Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/089daee0-5b8f-38a1-bde0-32ec5dd91c0c.roa
File: 089daee0-5b8f-38a1-bde0-32ec5dd91c0c.roa (raw, json)
Hash identifier: NLJ5haLNVjFNsQQq6uxhvOw1fU3dUb+XMU3rzoFAPRA=
Subject key identifier: 60:BE:9B:B1:28:67:A0:CB:A4:BF:28:18:CD:4C:A8:82:86:79:76:D2
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858469E04E871F8C3A7C3D2533340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/089daee0-5b8f-38a1-bde0-32ec5dd91c0c.roa
Signing time: Mon 22 Jul 2024 01:00:27 +0000
ROA not before: Mon 22 Jul 2024 01:00:27 +0000
ROA not after: Sun 20 Oct 2024 01:00:27 +0000
asID: 22781
IP address blocks: 66.78.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:9e:04:e8:71:f8:c3:a7:c3:d2:53:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jul 22 01:00:27 2024 GMT
Not After : Oct 20 01:00:27 2024 GMT
Subject: CN=b946afd5-840d-4ac4-a9a7-04df3dd56d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:f9:53:6f:db:a0:e5:46:13:4f:05:ab:7c:
05:48:fc:b8:ca:f1:8e:1a:4e:76:d6:5b:01:b7:74:
ef:8f:d2:bb:f6:fa:02:69:4b:39:f3:58:16:c7:cc:
dc:8f:83:80:a8:e4:ff:00:20:43:5d:a3:f7:ce:62:
cf:65:75:d3:00:e7:af:1f:d6:ab:c9:e9:c8:ce:3b:
ff:38:87:78:d3:be:2d:20:f6:00:40:5e:7e:4a:2e:
46:1b:1a:5f:0b:b5:25:ba:a7:78:09:73:23:ae:e1:
6f:e1:56:8e:4d:ed:ef:5c:c7:ec:85:69:61:0f:71:
b8:f2:4d:ca:21:89:c3:64:13:6c:a0:99:3d:10:ab:
8b:37:2a:b8:6b:40:57:c8:5e:88:e3:27:70:d7:76:
69:a2:75:08:57:0d:80:e8:50:da:c4:12:0d:6c:9f:
a4:81:aa:9b:bb:98:92:80:44:c0:49:b3:cb:de:50:
ec:8f:e9:d2:71:06:8b:1b:12:8f:5d:4e:41:48:5f:
a5:35:bf:8a:5b:74:3f:ad:5d:3a:87:9c:7f:9b:52:
d4:fe:60:18:54:b5:8c:e2:b4:2f:57:8b:c3:49:48:
68:ee:26:ca:5d:be:9a:be:38:be:3b:8f:a3:b3:f7:
4e:3c:4a:7a:15:44:1b:fc:57:b7:9e:d2:50:ae:87:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:9B:B1:28:67:A0:CB:A4:BF:28:18:CD:4C:A8:82:86:79:76:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/089daee0-5b8f-38a1-bde0-32ec5dd91c0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
66.78.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:ee:f1:76:7c:84:89:50:f1:88:63:d6:69:fa:c3:06:4b:b7:
c4:f1:7d:67:32:85:dd:3d:65:f6:99:6f:46:68:b2:21:ff:e5:
df:5e:41:11:a5:7a:b2:0a:cc:8d:99:de:ee:f1:6d:73:59:9a:
5d:d7:be:40:2d:0c:e8:76:1d:5c:79:87:29:ff:c9:11:1e:13:
6b:98:62:ae:13:e7:e7:01:5e:ee:9e:85:8e:37:24:b6:5f:ad:
a6:65:b3:2b:17:f2:c1:e1:a5:9b:c2:6c:3b:35:1a:33:60:90:
a8:da:7a:a6:b3:54:11:5b:ad:35:3c:09:f6:24:fc:7e:c9:29:
72:6a:3b:be:be:64:0b:bd:9e:ff:c6:44:09:ca:3e:3d:2f:cb:
2d:84:4e:42:28:ab:5a:7f:13:18:74:27:0b:d4:28:c1:30:61:
a6:b9:bd:05:8d:da:43:2a:b5:7a:75:1f:db:82:18:92:36:f2:
a3:89:2f:a6:50:ca:fd:ea:b6:a8:45:47:fe:96:97:ab:88:ee:
be:17:68:56:5b:3c:9b:f5:59:79:e2:cd:0a:9f:02:a1:f9:3f:
f7:1a:10:47:6d:dd:81:f0:eb:95:0b:60:cd:08:39:2f:62:6e:
91:12:79:cc:a6:bf:05:6c:87:4e:6b:ab:1b:84:7c:1a:22:a6:
f2:2f:7b:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaeBOhx+MOnw9JTM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDcyMjAxMDAyN1oXDTI0MTAyMDAxMDAyN1owLzEtMCsGA1UEAxMk
Yjk0NmFmZDUtODQwZC00YWM0LWE5YTctMDRkZjNkZDU2ZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6D5U2/boOVGE08Fq3wFSPy4yvGOGk521lsB
t3Tvj9K79voCaUs581gWx8zcj4OAqOT/ACBDXaP3zmLPZXXTAOevH9aryenIzjv/
OId4074tIPYAQF5+Si5GGxpfC7Uluqd4CXMjruFv4VaOTe3vXMfshWlhD3G48k3K
IYnDZBNsoJk9EKuLNyq4a0BXyF6I4ydw13ZponUIVw2A6FDaxBINbJ+kgaqbu5iS
gETASbPL3lDsj+nScQaLGxKPXU5BSF+lNb+KW3Q/rV06h5x/m1LU/mAYVLWM4rQv
V4vDSUho7ibKXb6avji+O4+js/dOPEp6FUQb/Fe3ntJQrod2/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGC+m7EoZ6DLpL8oGM1MqIKGeXbSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMDg5ZGFlZTAtNWI4Zi0z
OGExLWJkZTAtMzJlYzVkZDkxYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQk4sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPu8XZ8hIlQ8Yhj1mn6wwZLt8TxfWcyhd09ZfaZb0ZosiH/5d9eQRGl
erIKzI2Z3u7xbXNZml3XvkAtDOh2HVx5hyn/yREeE2uYYq4T5+cBXu6ehY43JLZf
raZlsysX8sHhpZvCbDs1GjNgkKjaeqazVBFbrTU8CfYk/H7JKXJqO76+ZAu9nv/G
RAnKPj0vyy2ETkIoq1p/Exh0JwvUKMEwYaa5vQWN2kMqtXp1H9uCGJI28qOJL6ZQ
yv3qtqhFR/6Wl6uI7r4XaFZbPJv1WXnizQqfAqH5P/caEEdt3YHw65ULYM0IOS9i
bpESecymvwVsh05rqxuEfBoipvIve80=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:13 2025 by rpki-client