Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/84ccbcbc-80c0-35f8-acc8-16719d02dad8.roa
File: 84ccbcbc-80c0-35f8-acc8-16719d02dad8.roa (raw, json)
Hash identifier: qDQt2NLZZGakAS+od3zApt68q/pC94Bykq5PYodwcQI=
Subject key identifier: 04:4B:7B:F6:5F:37:86:73:D0:D2:F5:56:9E:CB:8E:79:96:73:6B:2C
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584833DD0030DD72B85355021580
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/84ccbcbc-80c0-35f8-acc8-16719d02dad8.roa
Signing time: Sat 14 Dec 2024 09:58:24 +0000
ROA not before: Sat 14 Dec 2024 09:58:24 +0000
ROA not after: Fri 14 Mar 2025 08:58:24 +0000
asID: 54535
IP address blocks: 156.37.202.0/24 maxlen: 24
156.37.203.0/24 maxlen: 24
156.37.250.0/24 maxlen: 24
156.37.251.0/24 maxlen: 24
156.37.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:33:dd:00:30:dd:72:b8:53:55:02:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 14 09:58:24 2024 GMT
Not After : Mar 14 08:58:24 2025 GMT
Subject: CN=094314ac-4cbd-4d25-9620-a04a4655ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:50:b8:5a:d7:44:87:d3:68:89:cf:a1:1b:
be:37:f1:45:4a:cb:94:6d:34:05:5e:99:19:f4:5c:
c3:13:de:b1:bd:f5:59:83:5d:c1:c7:3d:fc:7c:9f:
76:e2:a9:7a:06:02:4a:c5:d9:2d:da:7e:41:c3:e8:
c3:2a:e9:d2:33:a9:db:78:e0:a2:85:9a:3f:c6:2d:
fc:53:74:43:53:b6:0f:ca:97:2f:e6:e9:dd:79:66:
ac:a4:7e:ac:47:4d:cd:b6:6b:9b:a6:36:96:50:4d:
0c:6d:4d:2a:5e:2e:33:fe:ee:b3:d1:98:8b:bf:8e:
8f:f0:28:53:4b:23:e4:b6:33:97:e3:33:ef:0d:27:
a4:af:6d:3a:6d:e5:14:01:c0:90:4f:b9:19:f4:18:
06:f7:0a:7e:28:42:0b:eb:66:df:d4:99:63:41:1a:
66:99:71:cc:73:66:7f:ba:04:74:f4:d8:7f:b9:4a:
86:1f:f6:49:46:cf:90:2e:a1:c6:23:c4:e5:84:6a:
af:c1:6c:df:e2:7e:85:0d:41:00:da:50:e0:98:e4:
ae:36:a6:0c:89:5e:e4:f8:ad:89:c6:75:aa:fe:05:
48:34:da:e1:11:f5:90:ed:3f:c1:3d:c2:b4:8d:16:
90:d0:ab:e1:46:b7:47:c9:1b:38:d9:20:e0:49:c7:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:7B:F6:5F:37:86:73:D0:D2:F5:56:9E:CB:8E:79:96:73:6B:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/84ccbcbc-80c0-35f8-acc8-16719d02dad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.202.0/23
156.37.250.0/23
156.37.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:0b:53:72:26:89:14:36:7c:b6:5b:51:c0:dd:1c:ef:e1:ee:
a0:4b:c1:89:0c:29:5f:3c:13:da:53:14:86:30:89:b7:c2:9e:
27:15:37:8b:f7:64:ee:f9:47:06:1f:49:98:d5:df:ab:f3:2e:
30:3d:d1:d9:bd:c8:6b:4e:b5:80:22:8e:b2:35:1d:a6:56:30:
1f:39:40:5d:bd:f0:5b:1f:3d:6a:2e:a1:05:e7:f5:c9:a4:d2:
9d:26:ed:c5:69:96:ed:6d:de:73:f6:97:0e:b7:fb:b6:d4:06:
74:8a:7a:43:03:4d:ae:b5:6e:43:bf:db:45:5f:ee:be:b9:38:
0a:c7:f8:99:ab:56:13:e8:b9:96:69:58:b5:62:0f:cf:f8:8d:
e3:7d:ae:08:30:49:20:e4:7d:36:b8:85:6d:8b:1d:ff:9a:5f:
96:6e:7c:a6:96:4d:ef:5a:26:a1:ee:1d:5d:ae:07:01:91:59:
e9:9b:c1:29:16:0b:b1:0b:11:0c:2a:3e:97:cf:00:f2:c7:4a:
c1:04:15:13:89:8b:65:d0:20:3e:91:02:cf:90:e5:f6:2c:c4:
f1:57:f7:5b:da:61:bf:37:54:21:2c:bb:e5:a1:7d:7b:b8:7f:
77:f0:2e:0a:8a:43:2a:ba:66:75:d8:19:ae:a3:a5:8c:80:7a:
35:e7:19:23
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEgz3QAw3XK4U1UCFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1
NmM5MB4XDTI0MTIxNDA5NTgyNFoXDTI1MDMxNDA4NTgyNFowLzEtMCsGA1UEAxMk
MDk0MzE0YWMtNGNiZC00ZDI1LTk2MjAtYTA0YTQ2NTVhY2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4VQuFrXRIfTaInPoRu+N/FFSsuUbTQFXpkZ
9FzDE96xvfVZg13Bxz38fJ924ql6BgJKxdkt2n5Bw+jDKunSM6nbeOCihZo/xi38
U3RDU7YPypcv5undeWaspH6sR03NtmubpjaWUE0MbU0qXi4z/u6z0ZiLv46P8ChT
SyPktjOX4zPvDSekr206beUUAcCQT7kZ9BgG9wp+KEIL62bf1JljQRpmmXHMc2Z/
ugR09Nh/uUqGH/ZJRs+QLqHGI8TlhGqvwWzf4n6FDUEA2lDgmOSuNqYMiV7k+K2J
xnWq/gVINNrhEfWQ7T/BPcK0jRaQ0KvhRrdHyRs42SDgScf6CwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFARLe/ZfN4Zz0NL1Vp7LjnmWc2ssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz
MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvODRjY2JjYmMtODBjMC0z
NWY4LWFjYzgtMTY3MTlkMDJkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy
MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy
NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0
ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnCXKAwQB
nCX6AwQAnCX9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFoLU3ImiRQ2fLZbUcDdHO/h7qBLwYkMKV88E9pT
FIYwibfCnicVN4v3ZO75RwYfSZjV36vzLjA90dm9yGtOtYAijrI1HaZWMB85QF29
8FsfPWouoQXn9cmk0p0m7cVplu1t3nP2lw63+7bUBnSKekMDTa61bkO/20Vf7r65
OArH+JmrVhPouZZpWLViD8/4jeN9rggwSSDkfTa4hW2LHf+aX5ZufKaWTe9aJqHu
HV2uBwGRWembwSkWC7ELEQwqPpfPAPLHSsEEFROJi2XQID6RAs+Q5fYsxPFX91va
Yb83VCEsu+WhfXu4f3fwLgqKQyq6ZnXYGa6jpYyAejXnGSM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 11:23:01 2025 by rpki-client