Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/be015faa-96e9-3ded-af6c-ba684bc74354.roa
File: be015faa-96e9-3ded-af6c-ba684bc74354.roa (raw, json)
Hash identifier: d43wVm24TSQ4LpkazRgAmhh0untD/JW7Y+UFsChpNH4=
Subject key identifier: B6:10:98:EE:A4:3F:B4:EC:7C:CF:EA:87:DD:E2:68:70:08:CA:D2:0C
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584833DCFFE7A9DA26AD5D4620C0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/be015faa-96e9-3ded-af6c-ba684bc74354.roa
Signing time: Sat 14 Dec 2024 09:58:24 +0000
ROA not before: Sat 14 Dec 2024 09:58:24 +0000
ROA not after: Fri 14 Mar 2025 08:58:24 +0000
asID: 54535
IP address blocks: 156.37.204.0/24 maxlen: 24
156.37.205.0/24 maxlen: 24
156.37.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:33:dc:ff:e7:a9:da:26:ad:5d:46:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 14 09:58:24 2024 GMT
Not After : Mar 14 08:58:24 2025 GMT
Subject: CN=5f354dc5-e64d-46a7-b760-904d4e2426ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:fb:54:e3:c9:ae:62:9c:7f:f5:72:07:cd:
31:53:25:40:8c:c3:d8:42:d3:87:70:51:66:0e:b7:
50:c0:1b:13:2d:77:70:f3:cf:2f:57:0e:b8:fb:c6:
58:39:8b:59:62:3c:3f:99:59:d6:58:0d:8b:b3:ef:
15:59:e5:70:59:4c:0c:37:99:2a:1a:37:5e:14:e4:
d6:2b:f6:9a:b8:20:3f:61:61:61:ee:e7:bc:77:35:
30:1c:9d:f7:88:d3:b9:b5:ee:df:57:fd:9b:f7:7e:
b3:19:3c:91:97:a8:11:4e:89:f7:f2:7c:12:4a:71:
31:57:a5:b3:2e:eb:bc:24:20:e3:6e:f7:78:e3:36:
e4:58:ae:64:4f:61:9f:40:6f:b5:6a:b4:c7:52:54:
da:c2:c1:b8:26:dd:0e:9e:19:50:9a:e4:c3:bc:87:
93:f9:07:72:dc:d8:18:a7:49:04:6e:ca:36:1b:c9:
b6:6b:21:5c:22:c3:df:95:69:5b:47:c3:10:38:e7:
5e:b6:11:d0:37:1e:62:99:3a:e1:a1:af:78:00:20:
ab:74:d2:13:f4:45:76:e8:c3:73:63:ef:74:86:26:
83:0a:bc:6f:7e:be:9d:b3:45:aa:cc:6d:bc:40:51:
71:86:0f:2b:73:c9:c2:a8:d7:77:0d:71:6a:b4:f4:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:98:EE:A4:3F:B4:EC:7C:CF:EA:87:DD:E2:68:70:08:CA:D2:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/be015faa-96e9-3ded-af6c-ba684bc74354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.204.0/23
156.37.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:67:10:27:41:2a:02:6a:28:da:fa:01:49:32:03:9e:57:23:
90:69:8e:4b:87:8f:59:18:84:a2:0b:a3:ac:a2:43:81:0b:42:
e8:e9:19:5b:73:7a:79:cf:55:7b:6c:d8:45:c4:71:08:43:fb:
e7:36:f1:65:98:1c:9d:11:2f:8f:30:4c:88:42:bf:a7:09:85:
39:6c:3f:7d:b8:fd:cf:a2:ec:da:cd:de:db:2e:c6:3a:06:72:
2f:7d:14:67:60:c1:ca:47:87:56:d9:4a:67:58:97:61:f9:90:
2f:e1:d7:6e:e2:c4:a3:26:e2:bd:9e:46:cd:0b:f9:9a:3b:43:
19:90:7e:46:3c:bb:f5:10:14:db:3c:68:90:87:d0:1a:60:0b:
cd:3b:af:45:41:0c:4c:91:d3:05:27:18:f4:b2:f9:41:6a:bc:
27:60:8d:57:f2:5e:6d:09:f7:76:d8:b5:83:28:09:1a:3e:35:
af:7b:22:5e:c5:6e:ff:1f:c2:4b:e4:ef:da:b6:c9:83:bb:6c:
13:ee:e9:06:17:ab:3a:f5:95:99:fd:c1:f8:bf:9e:04:4e:a0:
43:aa:a5:98:98:3a:36:fc:95:54:e7:a6:7b:e7:78:96:66:d2:
c4:7c:5a:ed:bf:ce:52:0d:45:60:e4:a6:ec:b3:db:cb:1a:8d:
ef:67:46:86
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgz3P/nqdomrV1GIMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1
NmM5MB4XDTI0MTIxNDA5NTgyNFoXDTI1MDMxNDA4NTgyNFowLzEtMCsGA1UEAxMk
NWYzNTRkYzUtZTY0ZC00NmE3LWI3NjAtOTA0ZDRlMjQyNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNr7VOPJrmKcf/VyB80xUyVAjMPYQtOHcFFm
DrdQwBsTLXdw888vVw64+8ZYOYtZYjw/mVnWWA2Ls+8VWeVwWUwMN5kqGjdeFOTW
K/aauCA/YWFh7ue8dzUwHJ33iNO5te7fV/2b936zGTyRl6gRTon38nwSSnExV6Wz
Luu8JCDjbvd44zbkWK5kT2GfQG+1arTHUlTawsG4Jt0OnhlQmuTDvIeT+Qdy3NgY
p0kEbso2G8m2ayFcIsPflWlbR8MQOOdethHQNx5imTrhoa94ACCrdNIT9EV26MNz
Y+90hiaDCrxvfr6ds0WqzG28QFFxhg8rc8nCqNd3DXFqtPSVlwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLYQmO6kP7TsfM/qh93iaHAIytIMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz
MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvYmUwMTVmYWEtOTZlOS0z
ZGVkLWFmNmMtYmE2ODRiYzc0MzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy
MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy
NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0
ZTFjMjU2YzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnCXMAwQB
nCXgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHFnECdBKgJqKNr6AUkyA55XI5BpjkuHj1kYhKILo6yiQ4EL
QujpGVtzennPVXts2EXEcQhD++c28WWYHJ0RL48wTIhCv6cJhTlsP324/c+i7NrN
3tsuxjoGci99FGdgwcpHh1bZSmdYl2H5kC/h127ixKMm4r2eRs0L+Zo7QxmQfkY8
u/UQFNs8aJCH0BpgC807r0VBDEyR0wUnGPSy+UFqvCdgjVfyXm0J93bYtYMoCRo+
Na97Il7Fbv8fwkvk79q2yYO7bBPu6QYXqzr1lZn9wfi/ngROoEOqpZiYOjb8lVTn
pnvneJZm0sR8Wu2/zlINRWDkpuyz28saje9nRoY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:52 2025 by rpki-client