Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1ca22de7-2f3f-35e2-8ef3-5bcb8399bd15.roa
File: 1ca22de7-2f3f-35e2-8ef3-5bcb8399bd15.roa (raw, json)
Hash identifier: ziy6rSIIUZZcNd2uMg1bkmooRaH2MopFKhR1x/Q6uZg=
Subject key identifier: 09:C3:DA:36:8A:CB:60:3B:B5:55:83:2E:AC:D3:63:B3:B1:B8:CB:53
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F432858482C2AD4F1C72F0E087A66C900
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1ca22de7-2f3f-35e2-8ef3-5bcb8399bd15.roa
Signing time: Wed 11 Dec 2024 15:48:45 +0000
ROA not before: Wed 11 Dec 2024 15:48:45 +0000
ROA not after: Tue 11 Mar 2025 14:48:45 +0000
asID: 13763
IP address blocks: 141.140.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:2a:d4:f1:c7:2f:0e:08:7a:66:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 11 15:48:45 2024 GMT
Not After : Mar 11 14:48:45 2025 GMT
Subject: CN=e95e8311-e097-45c3-976c-98bd8d3e139e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:2a:74:02:20:37:6f:ab:13:8c:2b:7f:10:
42:ea:aa:e6:1a:21:52:92:3d:a3:a5:a6:83:5a:de:
20:51:4f:e3:67:00:37:b5:38:13:98:c1:52:2f:76:
96:4d:da:57:bb:b2:cb:a2:3e:12:fb:f6:08:f1:0a:
eb:ec:6d:56:4f:47:f0:24:00:d8:2e:9e:cc:ee:55:
55:f5:93:41:2c:43:c8:19:29:09:09:6c:a7:3b:3f:
42:76:9e:75:f4:db:6b:e4:09:b4:22:0a:e2:d4:96:
07:71:f3:20:1d:6c:8d:92:4c:91:97:57:06:5b:1e:
c3:38:c9:c3:34:b0:68:19:63:08:34:b6:de:ae:dc:
66:82:90:fd:23:4a:55:cb:08:5d:fd:8e:2c:f8:e7:
d4:08:3c:8d:bf:33:03:0a:33:83:c7:b1:4c:35:c7:
d6:f6:28:26:ef:8e:b1:b1:68:8e:51:b6:47:3d:76:
c5:c2:73:d9:f9:98:9b:e3:26:61:94:3d:ec:35:a0:
6a:f6:f6:25:ba:0a:c3:5e:a3:13:b2:c9:4e:d6:63:
b9:42:61:c7:64:b9:78:a1:78:83:80:69:84:cd:d3:
42:70:3a:00:11:fd:44:02:ad:ea:de:1a:32:3c:3e:
94:0d:c9:9d:ca:9d:77:73:69:95:1a:b4:1d:72:d4:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:DA:36:8A:CB:60:3B:B5:55:83:2E:AC:D3:63:B3:B1:B8:CB:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1ca22de7-2f3f-35e2-8ef3-5bcb8399bd15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:c7:42:82:59:7e:e3:ef:3a:4f:f4:6d:4c:5c:c4:50:5b:aa:
47:84:e0:e7:2a:ac:8e:32:3e:a4:c0:60:68:55:36:98:40:fa:
8c:0c:f7:e5:78:f8:37:06:7c:67:d1:a1:6f:8f:fe:3d:a8:1c:
b7:74:09:3b:30:ec:e1:ae:2a:83:5a:66:61:9a:2c:e1:21:53:
4f:48:b3:67:bd:de:3f:e5:c2:52:15:a6:aa:eb:fa:4e:89:3d:
ba:00:69:2f:f7:64:7a:65:ef:bd:28:86:37:fa:58:50:0a:a9:
4d:82:4a:39:c6:13:23:6e:8a:e1:ca:75:19:a8:80:35:8d:65:
dd:98:13:2f:0a:1b:50:c7:0f:84:ce:35:0e:56:79:0e:b8:fe:
e8:d2:e9:97:2b:97:91:11:26:37:d6:b7:ea:da:99:ed:32:22:
c2:d9:d7:c7:42:ed:91:bf:26:aa:8b:79:25:dd:17:18:08:92:
ad:92:fb:5d:ae:0d:ff:4d:d1:c0:0b:e6:b2:e8:c4:68:fc:91:
70:e8:5c:29:c7:b8:4f:a6:f0:d7:60:c4:39:07:39:c1:9b:8c:
6e:81:34:a6:8d:32:68:f2:91:9b:6c:b4:e2:13:bb:80:96:d1:
89:1f:16:4a:6b:26:2e:b1:09:5c:ec:d3:a6:59:be:6b:e8:7f:
cb:87:89:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgsKtTxxy8OCHpmyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI0MTIxMTE1NDg0NVoXDTI1MDMxMTE0NDg0NVowLzEtMCsGA1UEAxMk
ZTk1ZTgzMTEtZTA5Ny00NWMzLTk3NmMtOThiZDhkM2UxMzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtucqdAIgN2+rE4wrfxBC6qrmGiFSkj2jpaaD
Wt4gUU/jZwA3tTgTmMFSL3aWTdpXu7LLoj4S+/YI8Qrr7G1WT0fwJADYLp7M7lVV
9ZNBLEPIGSkJCWynOz9Cdp519Ntr5Am0Igri1JYHcfMgHWyNkkyRl1cGWx7DOMnD
NLBoGWMINLbertxmgpD9I0pVywhd/Y4s+OfUCDyNvzMDCjODx7FMNcfW9igm746x
sWiOUbZHPXbFwnPZ+Zib4yZhlD3sNaBq9vYlugrDXqMTsslO1mO5QmHHZLl4oXiD
gGmEzdNCcDoAEf1EAq3q3hoyPD6UDcmdyp13c2mVGrQdctTd5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnD2jaKy2A7tVWDLqzTY7OxuMtTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMWNhMjJkZTctMmYzZi0z
NWUyLThlZjMtNWJjYjgzOTliZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXHQoJZfuPvOk/0bUxcxFBbqkeE4OcqrI4yPqTAYGhVNphA+owM9+V4
+DcGfGfRoW+P/j2oHLd0CTsw7OGuKoNaZmGaLOEhU09Is2e93j/lwlIVpqrr+k6J
PboAaS/3ZHpl770ohjf6WFAKqU2CSjnGEyNuiuHKdRmogDWNZd2YEy8KG1DHD4TO
NQ5WeQ64/ujS6Zcrl5ERJjfWt+rame0yIsLZ18dC7ZG/JqqLeSXdFxgIkq2S+12u
Df9N0cAL5rLoxGj8kXDoXCnHuE+m8NdgxDkHOcGbjG6BNKaNMmjykZtstOITu4CW
0YkfFkprJi6xCVzs06ZZvmvof8uHiWA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:35 2025 by rpki-client