Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cd1a9ee3-1c72-39dc-be29-05871a556ee5.roa
File: cd1a9ee3-1c72-39dc-be29-05871a556ee5.roa (raw, json)
Hash identifier: bGhOkqXth9zhgJ6HWE8d19KeUibc+3grcW72zj1Gy88=
Subject key identifier: 3C:7D:B4:FD:7B:0B:E4:4C:EF:A0:F4:D3:71:A2:5D:A4:30:0E:AF:6E
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858484B12A0D0995EF995F30611C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cd1a9ee3-1c72-39dc-be29-05871a556ee5.roa
Signing time: Sun 22 Dec 2024 17:30:03 +0000
ROA not before: Sun 22 Dec 2024 17:30:03 +0000
ROA not after: Sat 22 Mar 2025 16:30:03 +0000
asID: 834
IP address blocks: 66.78.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4b:12:a0:d0:99:5e:f9:95:f3:06:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 22 17:30:03 2024 GMT
Not After : Mar 22 16:30:03 2025 GMT
Subject: CN=37f3833f-f47a-47e4-9a3f-a0d7f3239949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:44:ec:5b:7f:54:2a:0c:23:52:45:1d:8b:
73:66:b6:e2:e3:30:d5:41:d5:8a:8b:20:eb:d8:a5:
5f:67:54:ec:59:1c:89:9b:41:7a:78:48:d9:32:4b:
0d:db:1b:23:2d:2d:ff:8c:34:7b:37:aa:f0:7e:c2:
fe:57:0f:2c:83:f9:49:ba:33:1c:7e:72:5f:e8:15:
14:63:e2:83:3a:1b:14:c2:1f:29:53:64:e5:35:3b:
90:a3:76:a4:b4:9a:65:d3:50:18:3d:b0:98:f4:4b:
b6:b1:d9:be:1d:62:77:09:18:0c:0f:0b:ab:cd:5f:
13:2e:bf:ef:e6:f9:96:f1:5e:d3:26:94:07:54:b6:
be:94:b9:2b:e1:b9:84:1c:eb:7c:77:0e:2b:0c:7e:
ca:0a:cf:3f:99:06:aa:6e:99:ba:3d:17:d9:4d:fc:
77:a6:f8:d9:a4:df:a5:c7:54:19:0e:d1:12:53:68:
53:03:7e:1b:1a:97:30:55:ef:99:53:63:22:26:9c:
1e:e3:af:34:8f:cd:c6:ad:42:2a:4d:f0:89:9f:ae:
b4:cb:5c:8b:53:09:d9:62:ce:20:f7:1f:03:2c:49:
20:21:01:c3:ef:48:6a:5d:91:ad:bf:e7:82:dd:11:
b0:25:39:b5:88:28:08:24:67:90:fa:15:ec:79:6b:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:B4:FD:7B:0B:E4:4C:EF:A0:F4:D3:71:A2:5D:A4:30:0E:AF:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cd1a9ee3-1c72-39dc-be29-05871a556ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
66.78.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:59:80:8f:35:be:c0:26:20:55:c7:49:2c:52:61:d6:35:96:
28:45:05:db:dc:9c:56:8c:c5:6d:72:8c:ad:fc:3a:85:e2:37:
92:d6:16:82:ad:1d:60:fc:c0:63:f5:f8:cf:6b:3b:9f:9e:45:
12:ec:97:89:d0:7f:13:e8:59:3a:8f:fc:35:6f:62:36:4a:02:
5e:a3:c0:95:08:c5:af:1c:14:52:38:c6:d4:d7:40:d3:bb:a0:
fc:50:df:c0:c2:b9:bc:10:66:11:6f:8d:82:5f:ce:6c:4c:56:
17:80:3b:ba:58:00:6f:cf:83:ca:d7:7f:f9:10:56:1e:92:c5:
19:b2:f9:aa:8d:99:ee:b5:71:c4:cd:a3:43:7a:de:48:ab:30:
cb:c8:4e:56:ad:03:62:9e:10:4c:02:59:e4:01:98:09:0c:b2:
fc:cd:29:d6:a6:29:42:06:32:d2:d2:64:36:70:9b:b3:0a:fe:
df:b7:58:c8:d4:10:48:a2:5c:ad:2a:02:f9:58:71:a0:95:b1:
7c:93:5b:4f:f0:c4:94:fc:e2:91:35:7c:84:97:62:ef:57:69:
c3:b5:33:1b:7a:a2:e7:e2:80:f2:b5:a5:ea:b5:33:40:2f:10:
3e:34:55:94:ae:da:32:00:18:16:fe:f6:70:c0:81:52:67:44:
27:3a:bd:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhLEqDQmV75lfMGEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTIyMjE3MzAwM1oXDTI1MDMyMjE2MzAwM1owLzEtMCsGA1UEAxMk
MzdmMzgzM2YtZjQ3YS00N2U0LTlhM2YtYTBkN2YzMjM5OTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVpE7Ft/VCoMI1JFHYtzZrbi4zDVQdWKiyDr
2KVfZ1TsWRyJm0F6eEjZMksN2xsjLS3/jDR7N6rwfsL+Vw8sg/lJujMcfnJf6BUU
Y+KDOhsUwh8pU2TlNTuQo3aktJpl01AYPbCY9Eu2sdm+HWJ3CRgMDwurzV8TLr/v
5vmW8V7TJpQHVLa+lLkr4bmEHOt8dw4rDH7KCs8/mQaqbpm6PRfZTfx3pvjZpN+l
x1QZDtESU2hTA34bGpcwVe+ZU2MiJpwe4680j83GrUIqTfCJn660y1yLUwnZYs4g
9x8DLEkgIQHD70hqXZGtv+eC3RGwJTm1iCgIJGeQ+hXseWtk4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDx9tP17C+RM76D003GiXaQwDq9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvY2QxYTllZTMtMWM3Mi0z
OWRjLWJlMjktMDU4NzFhNTU2ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQk4pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlZgI81vsAmIFXHSSxSYdY1lihFBdvcnFaMxW1yjK38OoXiN5LWFoKt
HWD8wGP1+M9rO5+eRRLsl4nQfxPoWTqP/DVvYjZKAl6jwJUIxa8cFFI4xtTXQNO7
oPxQ38DCubwQZhFvjYJfzmxMVheAO7pYAG/Pg8rXf/kQVh6SxRmy+aqNme61ccTN
o0N63kirMMvITlatA2KeEEwCWeQBmAkMsvzNKdamKUIGMtLSZDZwm7MK/t+3WMjU
EEiiXK0qAvlYcaCVsXyTW0/wxJT84pE1fISXYu9XacO1Mxt6oufigPK1peq1M0Av
ED40VZSu2jIAGBb+9nDAgVJnRCc6vfI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:27 2025 by rpki-client