Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/b6d1cb7a-4c78-33ef-97ee-7552341a564a.roa
File: b6d1cb7a-4c78-33ef-97ee-7552341a564a.roa (raw, json)
Hash identifier: 4jBK/t70kDYbsSpzKnYMrj/V1dlmkrFBrLE0ZBjkcgk=
Subject key identifier: E0:E2:A2:9A:51:D7:EC:BC:10:3E:61:45:74:3A:00:BC:50:0F:D3:FF
Certificate issuer: /CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
Certificate serial: 010D0C9F43285837D3E6F6994D4B02420B521F00
Authority key identifier: D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/b6d1cb7a-4c78-33ef-97ee-7552341a564a.roa
Signing time: Tue 03 Nov 2020 05:00:00 +0000
ROA not before: Tue 03 Nov 2020 05:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 23.158.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d3:e6:f6:99:4d:4b:02:42:0b:52:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
Validity
Not Before: Nov 3 05:00:00 2020 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=88999b58-1444-4b29-b569-412e33becbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:ba:9a:af:1c:8d:46:88:f0:97:b8:92:8a:
68:a5:92:d8:87:0d:a4:86:b2:85:fd:ba:8d:62:cb:
bb:e9:8e:e2:20:06:f3:43:c8:0a:93:ba:f5:e4:75:
55:79:a7:2e:b4:63:63:b6:0c:1c:88:f4:5a:88:e6:
44:89:3d:ff:b5:55:27:19:ae:77:46:c9:35:79:e4:
8b:20:88:2c:25:31:83:be:d0:c8:35:86:9d:39:19:
0d:73:58:27:be:96:ca:b3:e8:51:7a:3b:31:5b:94:
a7:c0:d4:7f:59:5d:42:b4:84:d5:47:be:ef:bc:71:
1d:67:ad:fb:d6:01:e3:d6:b1:32:73:c4:24:c6:dd:
65:ae:98:ee:be:8b:39:ca:e2:55:97:ad:a6:a7:fb:
72:c6:2c:40:af:ff:7f:21:d3:50:26:5d:5d:7d:91:
77:a1:d1:61:4a:6e:3e:53:a0:c1:35:c6:34:07:48:
ae:a5:8e:92:4e:50:a6:1f:8f:64:3a:5c:5b:29:5d:
41:5e:8f:b5:9e:70:5e:f9:fa:49:93:09:67:49:dc:
f6:f8:37:3b:7d:88:75:33:36:34:4c:55:a5:aa:fd:
67:e9:bc:51:9f:d6:5a:61:4b:b4:fa:49:d7:d6:77:
eb:e6:ad:45:6c:d9:4c:4e:2e:3b:d5:73:5a:7c:ce:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:A2:9A:51:D7:EC:BC:10:3E:61:45:74:3A:00:BC:50:0F:D3:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/b6d1cb7a-4c78-33ef-97ee-7552341a564a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.crl
X509v3 Authority Key Identifier:
keyid:D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:cb:58:f9:7a:6d:a0:b0:34:96:29:a7:23:83:c4:cb:d3:a6:
d4:56:6a:e0:b5:dd:15:7c:d7:ad:dd:d7:99:fa:89:e7:f3:8a:
6d:ed:18:28:1c:04:7b:1d:3b:15:4b:dc:9f:01:54:1b:18:df:
ed:25:a9:08:c8:82:bf:c5:a5:7a:4a:ad:de:d6:35:d8:4e:8e:
ef:8d:92:7d:82:63:76:0e:0c:a7:d9:ff:b6:bf:0e:b6:64:ad:
a3:7a:d8:c5:f6:eb:46:ac:d9:a6:d9:aa:c7:ac:3b:4f:47:5d:
36:91:93:2b:77:50:da:c5:13:04:d1:5f:57:96:ed:cd:11:1a:
4f:a1:2d:02:d2:88:8b:1b:ee:0d:6f:0a:4a:55:a4:85:5f:0e:
97:15:bb:ab:a3:a5:33:6f:c3:4e:77:b2:42:a0:49:81:21:e4:
7f:c4:a7:9e:5b:23:6f:f5:5d:92:2d:20:97:17:ea:ca:1c:09:
6a:ef:69:cf:2d:0b:1c:3a:2f:e1:1d:dc:f4:5e:63:fe:2f:18:
11:26:ad:da:a7:f4:94:f5:19:9b:2e:cc:1a:a8:59:29:d7:97:
8e:94:9b:b0:84:11:ca:30:11:9a:9a:bc:de:bb:fa:5b:5b:11:
b4:04:d6:41:8f:46:12:3f:df:fc:a3:a0:6a:31:05:9c:2e:37:
00:a8:1d:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfT5vaZTUsCQgtSHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQyZGZkNzEtZTlmOS00YmJlLTk3MDktMGYzNzA5ZmFm
YmJiMB4XDTIwMTEwMzA1MDAwMFoXDTIzMDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
ODg5OTliNTgtMTQ0NC00YjI5LWI1NjktNDEyZTMzYmVjYmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QG6mq8cjUaI8Je4kopopZLYhw2khrKF/bqN
Ysu76Y7iIAbzQ8gKk7r15HVVeacutGNjtgwciPRaiOZEiT3/tVUnGa53Rsk1eeSL
IIgsJTGDvtDINYadORkNc1gnvpbKs+hRejsxW5SnwNR/WV1CtITVR77vvHEdZ637
1gHj1rEyc8Qkxt1lrpjuvos5yuJVl62mp/tyxixAr/9/IdNQJl1dfZF3odFhSm4+
U6DBNcY0B0iupY6STlCmH49kOlxbKV1BXo+1nnBe+fpJkwlnSdz2+Dc7fYh1MzY0
TFWlqv1n6bxRn9ZaYUu0+knX1nfr5q1FbNlMTi471XNafM7dVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODioppR1+y8ED5hRXQ6ALxQD9P/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNDJk
ZmQ3MS1lOWY5LTRiYmUtOTcwOS0wZjM3MDlmYWZiYmIvYjZkMWNiN2EtNGM3OC0z
M2VmLTk3ZWUtNzU1MjM0MWE1NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjQyZGZkNzEtZTlmOS00YmJlLTk3
MDktMGYzNzA5ZmFmYmJiLzI0MmRmZDcxLWU5ZjktNGJiZS05NzA5LTBmMzcwOWZh
ZmJiYi5jcmwwHwYDVR0jBBgwFoAU0FumjwqDjnkP8sut8VG+wVLhoi8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yNDJkZmQ3MS1lOWY5LTRiYmUtOTcwOS0wZjM3
MDlmYWZiYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF57gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbLWPl6baCwNJYppyODxMvTptRWauC13RV8163d15n6iefzim3tGCgc
BHsdOxVL3J8BVBsY3+0lqQjIgr/FpXpKrd7WNdhOju+Nkn2CY3YODKfZ/7a/DrZk
raN62MX260as2abZqsesO09HXTaRkyt3UNrFEwTRX1eW7c0RGk+hLQLSiIsb7g1v
CkpVpIVfDpcVu6ujpTNvw053skKgSYEh5H/Ep55bI2/1XZItIJcX6socCWrvac8t
Cxw6L+Ed3PReY/4vGBEmrdqn9JT1GZsuzBqoWSnXl46Um7CEEcowEZqavN67+ltb
EbQE1kGPRhI/3/yjoGoxBZwuNwCoHVw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 12:36:35 2025 by rpki-client