Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/714c5f52-b8f1-337b-8002-fa5471c4d7a2.roa
File: 714c5f52-b8f1-337b-8002-fa5471c4d7a2.roa (raw, json)
Hash identifier: IsUCO4X/hNeEiQmM26e+Gd0w8AMQme4EVaZ2oYfZuvw=
Subject key identifier: 86:6C:71:E3:EE:1F:18:CA:A3:60:DD:DD:34:A6:BD:DB:7C:07:B0:8F
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584762D65F3CAC37A36048C26AE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/714c5f52-b8f1-337b-8002-fa5471c4d7a2.roa
Signing time: Mon 30 Sep 2024 13:00:42 +0000
ROA not before: Mon 30 Sep 2024 13:00:42 +0000
ROA not after: Sun 29 Dec 2024 14:00:42 +0000
asID: 49898
IP address blocks: 216.10.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:62:d6:5f:3c:ac:37:a3:60:48:c2:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Sep 30 13:00:42 2024 GMT
Not After : Dec 29 14:00:42 2024 GMT
Subject: CN=b3a9f3bd-8af0-4118-9c33-12bbb8d20e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:9e:cd:64:55:7e:4a:b0:24:a7:85:54:7a:
8e:36:52:00:f7:d7:2d:9d:35:c2:09:0d:4e:00:d7:
0a:98:76:2a:75:1f:de:11:8e:7f:26:2c:59:41:e3:
ca:fc:e1:8b:95:68:e6:53:f1:f5:46:a8:fb:20:6e:
8f:31:ff:a0:d0:7a:e4:51:db:88:d9:02:f9:72:31:
eb:fe:19:d0:a0:f1:66:3f:0b:7e:b4:18:44:87:bd:
76:48:d8:83:54:8c:43:19:a8:7b:31:73:7d:b2:cf:
47:9f:e4:9e:24:85:e6:e4:53:d4:ab:a7:d3:35:2c:
09:8b:a5:c3:93:ee:e7:6c:91:1a:44:12:7a:af:79:
76:05:4e:2e:a5:5b:f0:f4:c2:d8:7d:b5:58:b3:44:
f5:f8:f4:e7:6b:49:37:37:a7:a9:56:88:92:42:22:
42:0c:c4:27:f8:86:00:3f:aa:74:d4:c5:45:cf:57:
c5:2a:23:a4:70:3a:f5:76:43:fe:15:72:08:57:0b:
bc:87:50:87:53:46:e9:1b:81:ad:9b:be:b2:2f:6a:
4b:b8:31:35:63:e5:21:17:04:c4:55:65:31:51:63:
74:b4:5f:9c:50:a8:c8:1d:e9:b3:c5:84:85:5a:01:
ed:68:28:c6:76:f5:43:24:e4:ce:9e:21:3d:2f:05:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:71:E3:EE:1F:18:CA:A3:60:DD:DD:34:A6:BD:DB:7C:07:B0:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/714c5f52-b8f1-337b-8002-fa5471c4d7a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.10.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e4:c8:0e:6b:e7:9f:0e:e0:16:77:de:6c:98:34:fa:c1:bf:
fe:ce:a8:2a:b9:df:54:39:32:cd:f6:61:51:46:49:23:0b:20:
c0:67:8c:92:93:9e:bc:34:62:42:c6:99:c5:cb:3c:c6:31:b3:
91:d7:e1:53:c7:1d:b4:7b:e1:d7:c7:51:d1:f9:f3:aa:a5:53:
66:d1:b9:7f:08:14:ef:35:66:45:90:90:91:9c:3d:7f:9a:db:
de:84:f0:a2:07:45:24:ea:8e:c7:cc:64:ed:81:3d:b1:a5:06:
ab:7e:d3:fe:07:65:65:0f:59:8d:5b:9a:a6:b3:ef:02:75:c5:
13:f5:6b:12:5f:02:47:4a:cc:75:51:3b:ae:b0:54:60:53:c1:
f7:54:24:da:ec:bd:e2:35:8d:95:17:27:da:59:f9:51:e6:40:
99:03:0f:19:7c:b1:cc:ee:c9:2a:6f:3a:52:0b:01:60:26:b4:
7a:ac:b3:6a:8c:08:25:2c:21:7e:fb:85:e1:6d:44:97:ff:50:
57:0b:cf:26:a3:85:a9:7b:66:87:10:96:4b:e3:7e:8a:44:8e:
0e:69:c3:43:b2:92:0a:fb:af:fc:6b:6a:aa:7f:42:6a:72:8c:
e3:8d:24:eb:e6:51:8e:78:87:9f:8b:0a:6a:01:fe:fe:35:71:
b5:d4:b9:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1l88rDejYEjCauAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
YjNhOWYzYmQtOGFmMC00MTE4LTljMzMtMTJiYmI4ZDIwZTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56GezWRVfkqwJKeFVHqONlIA99ctnTXCCQ1O
ANcKmHYqdR/eEY5/JixZQePK/OGLlWjmU/H1Rqj7IG6PMf+g0HrkUduI2QL5cjHr
/hnQoPFmPwt+tBhEh712SNiDVIxDGah7MXN9ss9Hn+SeJIXm5FPUq6fTNSwJi6XD
k+7nbJEaRBJ6r3l2BU4upVvw9MLYfbVYs0T1+PTna0k3N6epVoiSQiJCDMQn+IYA
P6p01MVFz1fFKiOkcDr1dkP+FXIIVwu8h1CHU0bpG4Gtm76yL2pLuDE1Y+UhFwTE
VWUxUWN0tF+cUKjIHemzxYSFWgHtaCjGdvVDJOTOniE9LwWDsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZscePuHxjKo2Dd3TSmvdt8B7CPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzE0YzVmNTItYjhmMS0z
MzdiLTgwMDItZmE1NDcxYzRkN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AoIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnkyA5r558O4BZ33myYNPrBv/7OqCq531Q5Ms32YVFGSSMLIMBnjJKT
nrw0YkLGmcXLPMYxs5HX4VPHHbR74dfHUdH586qlU2bRuX8IFO81ZkWQkJGcPX+a
296E8KIHRSTqjsfMZO2BPbGlBqt+0/4HZWUPWY1bmqaz7wJ1xRP1axJfAkdKzHVR
O66wVGBTwfdUJNrsveI1jZUXJ9pZ+VHmQJkDDxl8sczuySpvOlILAWAmtHqss2qM
CCUsIX77heFtRJf/UFcLzyajhal7ZocQlkvjfopEjg5pw0Oykgr7r/xraqp/Qmpy
jOONJOvmUY54h5+LCmoB/v41cbXUuUk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:15 2025 by rpki-client