Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/3e383eff-7ea6-3866-95d2-2fd01be6bcb2.roa
File: 3e383eff-7ea6-3866-95d2-2fd01be6bcb2.roa (raw, json)
Hash identifier: MsJVwLHUUtyYRo9gdmR7vNusAvreQVBDpvzAUDnFWWQ=
Subject key identifier: 19:03:B4:7A:52:B4:B5:78:6B:B3:66:4F:DE:B1:DA:AF:D3:8B:BF:22
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584833DD008FB9FECA7D5B1ED700
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/3e383eff-7ea6-3866-95d2-2fd01be6bcb2.roa
Signing time: Sat 14 Dec 2024 09:58:24 +0000
ROA not before: Sat 14 Dec 2024 09:58:24 +0000
ROA not after: Fri 14 Mar 2025 08:58:24 +0000
asID: 54535
IP address blocks: 146.197.27.0/24 maxlen: 24
146.197.79.0/24 maxlen: 24
146.197.83.0/24 maxlen: 24
146.197.120.0/22 maxlen: 22
146.197.242.0/24 maxlen: 24
146.197.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:33:dd:00:8f:b9:fe:ca:7d:5b:1e:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 14 09:58:24 2024 GMT
Not After : Mar 14 08:58:24 2025 GMT
Subject: CN=fddd68d5-bd43-429c-8401-68900fa9c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:77:9b:fc:81:ce:88:d7:32:93:34:0b:3f:
54:82:43:a4:45:e4:13:73:9c:7a:6a:2f:70:e0:b3:
55:e8:d2:3a:9c:b0:96:4b:8a:75:98:74:4e:76:b1:
1c:bd:5c:70:03:ab:38:c9:c2:dd:a8:d0:a4:68:22:
c8:0b:8f:60:d7:ba:be:d5:3f:27:80:5c:5f:d3:d0:
ba:c8:63:ec:2b:87:3f:57:6c:24:ce:88:74:20:61:
44:26:50:5f:7a:0c:c3:b4:c4:0e:fb:59:ff:84:dd:
ad:63:a6:66:29:56:bc:b9:8b:f4:9a:fe:50:57:ca:
de:29:2e:62:76:7f:7c:e6:c9:d9:f9:9a:6e:10:a8:
e0:39:b5:67:a0:27:8c:09:40:0e:0e:ef:51:59:44:
c3:39:b9:c1:86:76:1e:49:87:cb:92:74:3d:03:b4:
52:cd:35:ef:b0:0c:14:e8:0a:9d:81:35:36:88:9c:
0d:7c:5f:bd:d1:c6:8b:ea:08:d4:ed:71:7e:cb:0f:
2d:c3:12:4b:96:2d:07:f7:37:6a:6d:93:be:be:9b:
56:f0:07:27:42:83:64:9a:14:db:86:52:00:4b:41:
5e:94:f5:e3:5c:d7:71:30:12:86:e2:d8:07:b1:d8:
44:5c:aa:b6:c1:87:85:5b:0e:0d:c2:bb:0b:6d:bf:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:03:B4:7A:52:B4:B5:78:6B:B3:66:4F:DE:B1:DA:AF:D3:8B:BF:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/3e383eff-7ea6-3866-95d2-2fd01be6bcb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
146.197.27.0/24
146.197.79.0/24
146.197.83.0/24
146.197.120.0/22
146.197.242.0/24
146.197.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:00:c5:09:84:58:54:c8:50:63:e8:98:47:9b:10:5d:63:29:
9c:28:8d:d7:f9:5f:53:89:72:b8:49:c5:f6:c6:fe:a5:d9:68:
09:43:d7:96:8c:9b:e1:a4:03:eb:fb:2c:63:54:08:d5:aa:20:
1d:01:cd:6b:23:fa:c1:3c:76:47:c1:1d:ac:07:a2:2a:c3:43:
45:56:0e:7a:1f:09:c3:2a:f8:6b:56:86:8a:b1:91:96:67:7f:
ec:e3:bc:6b:13:44:9b:48:87:86:99:36:a0:cf:43:66:d5:04:
9e:53:d2:5a:f1:ac:08:3a:26:61:8d:2b:db:d7:10:97:6a:ea:
4a:21:08:68:5d:bd:a1:b1:5e:76:5e:7c:21:ae:8b:2c:67:de:
46:c0:17:f7:26:3e:bc:85:b7:c3:dc:65:31:a3:35:d1:20:96:
88:39:e4:43:32:aa:a1:23:f3:61:c0:a2:d2:07:31:20:aa:0b:
1f:22:b1:4a:d0:bf:14:ed:8a:4d:e0:98:a3:79:36:5d:6a:56:
88:31:4b:31:f7:86:43:10:2a:2d:e7:81:87:12:3a:0b:aa:20:
55:b7:9a:2b:ff:fd:19:de:1b:58:0c:04:37:62:16:2b:ed:e5:
36:6c:3e:cc:76:00:82:ba:ed:95:26:7c:25:06:ed:25:6f:e3:
60:93:e7:a9
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEgz3QCPuf7KfVse1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1
NmM5MB4XDTI0MTIxNDA5NTgyNFoXDTI1MDMxNDA4NTgyNFowLzEtMCsGA1UEAxMk
ZmRkZDY4ZDUtYmQ0My00MjljLTg0MDEtNjg5MDBmYTljNjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOl3m/yBzojXMpM0Cz9UgkOkReQTc5x6ai9w
4LNV6NI6nLCWS4p1mHROdrEcvVxwA6s4ycLdqNCkaCLIC49g17q+1T8ngFxf09C6
yGPsK4c/V2wkzoh0IGFEJlBfegzDtMQO+1n/hN2tY6ZmKVa8uYv0mv5QV8reKS5i
dn985snZ+ZpuEKjgObVnoCeMCUAODu9RWUTDObnBhnYeSYfLknQ9A7RSzTXvsAwU
6AqdgTU2iJwNfF+90caL6gjU7XF+yw8twxJLli0H9zdqbZO+vptW8AcnQoNkmhTb
hlIAS0FelPXjXNdxMBKG4tgHsdhEXKq2wYeFWw4NwrsLbb8MNQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFBkDtHpStLV4a7NmT96x2q/Ti78iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz
MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvM2UzODNlZmYtN2VhNi0z
ODY2LTk1ZDItMmZkMDFiZTZiY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy
MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy
NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0
ZTFjMjU2YzkuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAksUbAwQA
ksVPAwQAksVTAwQCksV4AwQAksXyAwQAksX2MFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAYAxQmEWFTIUGPo
mEebEF1jKZwojdf5X1OJcrhJxfbG/qXZaAlD15aMm+GkA+v7LGNUCNWqIB0BzWsj
+sE8dkfBHawHoirDQ0VWDnofCcMq+GtWhoqxkZZnf+zjvGsTRJtIh4aZNqDPQ2bV
BJ5T0lrxrAg6JmGNK9vXEJdq6kohCGhdvaGxXnZefCGuiyxn3kbAF/cmPryFt8Pc
ZTGjNdEglog55EMyqqEj82HAotIHMSCqCx8isUrQvxTtik3gmKN5Nl1qVogxSzH3
hkMQKi3ngYcSOguqIFW3miv//RneG1gMBDdiFivt5TZsPsx2AIK67ZUmfCUG7SVv
42CT56k=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:46 2025 by rpki-client