1a:8a:90:61:4f:05:e1:57:16:
08:ac:2f:b6:f7:03:4f:3b:6b:27:79:d7:62:38:61:39:a2:be:
d1:97:aa:b9:9b:49:e3:fd:83:98:ea:b7:7e:02:0e:42:fd:f8:
b8:54:e1:ad:d5:2c:f8:67:8e:70:5d:84:9d:1e:56:f3:2d:14:
19:98:52:28:87:6e:e8:0c:44:f9:6e:60:d1:98:45:bf:0f:0c:
d5:5d:9e:c0:11:04:e0:d4:c1:0f:43:c9:f0:32:48:e6:fd:5d:
b3:de:28:74:9b:65:b2:fe:1c:ab:95:5e:0d:55:c4:81:0d:18:
95:2f:bd:bd:ec:95:aa:a8:09:e9:be:5f:6d:06:ed:18:a4:9f:
0d:23:81:f1:f6:b3:85:46:cb:86:19:8c:71:a6:df:57:11:05:
0d:26:90:81:04:46:06:32:11:84:41:83:a9:df:47:22:8c:ca:
ec:48:c2:80:24:b8:0a:2d:9d:cf:48:cb:98:5c:3f:49:6b:f8:
65:cf:b3:42:56:28:42:f7:66:18:69:19:54:cb:f1:69:ef:2b:
9d:0a:21:de:41:ca:dd:57:ed:05:90:0b:9c:64:c9:ef:a5:d8:
46:2a:4a:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIguVTs4Ap/4l1VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk
OTQ1MB4XDTI1MDExMzE3NDAzNFoXDTI1MDQxMzE2NDAzNFowLzEtMCsGA1UEAxMk
ZDBmZTMzN2ItYWNiNS00Y2U2LWE2MGQtMzE0NzYxNGQ0MzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcWVb7za+iBe1ekPaEh/Tgutyygi7ZdGY/CA
Phd+3IoajyYaAMeZKRb43BbgnAWy258iYVM4690J4CtAA7vPMFF9FJj9SCn580qC
xAUMltYZL8UUVLY5Uyyl5eeOS+vFj7IKUS7iX5BnExYmFwWFtjrhyjlRCO/kKDA7
xDSZc0nXCy+IUfvW5P2Y9SWfpKftwt5YU8yEiMAi8Vz2JnVhxcCvMG++EiY8hswV
35GbAENgLOO76k8wTktCgFZvl+dFa+CBPQdUAJiYcReEzCgQYGIm88ljpageqKw+
VHzoyfEUNzyNQw8lQeXNJ2VFNPOg4QrRAc6aw/NwqCJQrxdELwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFj9NxgB10Bz2Y2bpkWqIg2v/hqPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4
NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvZGMzMDlkMTUtN2MxNS0z
Mjk5LWE4NGUtYTY5NDQzMjE5NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh
NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4
ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw
NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKsropHNWLWWb+0C2GuYkHihxsoecXAz7nkknBqKkGFPBeFXFgisL7b3
A087ayd512I4YTmivtGXqrmbSeP9g5jqt34CDkL9+LhU4a3VLPhnjnBdhJ0eVvMt
FBmYUiiHbugMRPluYNGYRb8PDNVdnsARBODUwQ9DyfAySOb9XbPeKHSbZbL+HKuV
Xg1VxIENGJUvvb3slaqoCem+X20G7Riknw0jgfH2s4VGy4YZjHGm31cRBQ0mkIEE
RgYyEYRBg6nfRyKMyuxIwoAkuAotnc9Iy5hcP0lr+GXPs0JWKEL3ZhhpGVTL8Wnv
K50KId5Byt1X7QWQC5xkye+l2EYqSrg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:04:35 2025 by rpki-client