Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2ba4db20-c200-33ec-bf85-e62f88c290f1.roa
File: 2ba4db20-c200-33ec-bf85-e62f88c290f1.roa (raw, json)
Hash identifier: blnLGS2rcQAyVlY4CbyWwh8Om1nrSQICGvbRhv7uwc8=
Subject key identifier: FB:68:42:C1:C6:56:4E:83:DC:03:4E:33:86:F2:A9:E2:75:E8:85:8D
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584851A578BE3681D02512E4C480
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2ba4db20-c200-33ec-bf85-e62f88c290f1.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 9009
IP address blocks: 141.193.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:78:be:36:81:d0:25:12:e4:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=02f9e091-95f4-4198-bc6f-2f36d5acbc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:d7:64:d3:22:3b:c4:ab:92:3e:70:3d:fd:
b5:9e:15:9d:6e:f9:eb:65:1d:05:a1:45:3e:97:6a:
14:07:17:bc:ef:ff:3a:1a:57:a0:a1:f5:28:b0:de:
fd:f5:53:80:a2:15:b8:2b:22:39:eb:ac:9e:e2:c1:
bc:cc:80:c3:ba:54:22:d6:5a:4e:3b:d5:6c:88:96:
9a:f1:ad:3a:87:34:d9:97:87:a6:61:19:95:f4:73:
0b:ac:f2:13:26:fe:4c:71:67:a6:16:1d:90:94:2e:
89:ee:6f:2e:03:86:4f:9d:ce:16:41:af:73:a4:56:
bd:8c:48:86:83:6a:e6:df:2e:95:dc:56:76:f1:35:
21:84:b5:d7:c9:48:1a:88:7d:91:bd:ff:2d:ce:ce:
28:06:92:b1:87:dd:ea:07:59:cd:c2:6f:ec:e8:c8:
17:fe:9d:e5:d8:30:96:04:8d:4d:c1:01:3e:70:24:
ba:39:33:2f:16:5a:a8:df:73:bf:26:cd:39:26:0d:
76:fc:51:37:4c:00:06:86:fc:a9:ad:69:8c:62:6d:
d0:fb:44:39:e1:a1:b0:a0:2c:a3:3f:f6:36:23:99:
45:15:b8:3f:e7:20:99:f2:61:f0:db:4e:68:48:f1:
0c:37:19:9a:94:3f:d5:97:59:3b:da:ca:7f:d7:55:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:42:C1:C6:56:4E:83:DC:03:4E:33:86:F2:A9:E2:75:E8:85:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2ba4db20-c200-33ec-bf85-e62f88c290f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
141.193.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:5e:99:2f:df:27:66:51:45:50:14:61:16:f6:7d:4d:7f:6e:
7b:7a:7f:eb:f1:f2:a6:00:e6:0a:2c:68:8a:f0:d1:cb:60:78:
b4:e5:30:47:d4:75:c4:da:01:23:0d:cb:2f:6f:1b:fe:dc:57:
e5:05:8a:b3:6d:a7:f3:6c:8a:6f:38:c1:32:bc:e8:6d:a9:6b:
96:4a:5c:aa:a0:69:13:6a:ac:ce:00:f5:90:d0:2a:9b:8d:89:
f3:5d:a2:75:5f:25:05:ae:45:07:58:d3:74:f1:30:40:e5:2f:
a3:22:2c:e1:1b:c3:41:8c:1b:db:95:34:e6:3c:1b:6b:6b:df:
f0:16:0f:5d:2c:89:66:9f:08:d8:ac:7e:81:42:2d:97:aa:c8:
a6:7c:57:d8:25:9b:c9:cc:49:3f:ca:f7:02:1d:7f:80:8c:08:
4c:3f:43:2f:e6:77:35:82:19:e9:52:42:c4:24:c8:ee:1f:d3:
19:67:b9:9b:bb:5f:9b:96:b5:9f:d2:58:0a:c2:53:b8:c4:e6:
a3:a4:cc:4c:07:0b:a7:cc:e5:cf:bf:25:25:d7:3e:d7:07:36:
63:6c:72:84:58:6d:de:c8:85:17:33:ae:0a:36:60:f5:a7:b5:
18:ad:d7:9a:18:41:6b:83:fc:2d:a6:4a:d9:73:bb:68:30:15:
1b:e0:83:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXi+NoHQJRLkxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
MDJmOWUwOTEtOTVmNC00MTk4LWJjNmYtMmYzNmQ1YWNiYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdXXZNMiO8Srkj5wPf21nhWdbvnrZR0FoUU+
l2oUBxe87/86GlegofUosN799VOAohW4KyI566ye4sG8zIDDulQi1lpOO9VsiJaa
8a06hzTZl4emYRmV9HMLrPITJv5McWemFh2QlC6J7m8uA4ZPnc4WQa9zpFa9jEiG
g2rm3y6V3FZ28TUhhLXXyUgaiH2Rvf8tzs4oBpKxh93qB1nNwm/s6MgX/p3l2DCW
BI1NwQE+cCS6OTMvFlqo33O/Js05Jg12/FE3TAAGhvyprWmMYm3Q+0Q54aGwoCyj
P/Y2I5lFFbg/5yCZ8mHw205oSPEMNxmalD/Vl1k72sp/11WMmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtoQsHGVk6D3ANOM4byqeJ16IWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMmJhNGRiMjAtYzIwMC0z
M2VjLWJmODUtZTYyZjg4YzI5MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcFjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5emS/fJ2ZRRVAUYRb2fU1/bnt6f+vx8qYA5gosaIrw0ctgeLTlMEfU
dcTaASMNyy9vG/7cV+UFirNtp/Nsim84wTK86G2pa5ZKXKqgaRNqrM4A9ZDQKpuN
ifNdonVfJQWuRQdY03TxMEDlL6MiLOEbw0GMG9uVNOY8G2tr3/AWD10siWafCNis
foFCLZeqyKZ8V9glm8nMST/K9wIdf4CMCEw/Qy/mdzWCGelSQsQkyO4f0xlnuZu7
X5uWtZ/SWArCU7jE5qOkzEwHC6fM5c+/JSXXPtcHNmNscoRYbd7IhRczrgo2YPWn
tRit15oYQWuD/C2mStlzu2gwFRvggzg=
-----END CERTIFICATE-----
Generated at Thu Apr 17 12:29:33 2025 by rpki-client