Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a1afcb1b-f465-3fb6-ad4d-a67a7fde6270.roa
File: a1afcb1b-f465-3fb6-ad4d-a67a7fde6270.roa (raw, json)
Hash identifier: jktW/Fi6fuL1OHpdd7Nc1LxeFJziEnH2Q3ZOgz+5r7E=
Subject key identifier: E1:6D:EB:39:E0:BB:DA:C3:1F:6A:25:B5:1D:44:5B:30:DB:CD:3C:4E
Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial: 010D0C9F43285848345A489D61C48187F2754A00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a1afcb1b-f465-3fb6-ad4d-a67a7fde6270.roa
Signing time: Sat 14 Dec 2024 14:10:50 +0000
ROA not before: Sat 14 Dec 2024 14:10:50 +0000
ROA not after: Fri 14 Mar 2025 13:10:50 +0000
asID: 62564
IP address blocks: 141.140.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:5a:48:9d:61:c4:81:87:f2:75:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
Validity
Not Before: Dec 14 14:10:50 2024 GMT
Not After : Mar 14 13:10:50 2025 GMT
Subject: CN=b1a01fbb-763f-4a5b-a9e4-1d8f87dda280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:47:66:81:67:c4:8d:2a:bb:7f:9d:62:18:
f1:85:08:ff:8a:9c:05:00:2c:66:78:5a:f6:c7:70:
f2:4f:72:15:e7:d6:0d:5d:4d:33:26:83:88:07:60:
d0:23:4c:8b:31:10:8d:3f:0e:cd:bb:b5:e2:b2:ae:
e8:b8:ef:0a:1f:5c:ac:34:b3:96:5c:b2:29:11:22:
5d:c7:8c:71:1a:59:3f:b1:c5:b1:3f:28:bf:0e:f0:
95:26:89:f3:0b:ef:62:25:e1:a3:a8:57:45:f7:ff:
9e:31:6b:d7:53:2e:59:ed:1b:de:66:c6:57:55:d8:
34:b0:1e:aa:be:eb:53:5b:b6:a4:7b:e2:25:22:1b:
55:f1:8b:05:c1:6b:f4:18:91:a2:ed:3b:0a:6a:c9:
9c:ef:3e:b0:83:da:9b:19:e3:f6:17:21:f5:07:7c:
22:4a:61:44:8c:c8:ce:74:f6:d6:10:a1:93:cc:8e:
bc:0f:87:4a:49:80:80:e9:82:3c:7c:4b:8d:b3:6b:
0b:4e:1f:3b:f4:8f:91:1c:98:b0:f5:a0:9b:1e:9b:
a5:85:8b:84:15:52:3b:8a:92:71:30:4c:97:5f:21:
60:e5:b6:4f:01:f4:9d:8c:0f:22:d0:63:0e:17:00:
81:ca:ac:c9:84:45:59:26:a7:2a:89:a2:95:cf:b3:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:EB:39:E0:BB:DA:C3:1F:6A:25:B5:1D:44:5B:30:DB:CD:3C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a1afcb1b-f465-3fb6-ad4d-a67a7fde6270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
X509v3 Authority Key Identifier:
keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
sbgp-ipAddrBlock: critical
IPv4:
141.140.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:2e:60:7a:03:de:02:0f:87:30:b4:ee:6c:79:51:39:e3:bf:
bb:7d:41:c2:dc:bb:ff:be:1b:9c:94:26:c6:ef:87:2f:17:b5:
13:d9:af:f6:d0:91:98:7c:a2:c4:22:d9:f9:3d:1c:82:20:92:
aa:16:3a:12:00:9f:ac:d3:96:fe:d1:02:dd:11:2a:49:94:f1:
2f:f6:b1:0c:8e:eb:80:56:56:cb:01:90:44:c5:cd:99:d8:fc:
0a:89:0c:c2:a3:3e:6c:1e:ed:be:79:55:d7:00:15:c9:36:87:
38:8b:a4:1b:84:5c:be:36:75:9e:8c:a1:d7:85:16:ca:66:00:
ec:f5:4b:e7:86:81:31:e9:40:55:a1:48:a3:c3:3a:05:65:19:
11:61:36:f3:41:57:7b:95:42:17:14:a4:e4:70:0e:f7:07:ee:
eb:34:78:7a:c3:2f:d6:2b:d1:1d:fc:92:61:5a:39:d8:46:f7:
2c:5e:6c:be:f3:5c:10:22:ac:5f:63:71:77:8c:22:e9:48:2e:
17:6c:6a:4d:e0:bd:ce:83:a0:f9:83:aa:b3:0c:84:45:cb:d4:
43:da:2d:c9:89:8c:09:44:a9:31:37:e2:3c:04:c0:2b:08:ab:
85:11:48:69:3c:55:0f:62:07:a2:73:3f:9b:04:4a:89:99:20:
88:90:cd:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0WkidYcSBh/J1SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI0MTIxNDE0MTA1MFoXDTI1MDMxNDEzMTA1MFowLzEtMCsGA1UEAxMk
YjFhMDFmYmItNzYzZi00YTViLWE5ZTQtMWQ4Zjg3ZGRhMjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMtHZoFnxI0qu3+dYhjxhQj/ipwFACxmeFr2
x3DyT3IV59YNXU0zJoOIB2DQI0yLMRCNPw7Nu7Xisq7ouO8KH1ysNLOWXLIpESJd
x4xxGlk/scWxPyi/DvCVJonzC+9iJeGjqFdF9/+eMWvXUy5Z7RveZsZXVdg0sB6q
vutTW7ake+IlIhtV8YsFwWv0GJGi7TsKasmc7z6wg9qbGeP2FyH1B3wiSmFEjMjO
dPbWEKGTzI68D4dKSYCA6YI8fEuNs2sLTh879I+RHJiw9aCbHpulhYuEFVI7ipJx
MEyXXyFg5bZPAfSdjA8i0GMOFwCByqzJhEVZJqcqiaKVz7MNEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFt6zngu9rDH2oltR1EWzDbzTxOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYTFhZmNiMWItZjQ2NS0z
ZmI2LWFkNGQtYTY3YTdmZGU2MjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjYwMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJguYHoD3gIPhzC07mx5UTnjv7t9QcLcu/++G5yUJsbvhy8XtRPZr/bQ
kZh8osQi2fk9HIIgkqoWOhIAn6zTlv7RAt0RKkmU8S/2sQyO64BWVssBkETFzZnY
/AqJDMKjPmwe7b55VdcAFck2hziLpBuEXL42dZ6ModeFFspmAOz1S+eGgTHpQFWh
SKPDOgVlGRFhNvNBV3uVQhcUpORwDvcH7us0eHrDL9Yr0R38kmFaOdhG9yxebL7z
XBAirF9jcXeMIulILhdsak3gvc6DoPmDqrMMhEXL1EPaLcmJjAlEqTE34jwEwCsI
q4URSGk8VQ9iB6JzP5sESomZIIiQzZQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:07 2025 by rpki-client