Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/bf406a0a-a170-3b3c-889b-140f502290d5.roa
File: bf406a0a-a170-3b3c-889b-140f502290d5.roa (raw, json)
Hash identifier: ML67SudA66CveDUkHGkftjroC5dcdrZJRkGW8fnjXIM=
Subject key identifier: CC:6F:AD:8E:2D:5F:59:98:0A:B8:50:30:64:84:31:93:8C:48:98:38
Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial: 010D0C9F43285838E8D4EA03C86C85D31CFAEF10
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/bf406a0a-a170-3b3c-889b-140f502290d5.roa
Signing time: Wed 10 Feb 2021 05:00:00 +0000
ROA not before: Wed 10 Feb 2021 05:00:00 +0000
ROA not after: Tue 16 May 2023 04:00:00 +0000
asID: 16509
IP address blocks: 98.142.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:e8:d4:ea:03:c8:6c:85:d3:1c:fa:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Validity
Not Before: Feb 10 05:00:00 2021 GMT
Not After : May 16 04:00:00 2023 GMT
Subject: CN=48891963-b3b1-4982-ac30-7d3b5fc8c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:5a:15:00:8a:42:f5:ec:c4:f1:4c:cf:74:
4c:1e:a3:70:51:4a:6d:da:dc:98:38:f3:d8:e9:cc:
b5:7c:4c:7c:7e:50:31:21:93:66:27:89:b3:a3:0e:
73:bb:0c:2b:e9:5d:1a:4b:56:c9:83:40:05:9a:26:
d7:1a:ba:2b:82:dd:fc:4a:f7:00:fe:ac:f9:e4:41:
dd:2c:43:63:ac:fd:00:64:a8:b8:14:c7:39:e0:0e:
64:2d:9f:34:8f:e9:ab:2b:4a:4b:11:fe:56:31:35:
c1:c5:92:89:2d:58:88:48:01:b3:24:e0:56:95:27:
ce:1c:7e:07:e6:5e:de:cb:0f:14:9a:52:26:37:d7:
71:d7:92:e1:6d:6a:22:95:88:12:d3:d5:6a:03:55:
cf:46:e8:39:95:0e:11:29:c0:da:01:ff:79:6b:fb:
da:83:61:e9:e4:5c:68:06:36:69:4e:dd:cb:f0:83:
b1:d3:3b:d4:d8:e0:32:87:ea:4e:bb:55:19:ed:80:
e7:74:45:d7:0b:53:e8:a9:a3:3e:7f:4b:69:b3:fa:
fd:64:55:19:79:22:93:87:42:8a:c2:82:39:f0:86:
71:5e:e0:79:e4:bf:0a:84:e3:e6:4d:11:76:3b:1e:
32:61:bf:67:06:b5:0d:36:9c:2c:b8:d6:24:14:2d:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:AD:8E:2D:5F:59:98:0A:B8:50:30:64:84:31:93:8C:48:98:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/bf406a0a-a170-3b3c-889b-140f502290d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
X509v3 Authority Key Identifier:
keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
sbgp-ipAddrBlock: critical
IPv4:
98.142.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:56:13:82:eb:52:c7:fa:8d:d8:a5:48:69:15:f0:3e:91:ea:
17:32:0b:76:8d:86:2b:27:a6:d5:6f:fd:27:a3:87:e7:ed:fa:
8f:24:23:f6:d3:e0:f7:50:dc:bd:01:f6:1a:5d:a0:15:9f:61:
0d:9b:aa:e1:a4:48:00:ad:ff:54:23:5d:6e:35:ba:20:1a:cd:
3e:aa:d5:30:47:dd:7a:a6:9d:a3:c5:1f:83:e5:68:cc:f0:a3:
a8:46:db:7d:cd:5c:3d:93:56:72:43:6b:7e:fc:dc:21:2d:a9:
25:5f:12:9f:62:6e:87:48:d7:bb:34:32:83:f9:29:15:05:c5:
44:d4:79:5e:5f:4f:13:d4:03:98:6b:93:08:95:4d:04:26:4c:
94:28:34:84:6f:9b:a6:55:13:e1:53:a5:ac:12:9d:52:58:e3:
d3:e7:aa:eb:ac:31:bf:2b:69:2f:df:2d:29:ef:1a:91:1d:51:
55:ea:b7:16:6b:8c:0c:d6:46:9a:d4:77:d1:0c:d3:64:f3:49:
f2:d2:87:02:4f:20:64:ed:cb:c3:0b:fa:32:e2:0b:1b:a3:14:
51:4b:1b:25:61:72:cf:b6:3b:79:d0:a1:3f:12:81:7e:04:27:
e1:f2:f2:2b:f0:0b:2a:df:7e:ab:10:53:15:37:a7:f6:49:1f:
03:e0:c5:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDjo1OoDyGyF0xz67xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3
N2YwMB4XDTIxMDIxMDA1MDAwMFoXDTIzMDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDg4OTE5NjMtYjNiMS00OTgyLWFjMzAtN2QzYjVmYzhjOGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvFaFQCKQvXsxPFMz3RMHqNwUUpt2tyYOPPY
6cy1fEx8flAxIZNmJ4mzow5zuwwr6V0aS1bJg0AFmibXGrorgt38SvcA/qz55EHd
LENjrP0AZKi4FMc54A5kLZ80j+mrK0pLEf5WMTXBxZKJLViISAGzJOBWlSfOHH4H
5l7eyw8UmlImN9dx15LhbWoilYgS09VqA1XPRug5lQ4RKcDaAf95a/vag2Hp5Fxo
BjZpTt3L8IOx0zvU2OAyh+pOu1UZ7YDndEXXC1PoqaM+f0tps/r9ZFUZeSKTh0KK
woI58IZxXuB55L8KhOPmTRF2Ox4yYb9nBrUNNpwsuNYkFC05oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxvrY4tX1mYCrhQMGSEMZOMSJg4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy
ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvYmY0MDZhMGEtYTE3MC0z
YjNjLTg4OWItMTQwZjUwMjI5MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz
ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx
NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh
YTMxMTc3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClWE4LrUsf6jdilSGkV8D6R6hcyC3aNhisnptVv/Sejh+ft+o8kI/bT
4PdQ3L0B9hpdoBWfYQ2bquGkSACt/1QjXW41uiAazT6q1TBH3XqmnaPFH4PlaMzw
o6hG233NXD2TVnJDa3783CEtqSVfEp9ibodI17s0MoP5KRUFxUTUeV5fTxPUA5hr
kwiVTQQmTJQoNIRvm6ZVE+FTpawSnVJY49PnquusMb8raS/fLSnvGpEdUVXqtxZr
jAzWRprUd9EM02TzSfLShwJPIGTty8ML+jLiCxujFFFLGyVhcs+2O3nQoT8SgX4E
J+Hy8ivwCyrffqsQUxU3p/ZJHwPgxbg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:39 2025 by rpki-client