Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/b36cb820-f407-398d-9ec8-ca2602d820b8.roa
File: b36cb820-f407-398d-9ec8-ca2602d820b8.roa (raw, json)
Hash identifier: dhsOGUjceEO/ZRokBnAXdhDf6DWxOoxsSLRgpbHDAEw=
Subject key identifier: 82:10:D4:7A:1B:4C:EA:03:CA:24:83:F9:71:4D:CF:4B:72:58:1D:A8
Certificate issuer: /CN=e729e81c-d76a-426a-a543-5254046b0d89
Certificate serial: 010D0C9F4328576D51CC73C042CFC1730B8C636C
Authority key identifier: 0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/b36cb820-f407-398d-9ec8-ca2602d820b8.roa
Signing time: Wed 01 Jul 2020 18:03:36 +0000
ROA not before: Wed 01 Jul 2020 04:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 98.158.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0b:8c:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e729e81c-d76a-426a-a543-5254046b0d89
Validity
Not Before: Jul 1 04:00:00 2020 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=5a85ce37-67dc-422d-848e-bd71bfddb8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:55:5a:20:7c:7b:d8:61:89:00:0e:a5:67:
14:75:61:2a:c0:d6:c3:7a:33:8b:0b:b7:35:db:48:
e8:17:dd:1a:ff:ce:34:4f:60:e8:2a:7e:2b:4e:0b:
22:82:16:3a:70:02:5e:73:33:c9:7e:cc:aa:56:89:
7e:f5:8c:34:44:1b:8c:72:e5:4f:05:ba:2f:40:b4:
80:aa:f0:4d:6c:cb:a7:ee:a0:a5:39:6d:45:45:f2:
5b:1f:4d:10:cd:c2:70:88:b6:76:5e:67:75:c0:39:
da:48:de:07:1f:e4:54:57:ec:06:da:aa:95:62:1d:
c1:0c:c6:86:38:b1:53:7a:83:74:16:61:89:b2:ef:
cb:2c:a5:3c:7d:c5:43:de:ba:6c:a5:c3:5e:c1:ba:
6e:a2:25:8a:01:92:cf:7b:fd:cc:ff:f2:57:c7:14:
69:07:c0:c8:3d:af:3b:87:21:ee:f6:2f:fd:b4:95:
10:38:05:58:22:87:a1:31:f0:23:ec:f8:26:3d:8c:
39:9a:7b:f9:4f:7c:99:89:8a:e2:7e:31:3d:41:ef:
40:64:cd:f7:4a:e4:1e:a2:6d:e1:ae:36:99:b1:68:
67:61:70:2f:b2:5f:c1:ed:3b:24:56:40:e2:b3:ee:
0f:23:c6:62:50:80:6f:e8:25:4f:06:e5:a4:82:0a:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:D4:7A:1B:4C:EA:03:CA:24:83:F9:71:4D:CF:4B:72:58:1D:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/b36cb820-f407-398d-9ec8-ca2602d820b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl
X509v3 Authority Key Identifier:
keyid:0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
sbgp-ipAddrBlock: critical
IPv4:
98.158.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:40:28:45:93:b3:07:2c:cb:19:dd:c6:6f:00:f9:45:5e:dd:
e7:7b:d8:b4:60:26:41:6a:1b:ab:de:95:fc:0a:a4:f1:c0:b7:
d7:d2:47:11:0b:39:96:66:1f:5a:97:18:b1:93:d5:0c:a0:b6:
70:a1:6e:72:70:fe:54:d8:38:62:a9:ef:e6:b5:2c:78:8f:18:
18:3b:1d:f7:c0:9c:d3:84:19:33:11:ed:ce:c7:0c:fd:da:7f:
13:fa:0f:ae:75:f7:12:49:b4:9c:a4:c3:b6:ce:ec:1f:12:e2:
14:a5:6c:f8:3f:a2:e4:36:13:74:33:24:79:87:2b:1e:d5:7c:
5c:ea:a8:a0:03:41:21:06:77:ec:c3:e3:7b:26:6c:2b:c4:4a:
52:e8:30:8a:21:5f:81:2d:28:eb:ba:fc:ea:42:ff:4e:39:43:
20:0c:ce:b4:7d:74:f6:10:3c:55:a6:fc:64:cc:d4:cc:b9:e1:
d0:99:f9:3c:23:6b:2d:c6:3c:0a:43:1c:11:05:bf:43:72:d6:
fb:c9:6a:c0:08:72:23:e4:9b:87:40:37:b7:31:e9:c4:b5:d0:
07:cc:7a:10:c0:eb:a0:03:0f:50:32:83:01:2b:a2:08:f4:4f:
49:47:0d:03:d7:b6:93:5b:a7:68:85:3e:28:71:4c:0f:63:ef:
de:a7:bd:11
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcwuMY2wwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGU3MjllODFjLWQ3NmEtNDI2YS1hNTQzLTUyNTQwNDZiMGQ4
OTAeFw0yMDA3MDEwNDAwMDBaFw0yMjEwMDQwNDAwMDBaMC8xLTArBgNVBAMTJDVh
ODVjZTM3LTY3ZGMtNDIyZC04NDhlLWJkNzFiZmRkYjhkYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMF1VVogfHvYYYkADqVnFHVhKsDWw3oziwu3NdtI
6BfdGv/ONE9g6Cp+K04LIoIWOnACXnMzyX7MqlaJfvWMNEQbjHLlTwW6L0C0gKrw
TWzLp+6gpTltRUXyWx9NEM3CcIi2dl5ndcA52kjeBx/kVFfsBtqqlWIdwQzGhjix
U3qDdBZhibLvyyylPH3FQ966bKXDXsG6bqIligGSz3v9zP/yV8cUaQfAyD2vO4ch
7vYv/bSVEDgFWCKHoTHwI+z4Jj2MOZp7+U98mYmK4n4xPUHvQGTN90rkHqJt4a42
mbFoZ2FwL7Jfwe07JFZA4rPuDyPGYlCAb+glTwblpIIKKRUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSCENR6G0zqA8okg/lxTc9LclgdqDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTcyOWU4
MWMtZDc2YS00MjZhLWE1NDMtNTI1NDA0NmIwZDg5L2IzNmNiODIwLWY0MDctMzk4
ZC05ZWM4LWNhMjYwMmQ4MjBiOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2U3MjllODFjLWQ3NmEtNDI2YS1hNTQz
LTUyNTQwNDZiMGQ4OS9lNzI5ZTgxYy1kNzZhLTQyNmEtYTU0My01MjU0MDQ2YjBk
ODkuY3JsMB8GA1UdIwQYMBaAFAyEjYBmcI0FumdK1khiwCbvGVC1MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZTcyOWU4MWMtZDc2YS00MjZhLWE1NDMtNTI1NDA0
NmIwZDg5LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGKe7DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAEEAoRZOzByzLGd3GbwD5RV7d53vYtGAmQWobq96V/Aqk8cC319JHEQs5lmYf
WpcYsZPVDKC2cKFucnD+VNg4Yqnv5rUseI8YGDsd98Cc04QZMxHtzscM/dp/E/oP
rnX3Ekm0nKTDts7sHxLiFKVs+D+i5DYTdDMkeYcrHtV8XOqooANBIQZ37MPjeyZs
K8RKUugwiiFfgS0o67r86kL/TjlDIAzOtH109hA8Vab8ZMzUzLnh0Jn5PCNrLcY8
CkMcEQW/Q3LW+8lqwAhyI+Sbh0A3tzHpxLXQB8x6EMDroAMPUDKDASuiCPRPSUcN
A9e2k1unaIU+KHFMD2Pv3qe9EQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:17:52 2025 by rpki-client