Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b4ba7934-9acf-35db-902c-52c07435346a.roa
File: b4ba7934-9acf-35db-902c-52c07435346a.roa (raw, json)
Hash identifier: LzwFub/Y9ri/iPA3xKNc/PI91pbrtX+/iKi3OzvRER0=
Subject key identifier: 72:93:F2:EE:D4:34:B4:E6:CE:F8:8D:53:16:23:AE:EB:3A:FB:3C:20
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846662F306F8D5685BB4DBDB8C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b4ba7934-9acf-35db-902c-52c07435346a.roa
Signing time: Tue 02 Jul 2024 01:00:24 +0000
ROA not before: Tue 02 Jul 2024 01:00:24 +0000
ROA not after: Mon 30 Sep 2024 01:00:24 +0000
asID: 21738
IP address blocks: 43.255.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:66:2f:30:6f:8d:56:85:bb:4d:bd:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jul 2 01:00:24 2024 GMT
Not After : Sep 30 01:00:24 2024 GMT
Subject: CN=5e6f4465-80f7-4642-aa57-9b4ce7bef30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:e2:90:e5:1d:b1:db:2f:09:01:be:a9:98:
25:ab:a0:4d:e9:05:99:f1:7a:76:e7:1b:bd:de:14:
c7:0e:85:b0:61:f8:6c:a0:95:54:15:d0:87:2c:60:
9b:20:a2:a2:6e:31:d8:fd:ab:55:e7:fa:cf:2b:1e:
3a:c1:76:43:fc:66:70:bb:36:89:13:11:8b:ea:a8:
f5:e2:7a:70:61:e4:a8:a1:d7:50:24:60:e4:55:21:
54:9f:48:6f:86:f1:a4:14:06:00:58:29:46:ae:9c:
78:2b:0e:1c:58:d5:68:77:ac:2b:32:22:7a:fa:d8:
a4:89:e1:ab:25:df:23:5a:38:28:4a:38:51:ae:f9:
c2:c1:68:56:36:d8:13:0c:88:e3:86:15:7d:40:3b:
29:ea:0a:1a:45:db:11:1d:36:f2:7f:a4:74:16:33:
f6:53:0b:87:c8:12:9f:3b:81:46:fc:14:08:49:90:
b8:b9:77:7f:63:fb:dc:c8:97:d6:46:04:ed:33:97:
f3:4f:78:f1:d1:4c:c4:d8:e5:c9:b5:ab:69:5f:84:
55:f8:37:f9:e3:8d:bc:77:0b:23:81:55:4b:62:05:
e5:ba:e7:3e:9c:ac:f2:1f:82:5a:1b:57:f8:3f:b1:
f5:77:48:30:6e:b5:b7:f4:8a:18:bf:36:bd:6f:7b:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:F2:EE:D4:34:B4:E6:CE:F8:8D:53:16:23:AE:EB:3A:FB:3C:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b4ba7934-9acf-35db-902c-52c07435346a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
43.255.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:fd:50:16:2a:67:8d:3a:ab:e2:47:76:b1:8c:6c:e1:2a:a7:
e8:f3:9f:c6:00:19:7c:7e:2e:9e:19:04:15:5c:25:96:8e:52:
f1:5a:60:5c:e1:b1:ab:67:e2:96:27:c6:bc:24:2a:1c:3f:d9:
46:f0:72:59:f1:d5:10:14:cc:b1:bf:3d:00:67:d0:c3:8f:d9:
aa:bd:73:78:12:c8:d1:91:99:b9:12:f1:0a:93:b3:90:3f:d6:
9b:db:c2:3a:c8:18:06:97:9f:6f:43:1f:13:f1:d8:fc:8b:cc:
31:e0:68:ec:08:b9:a1:1b:5d:98:2f:f6:05:61:7f:d4:70:17:
67:0e:63:76:8d:ec:3e:02:ee:4d:08:e3:29:cd:ab:c1:0b:1f:
7c:a2:48:bc:92:76:7b:a3:90:f7:d5:c5:57:88:48:f4:ae:db:
f6:26:1d:42:49:62:a8:05:7a:80:94:6a:ac:8c:4d:2e:68:17:
fd:0a:2c:e7:40:9f:03:8e:f2:9d:f5:1a:f5:38:a5:04:63:18:
2c:16:d7:c5:7c:02:fe:c1:56:ca:87:62:82:bf:65:0f:a0:f4:
03:a2:56:5f:48:4a:c4:3a:64:6d:2f:92:e6:ce:5f:47:16:a1:
aa:4a:3c:28:34:ad:58:96:c7:60:68:42:8b:1c:fc:51:3a:0d:
94:93:3c:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZmLzBvjVaFu029uMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDcwMjAxMDAyNFoXDTI0MDkzMDAxMDAyNFowLzEtMCsGA1UEAxMk
NWU2ZjQ0NjUtODBmNy00NjQyLWFhNTctOWI0Y2U3YmVmMzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BbikOUdsdsvCQG+qZglq6BN6QWZ8Xp25xu9
3hTHDoWwYfhsoJVUFdCHLGCbIKKibjHY/atV5/rPKx46wXZD/GZwuzaJExGL6qj1
4npwYeSooddQJGDkVSFUn0hvhvGkFAYAWClGrpx4Kw4cWNVod6wrMiJ6+tikieGr
Jd8jWjgoSjhRrvnCwWhWNtgTDIjjhhV9QDsp6goaRdsRHTbyf6R0FjP2UwuHyBKf
O4FG/BQISZC4uXd/Y/vcyJfWRgTtM5fzT3jx0UzE2OXJtatpX4RV+Df54428dwsj
gVVLYgXluuc+nKzyH4JaG1f4P7H1d0gwbrW39IoYvza9b3sQmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHKT8u7UNLTmzviNUxYjrus6+zwgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYjRiYTc5MzQtOWFjZi0z
NWRiLTkwMmMtNTJjMDc0MzUzNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/+9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALj9UBYqZ406q+JHdrGMbOEqp+jzn8YAGXx+Lp4ZBBVcJZaOUvFaYFzh
satn4pYnxrwkKhw/2Ubwclnx1RAUzLG/PQBn0MOP2aq9c3gSyNGRmbkS8QqTs5A/
1pvbwjrIGAaXn29DHxPx2PyLzDHgaOwIuaEbXZgv9gVhf9RwF2cOY3aN7D4C7k0I
4ynNq8ELH3yiSLySdnujkPfVxVeISPSu2/YmHUJJYqgFeoCUaqyMTS5oF/0KLOdA
nwOO8p31GvU4pQRjGCwW18V8Av7BVsqHYoK/ZQ+g9AOiVl9ISsQ6ZG0vkubOX0cW
oapKPCg0rViWx2BoQosc/FE6DZSTPLQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:56 2025 by rpki-client