Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a6a7b742-e722-3000-a070-bd9c4b77ae76.roa
File: a6a7b742-e722-3000-a070-bd9c4b77ae76.roa (raw, json)
Hash identifier: mmGjWZqWRwkA9JMLvyGsdpu6YbX+w9Zx/H8DJr3eVSE=
Subject key identifier: E4:C8:46:B2:46:C8:89:D9:C4:30:0F:98:5D:B7:CC:E8:2E:A2:CA:16
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847231823275C6AC69E46B7BB40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a6a7b742-e722-3000-a070-bd9c4b77ae76.roa
Signing time: Sat 07 Sep 2024 17:01:53 +0000
ROA not before: Sat 07 Sep 2024 17:01:53 +0000
ROA not after: Fri 06 Dec 2024 18:01:53 +0000
asID: 204770
IP address blocks: 69.171.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:23:18:23:27:5c:6a:c6:9e:46:b7:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Sep 7 17:01:53 2024 GMT
Not After : Dec 6 18:01:53 2024 GMT
Subject: CN=be94d2ad-08d7-46e2-9e63-7b4c97872701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:d0:1c:95:87:fc:b4:9d:64:5d:7e:05:5f:
31:2e:1f:8b:4d:a6:ca:c5:d5:2d:12:93:9c:35:7a:
cf:b7:16:6b:1d:fd:7a:a9:1d:ae:36:fd:4b:c1:e1:
9c:26:32:ed:d2:cd:3d:89:8c:f0:47:3d:dc:ac:f5:
f8:7a:7a:8a:ad:12:f5:29:75:e2:09:3d:8b:57:df:
3c:91:96:19:c5:5d:c9:a9:bb:ad:b3:96:01:bf:36:
93:4c:b4:9c:3b:a7:e3:47:4a:ce:51:5a:5d:a4:e9:
f4:0f:de:00:b0:89:3a:68:0f:3a:c7:24:6e:23:f6:
2f:66:87:18:43:07:5d:23:bc:84:d4:68:44:57:89:
3c:b6:f8:6e:49:a2:ba:6e:1c:cf:ed:63:4e:9c:45:
86:f1:d3:84:6f:ed:07:ca:14:1f:da:ee:3e:32:7e:
08:61:05:ee:e7:14:41:dd:5d:59:86:3d:b5:16:f0:
a9:45:96:aa:7d:98:01:80:fc:2b:bc:93:a9:1b:84:
60:d0:f8:72:b9:ba:0a:cb:27:b6:dd:90:c7:1e:ba:
ec:0e:55:33:4c:d1:63:db:d3:68:2b:8f:4a:1a:fb:
9f:63:11:06:17:b0:74:7c:22:cc:46:f2:34:73:db:
9b:0a:ab:d9:85:f6:12:ed:c6:c7:43:f0:62:50:60:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:46:B2:46:C8:89:D9:C4:30:0F:98:5D:B7:CC:E8:2E:A2:CA:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a6a7b742-e722-3000-a070-bd9c4b77ae76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
69.171.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:0c:6f:06:e1:c2:34:1a:a8:d6:cb:30:83:19:12:b9:11:c0:
45:be:3d:f6:6b:1e:3d:cf:f0:7a:94:3e:f0:d3:9a:07:09:5b:
e6:21:56:7e:37:96:2c:68:45:53:0a:c8:50:f6:7d:d3:f1:fd:
14:ee:95:b8:9d:7c:c7:cf:ff:b2:4c:cd:57:eb:ce:d9:55:3e:
d0:72:02:b5:fb:35:9c:45:96:c4:ce:8e:21:3c:1d:aa:c0:e8:
d5:35:ad:50:58:36:57:fc:08:2c:cd:82:30:e3:31:10:07:30:
b4:08:20:f5:09:b4:d1:02:7f:66:4f:ca:07:59:92:3a:cb:74:
42:d8:5b:de:b2:15:c1:ec:00:c4:29:53:1f:1f:5e:d8:3c:b3:
fb:77:bb:84:75:e4:dc:b6:8d:93:00:1d:8d:db:e4:9e:ab:8f:
ac:f5:78:64:91:ea:38:72:94:2f:4f:71:a3:10:5f:48:c6:f0:
ff:8f:30:28:74:09:31:99:6f:b5:58:38:9a:c6:c4:29:67:7d:
6c:ee:a2:28:1e:7c:7b:e6:4b:06:49:61:31:a1:18:80:b6:70:
05:60:40:aa:89:59:e0:da:57:af:8d:13:74:2e:9f:66:9d:26:
cd:4a:f1:78:7a:16:ff:f7:99:e8:d8:e8:f2:03:c1:29:f4:90:
a8:1e:88:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcjGCMnXGrGnka3u0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDkwNzE3MDE1M1oXDTI0MTIwNjE4MDE1M1owLzEtMCsGA1UEAxMk
YmU5NGQyYWQtMDhkNy00NmUyLTllNjMtN2I0Yzk3ODcyNzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG7QHJWH/LSdZF1+BV8xLh+LTabKxdUtEpOc
NXrPtxZrHf16qR2uNv1LweGcJjLt0s09iYzwRz3crPX4enqKrRL1KXXiCT2LV988
kZYZxV3Jqbuts5YBvzaTTLScO6fjR0rOUVpdpOn0D94AsIk6aA86xyRuI/YvZocY
QwddI7yE1GhEV4k8tvhuSaK6bhzP7WNOnEWG8dOEb+0HyhQf2u4+Mn4IYQXu5xRB
3V1Zhj21FvCpRZaqfZgBgPwrvJOpG4Rg0PhyuboKyye23ZDHHrrsDlUzTNFj29No
K49KGvufYxEGF7B0fCLMRvI0c9ubCqvZhfYS7cbHQ/BiUGDgMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTIRrJGyInZxDAPmF23zOguosoWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTZhN2I3NDItZTcyMi0z
MDAwLWEwNzAtYmQ5YzRiNzdhZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARavQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAMbwbhwjQaqNbLMIMZErkRwEW+PfZrHj3P8HqUPvDTmgcJW+YhVn43
lixoRVMKyFD2fdPx/RTulbidfMfP/7JMzVfrztlVPtByArX7NZxFlsTOjiE8HarA
6NU1rVBYNlf8CCzNgjDjMRAHMLQIIPUJtNECf2ZPygdZkjrLdELYW96yFcHsAMQp
Ux8fXtg8s/t3u4R15Ny2jZMAHY3b5J6rj6z1eGSR6jhylC9PcaMQX0jG8P+PMCh0
CTGZb7VYOJrGxClnfWzuoigefHvmSwZJYTGhGIC2cAVgQKqJWeDaV6+NE3Qun2ad
Js1K8Xh6Fv/3mejY6PIDwSn0kKgeiFI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:27 2025 by rpki-client