Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5c89f199-899f-3321-a466-c4daba7ff090.roa
File: 5c89f199-899f-3321-a466-c4daba7ff090.roa (raw, json)
Hash identifier: RGBP3Ol76APZQnX9jIpVUl7W2qaOdyveq6P//Cg4WCc=
Subject key identifier: 28:69:8C:FC:5C:09:06:82:5C:A0:03:D4:94:F9:7E:2B:40:1B:0B:D6
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F4328584867FAE8E22BDA52CB37EC6F30
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5c89f199-899f-3321-a466-c4daba7ff090.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 53356
IP address blocks: 130.254.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e8:e2:2b:da:52:cb:37:ec:6f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=90925f65-723d-4c70-b942-b5cd46e910f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:e1:d2:06:b8:ee:71:a5:ac:8b:2b:d8:2d:
b3:8e:17:3e:68:90:5e:31:d3:42:c5:37:66:f9:0a:
cc:ab:37:ce:a7:e5:c0:28:d9:1c:bc:f6:7d:cd:2f:
bf:3e:ac:f6:30:da:3b:2c:04:25:d1:93:d2:5a:f4:
d9:97:f3:ce:62:6a:70:44:7d:9f:d9:24:e3:66:41:
64:57:6f:ca:b7:ef:89:dc:47:0b:1d:4a:c9:e0:9e:
c8:0d:9b:5b:3e:d6:e8:9a:49:35:05:b9:3a:00:ef:
0f:51:74:f0:1d:be:54:40:7b:bd:54:ce:6c:64:a5:
8a:ce:5c:20:90:33:de:f2:5e:d6:ba:57:8b:10:8f:
c6:7a:6d:9c:5c:9d:d9:36:73:4b:b0:3c:c9:2c:2a:
18:aa:84:e2:0b:f7:a0:5d:39:ae:86:b9:48:6a:b9:
49:93:9c:24:6d:19:b1:74:5b:a9:45:cb:27:e7:3c:
c7:c9:70:f6:aa:71:df:02:ca:0d:59:03:de:8f:c0:
77:f4:8f:94:d2:f6:20:5d:e0:92:59:7a:34:91:ed:
82:52:fd:b0:1b:39:dc:26:ff:a1:de:db:4e:f5:c8:
ac:84:7c:30:a1:66:7a:86:d7:25:72:5b:21:5f:20:
a7:01:6c:75:0d:f8:ae:e8:e4:ca:cd:97:d9:b4:fe:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:8C:FC:5C:09:06:82:5C:A0:03:D4:94:F9:7E:2B:40:1B:0B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5c89f199-899f-3321-a466-c4daba7ff090.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9a:ea:b6:46:ff:00:c0:7d:54:d6:ee:e9:a9:da:53:2a:1b:
89:85:22:81:97:43:c9:33:c5:44:5e:7d:b5:d4:52:d1:57:d2:
a8:ea:8f:92:94:93:c6:1e:36:e2:d7:9c:40:b6:60:90:e0:22:
81:fe:17:81:e9:c0:b7:c1:9e:ba:73:19:ce:fc:3a:79:b2:f3:
62:4d:13:32:2c:5c:8b:da:81:8c:c7:80:f6:eb:b8:25:9f:0f:
70:5d:64:f1:89:fa:fb:3f:29:f0:ef:4d:f9:d9:61:0c:84:6d:
7f:57:f8:a4:83:89:d3:b1:82:a7:b7:a7:71:d1:6c:2a:2d:7d:
c1:2d:d2:b2:31:14:4d:dc:d6:c9:1c:f0:4f:28:ba:f7:5a:7c:
45:3d:62:83:3b:8d:0c:8a:02:5b:f0:3f:9a:0b:fc:40:29:b6:
a3:3c:b8:f6:7f:b3:ef:f9:5d:c5:b8:60:db:00:4a:e0:d4:42:
5d:02:91:03:ac:8b:c4:63:fe:be:f1:5c:64:9d:67:63:1c:c1:
d9:ab:81:2a:aa:39:80:50:1c:18:78:d9:65:62:4f:7f:57:5a:
59:22:18:f3:3e:d9:cd:98:24:26:41:d3:e3:d8:38:60:8a:93:
94:d3:20:8c:eb:cb:fa:cc:60:c8:97:7e:38:fb:dc:bd:c8:e3:
aa:a6:86:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+ujiK9pSyzfsbzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk
OTA5MjVmNjUtNzIzZC00YzcwLWI5NDItYjVjZDQ2ZTkxMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhHh0ga47nGlrIsr2C2zjhc+aJBeMdNCxTdm
+QrMqzfOp+XAKNkcvPZ9zS+/Pqz2MNo7LAQl0ZPSWvTZl/POYmpwRH2f2STjZkFk
V2/Kt++J3EcLHUrJ4J7IDZtbPtbomkk1Bbk6AO8PUXTwHb5UQHu9VM5sZKWKzlwg
kDPe8l7WuleLEI/Gem2cXJ3ZNnNLsDzJLCoYqoTiC/egXTmuhrlIarlJk5wkbRmx
dFupRcsn5zzHyXD2qnHfAsoNWQPej8B39I+U0vYgXeCSWXo0ke2CUv2wGzncJv+h
3ttO9cishHwwoWZ6htclclshXyCnAWx1Dfiu6OTKzZfZtP5qBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChpjPxcCQaCXKAD1JT5fitAGwvWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNWM4OWYxOTktODk5Zi0z
MzIxLWE0NjYtYzRkYWJhN2ZmMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSa6rZG/wDAfVTW7ump2lMqG4mFIoGXQ8kzxURefbXUUtFX0qjqj5KU
k8YeNuLXnEC2YJDgIoH+F4HpwLfBnrpzGc78Onmy82JNEzIsXIvagYzHgPbruCWf
D3BdZPGJ+vs/KfDvTfnZYQyEbX9X+KSDidOxgqe3p3HRbCotfcEt0rIxFE3c1skc
8E8ouvdafEU9YoM7jQyKAlvwP5oL/EAptqM8uPZ/s+/5XcW4YNsASuDUQl0CkQOs
i8Rj/r7xXGSdZ2McwdmrgSqqOYBQHBh42WViT39XWlkiGPM+2c2YJCZB0+PYOGCK
k5TTIIzry/rMYMiXfjj73L3I46qmhuo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:01 2025 by rpki-client