Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3fa6c0a3-a1ef-3481-ad35-8de9cea3efcd.roa
File: 3fa6c0a3-a1ef-3481-ad35-8de9cea3efcd.roa (raw, json)
Hash identifier: /lMGHtvzXeikL5iiTNQ6g26wSZ3f5O0U4gZvmf0ob+k=
Subject key identifier: D4:FD:54:59:79:B9:33:E8:68:24:3D:56:31:70:8A:DE:08:27:61:AE
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848456DA5A03C1579D6124DC200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3fa6c0a3-a1ef-3481-ad35-8de9cea3efcd.roa
Signing time: Fri 20 Dec 2024 16:58:35 +0000
ROA not before: Fri 20 Dec 2024 16:58:35 +0000
ROA not after: Thu 20 Mar 2025 15:58:35 +0000
asID: 21859
IP address blocks: 184.174.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:6d:a5:a0:3c:15:79:d6:12:4d:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 20 16:58:35 2024 GMT
Not After : Mar 20 15:58:35 2025 GMT
Subject: CN=e826fe96-3ac1-40e0-98e2-cf7cdf7d473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:b4:ac:5b:c8:cd:8e:71:c7:8c:55:77:57:
09:cb:e7:8a:53:69:3f:bf:46:aa:08:c2:bb:79:61:
bc:a9:d2:b0:a1:c0:35:5f:c5:ef:4e:4b:4a:c0:53:
2e:bc:88:88:37:91:a6:8f:80:e9:4d:73:0f:64:0d:
f7:07:a7:ab:0a:b1:16:12:13:96:3d:50:7f:2f:72:
f9:86:a7:2d:06:e0:7e:ee:2e:09:b2:bb:5c:a4:e5:
24:d0:bc:ea:d0:be:e2:42:70:02:4a:72:93:a7:76:
c0:54:61:21:e4:a0:b1:aa:b4:1c:67:de:22:e9:da:
e6:1d:98:b3:71:f6:ed:5f:42:63:67:0c:1c:5c:9c:
fd:02:eb:4d:e1:00:ec:c7:5a:89:04:11:2a:3a:66:
65:6d:ea:7d:23:23:25:b8:15:22:0c:7b:d2:5e:2f:
b0:b3:e8:4f:ec:73:90:3d:25:a0:02:b7:fb:5a:a7:
c7:8a:92:72:a3:a3:5d:f3:12:cd:7e:7d:81:3d:62:
6d:e3:15:64:c2:39:02:1c:48:05:39:7a:fd:4b:6c:
69:15:ba:dd:da:ce:be:a2:8c:2b:18:12:9d:1b:dc:
1d:89:e1:e4:49:54:c6:53:2d:64:3d:f0:9c:47:75:
f4:ca:5b:47:bb:d3:c0:51:0f:d2:b7:cc:ca:fe:f8:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FD:54:59:79:B9:33:E8:68:24:3D:56:31:70:8A:DE:08:27:61:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3fa6c0a3-a1ef-3481-ad35-8de9cea3efcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
184.174.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:27:da:9f:dd:b0:17:1a:f8:17:c5:ff:0f:0a:83:ca:f6:24:
06:6a:80:8e:f0:78:5f:95:38:68:ae:4e:a2:a4:a4:08:af:46:
e9:89:92:bc:f1:bd:d4:7b:61:bb:60:e8:ad:25:9a:d0:ab:ca:
78:dd:21:39:a5:60:db:1f:95:6b:45:74:c5:17:bc:dc:3f:8a:
cc:27:49:e3:f1:61:4e:fe:27:d1:a7:f8:1b:45:61:ab:b3:59:
65:d0:14:96:5b:01:67:5b:fc:b8:b3:e8:41:b6:be:d7:c0:09:
cf:c2:8a:d8:5d:18:7a:f2:7d:c5:11:a1:a4:f5:6b:22:9a:bb:
36:61:e1:48:33:f9:af:25:e1:95:00:06:16:63:3a:94:9b:b2:
1c:c6:2a:32:38:fd:75:3d:16:46:32:fc:0e:b5:78:0b:8c:3d:
6f:5f:8f:06:84:f0:8f:38:48:eb:ef:2b:ac:6b:ca:da:36:95:
72:11:47:db:aa:04:31:7a:88:74:8b:07:0d:30:23:08:ff:e4:
c0:11:f2:c9:79:99:4f:4e:a9:8c:da:19:a8:2c:bd:fb:a1:06:
e8:f7:a5:2d:d6:cb:3e:d6:22:4e:02:29:af:eb:8e:2a:b9:49:
53:49:f8:38:56:08:7f:7c:96:a4:d2:98:fb:3a:c1:25:db:c9:
55:79:5e:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFbaWgPBV51hJNwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTIyMDE2NTgzNVoXDTI1MDMyMDE1NTgzNVowLzEtMCsGA1UEAxMk
ZTgyNmZlOTYtM2FjMS00MGUwLTk4ZTItY2Y3Y2RmN2Q0NzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLS0rFvIzY5xx4xVd1cJy+eKU2k/v0aqCMK7
eWG8qdKwocA1X8XvTktKwFMuvIiIN5Gmj4DpTXMPZA33B6erCrEWEhOWPVB/L3L5
hqctBuB+7i4JsrtcpOUk0Lzq0L7iQnACSnKTp3bAVGEh5KCxqrQcZ94i6drmHZiz
cfbtX0JjZwwcXJz9AutN4QDsx1qJBBEqOmZlbep9IyMluBUiDHvSXi+ws+hP7HOQ
PSWgArf7WqfHipJyo6Nd8xLNfn2BPWJt4xVkwjkCHEgFOXr9S2xpFbrd2s6+oowr
GBKdG9wdieHkSVTGUy1kPfCcR3X0yltHu9PAUQ/St8zK/vi08QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNT9VFl5uTPoaCQ9VjFwit4IJ2GuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2ZhNmMwYTMtYTFlZi0z
NDgxLWFkMzUtOGRlOWNlYTNlZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAn2p/dsBca+BfF/w8Kg8r2JAZqgI7weF+VOGiuTqKkpAivRumJkrzx
vdR7Ybtg6K0lmtCrynjdITmlYNsflWtFdMUXvNw/iswnSePxYU7+J9Gn+BtFYauz
WWXQFJZbAWdb/Liz6EG2vtfACc/CithdGHryfcURoaT1ayKauzZh4Ugz+a8l4ZUA
BhZjOpSbshzGKjI4/XU9FkYy/A61eAuMPW9fjwaE8I84SOvvK6xryto2lXIRR9uq
BDF6iHSLBw0wIwj/5MAR8sl5mU9OqYzaGagsvfuhBuj3pS3Wyz7WIk4CKa/rjiq5
SVNJ+DhWCH98lqTSmPs6wSXbyVV5Xvk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:58:58 2025 by rpki-client