Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/03443f43-6490-3b0b-925d-34e0ef283833.roa
File: 03443f43-6490-3b0b-925d-34e0ef283833.roa (raw, json)
Hash identifier: vy0INM+Ic2yvHgie37R1okLM2lVhcy3EKKCRANeks+c=
Subject key identifier: D2:A1:DE:BC:57:AB:57:8E:28:A2:7D:E2:11:BA:AC:C6:AE:C6:51:D0
Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial: 010D0C9F43285845E88E61ACBE43189576564B80
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/03443f43-6490-3b0b-925d-34e0ef283833.roa
Signing time: Sat 18 May 2024 01:00:27 +0000
ROA not before: Sat 18 May 2024 01:00:27 +0000
ROA not after: Fri 16 Aug 2024 01:00:27 +0000
asID: 7922
IP address blocks: 199.187.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:e8:8e:61:ac:be:43:18:95:76:56:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Validity
Not Before: May 18 01:00:27 2024 GMT
Not After : Aug 16 01:00:27 2024 GMT
Subject: CN=ad9cafe4-cdb4-49f9-81c6-8bd00305d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:4e:89:d2:05:73:a4:d7:47:0e:5f:72:e5:
72:fb:3d:16:8b:1e:9f:7a:e0:4e:a8:5b:b2:65:e9:
0e:51:29:e9:0b:66:e1:87:58:1a:c9:04:05:9c:72:
a1:68:36:b8:7e:3e:d1:a5:51:e1:9d:f2:22:9f:59:
50:5a:97:78:ef:87:49:b4:d8:23:e9:94:96:b1:6d:
68:d8:d6:17:39:78:78:f5:7e:16:f8:64:9a:ef:a3:
d9:c1:a3:9b:d8:c7:0f:4f:c7:50:6b:06:8b:21:49:
04:b7:26:e6:bf:40:fd:4f:29:e8:49:34:75:72:c7:
01:1b:7c:0e:b5:17:6e:dd:e2:b8:92:e1:94:ce:c9:
6e:4d:00:00:b7:49:5b:e4:9c:dc:88:62:31:84:d5:
d4:0a:83:93:ee:41:cb:51:ca:15:e7:77:61:a9:22:
66:4a:37:92:0a:f2:42:a6:d1:7d:06:2c:2e:79:a6:
cc:ca:a7:24:58:bd:30:12:db:11:61:bd:c8:8b:4d:
9b:56:a4:e7:54:81:1b:ba:24:74:e6:af:5b:43:03:
79:68:ca:20:cd:40:c4:0e:a1:22:ea:e8:43:8a:86:
5a:cd:c9:15:5f:9a:18:c5:ce:9a:58:6c:eb:17:ef:
9b:02:46:34:39:80:3e:88:50:49:72:fa:79:27:26:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:DE:BC:57:AB:57:8E:28:A2:7D:E2:11:BA:AC:C6:AE:C6:51:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/03443f43-6490-3b0b-925d-34e0ef283833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
X509v3 Authority Key Identifier:
keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:33:c9:a7:70:6f:af:f2:60:82:b1:f1:da:9a:91:08:d5:41:
12:1f:5d:22:1f:52:5d:c0:49:e4:bc:2d:87:af:1b:66:a4:ae:
75:c4:4d:71:61:76:5c:2d:63:61:7e:15:3f:37:3d:34:21:42:
07:69:7b:73:c6:d2:de:e4:60:93:80:85:d0:bc:8e:e9:47:95:
2c:fe:57:ee:c7:f9:5c:d5:b7:1f:97:6e:47:19:59:d0:6e:99:
12:05:ec:e7:02:8a:2f:97:06:0a:a9:51:4c:2e:c4:2a:95:52:
4d:87:8e:1c:f8:be:de:67:d2:cb:34:30:6c:f6:20:f7:ea:ca:
bd:04:82:6a:67:c1:e0:98:cb:0d:e0:30:a6:ce:0c:c8:cb:24:
03:41:52:5b:8c:f8:5c:d0:ee:6c:a2:b2:58:80:02:7f:6b:4e:
b4:91:57:51:1f:9c:98:0a:51:0c:87:b8:d0:a0:7c:47:cb:7b:
8f:42:76:b3:28:e8:9b:9e:7f:27:02:6e:4c:3e:fa:59:37:a8:
77:f7:41:99:b6:02:f5:dd:c3:90:af:07:b8:9f:ce:03:01:09:
c8:5a:75:58:16:97:5f:85:25:d8:ec:34:1e:3a:fa:c5:ab:68:
cc:10:3e:0c:f4:49:b9:71:29:a2:0c:f8:66:77:cb:c9:ef:93:
9b:a8:6d:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXojmGsvkMYlXZWS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj
NDYwMB4XDTI0MDUxODAxMDAyN1oXDTI0MDgxNjAxMDAyN1owLzEtMCsGA1UEAxMk
YWQ5Y2FmZTQtY2RiNC00OWY5LTgxYzYtOGJkMDAzMDVkNzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbxOidIFc6TXRw5fcuVy+z0Wix6feuBOqFuy
ZekOUSnpC2bhh1gayQQFnHKhaDa4fj7RpVHhnfIin1lQWpd474dJtNgj6ZSWsW1o
2NYXOXh49X4W+GSa76PZwaOb2McPT8dQawaLIUkEtybmv0D9TynoSTR1cscBG3wO
tRdu3eK4kuGUzsluTQAAt0lb5JzciGIxhNXUCoOT7kHLUcoV53dhqSJmSjeSCvJC
ptF9BiwueabMyqckWL0wEtsRYb3Ii02bVqTnVIEbuiR05q9bQwN5aMogzUDEDqEi
6uhDioZazckVX5oYxc6aWGzrF++bAkY0OYA+iFBJcvp5JyYzkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKh3rxXq1eOKKJ94hG6rMauxlHQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk
M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvMDM0NDNmNDMtNjQ5MC0z
YjBiLTkyNWQtMzRlMGVmMjgzODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0
MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1
YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2
N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7u8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADczyadwb6/yYIKx8dqakQjVQRIfXSIfUl3ASeS8LYevG2akrnXETXFh
dlwtY2F+FT83PTQhQgdpe3PG0t7kYJOAhdC8julHlSz+V+7H+VzVtx+XbkcZWdBu
mRIF7OcCii+XBgqpUUwuxCqVUk2Hjhz4vt5n0ss0MGz2IPfqyr0EgmpnweCYyw3g
MKbODMjLJANBUluM+FzQ7myisliAAn9rTrSRV1EfnJgKUQyHuNCgfEfLe49CdrMo
6JuefycCbkw++lk3qHf3QZm2AvXdw5CvB7ifzgMBCchadVgWl1+FJdjsNB46+sWr
aMwQPgz0SblxKaIM+GZ3y8nvk5uobcc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:55 2025 by rpki-client