Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a36280bf-3d42-34d0-9ea0-0667adf42428.roa
File: a36280bf-3d42-34d0-9ea0-0667adf42428.roa (raw, json)
Hash identifier: yjykSinIK112hBtGzywhmDqFsyCt+bN0eLkmTgsXgac=
Subject key identifier: F9:FB:79:CA:A4:2F:62:C2:F1:01:CA:35:8E:61:CD:1A:2B:15:F9:B3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285846FB8AEB8B6AAEC76CD23B39C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a36280bf-3d42-34d0-9ea0-0667adf42428.roa
Signing time: Sat 24 Aug 2024 13:00:41 +0000
ROA not before: Sat 24 Aug 2024 13:00:41 +0000
ROA not after: Fri 22 Nov 2024 14:00:41 +0000
asID: 9498
IP address blocks: 23.211.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:fb:8a:eb:8b:6a:ae:c7:6c:d2:3b:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 24 13:00:41 2024 GMT
Not After : Nov 22 14:00:41 2024 GMT
Subject: CN=29816713-b899-4b93-9ddd-df2646d33a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:dc:e0:cc:30:66:61:e4:31:5e:ed:4a:11:
00:4f:20:89:16:ad:be:e3:90:d3:e2:65:64:7a:57:
d6:96:56:57:66:b7:99:a1:3c:d2:8e:aa:bc:1e:4a:
47:a4:0f:a8:8c:3d:d3:0c:91:ca:12:70:9e:8e:d6:
09:82:d6:20:17:82:53:de:23:d1:5a:1f:2b:94:22:
17:e0:1a:ee:62:d5:16:60:54:65:86:0f:7c:3b:bd:
4f:9e:ed:1a:20:11:2c:cc:7c:48:7f:3e:c4:10:48:
c2:34:ef:7d:01:83:bb:15:28:5f:4a:0d:a3:6a:3f:
75:df:b5:fd:91:1b:e9:d6:71:86:4b:31:8b:e3:2d:
21:ca:20:d0:55:c2:d9:d1:84:66:e6:b1:4b:fd:f9:
5a:66:9f:41:50:53:8a:ef:56:4c:55:c4:92:2d:d7:
05:fa:26:05:a8:da:10:eb:f5:3d:6f:07:63:36:65:
d0:2a:1a:6d:28:1d:54:26:00:cc:40:4c:e6:38:4e:
3f:f5:47:7a:06:3b:52:6b:be:bd:77:fb:0f:46:7f:
fc:ab:91:fd:5f:17:a2:25:1c:00:66:b1:6f:a4:e9:
b4:7b:5b:1a:b9:fa:5a:4d:8d:5b:b6:d2:e0:dd:13:
d6:08:c5:37:e1:3e:80:31:fa:ee:94:81:67:a7:78:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:79:CA:A4:2F:62:C2:F1:01:CA:35:8E:61:CD:1A:2B:15:F9:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a36280bf-3d42-34d0-9ea0-0667adf42428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:9e:91:09:c9:45:2f:dc:af:ef:71:d2:2b:52:13:f6:ff:78:
a8:f4:97:a5:76:4d:22:f3:6a:3b:14:d6:3f:1d:fa:1d:df:38:
24:55:67:b5:d6:f3:b0:9c:9d:dc:a2:13:60:87:63:40:0b:e5:
6a:5e:a7:ca:70:d1:1e:53:86:00:45:83:1b:06:ba:26:bd:d6:
5f:12:33:9a:d0:aa:31:ff:30:4f:b8:54:cf:54:ee:a5:09:5b:
04:4e:1d:f6:1f:76:3d:bf:18:d3:1d:d4:9e:57:5c:9d:e5:68:
2a:91:e9:c8:d4:3d:c2:bd:59:d6:e7:ac:cd:aa:0c:ac:94:52:
88:c0:de:8e:24:2a:e7:29:77:0f:d2:43:fb:e5:ac:26:01:b5:
26:f0:b4:52:15:24:66:2d:65:8d:10:98:47:f1:60:06:19:93:
5a:ee:9f:c2:e4:60:f5:8c:44:be:65:dd:12:58:e3:78:61:de:
4a:6d:e2:2f:e3:e9:6d:7d:53:05:34:e4:82:e8:05:00:cc:11:
f5:df:6a:e2:ad:30:a1:89:b1:7c:b4:99:92:39:75:70:8d:93:
17:ee:e7:8d:bd:27:5a:59:6f:e2:41:cb:0f:08:d5:f2:73:f3:
7b:2a:fb:d9:54:6f:88:9e:12:9f:d8:9c:81:44:39:aa:0c:3c:
0d:e5:4c:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb7iuuLaq7HbNI7OcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDgyNDEzMDA0MVoXDTI0MTEyMjE0MDA0MVowLzEtMCsGA1UEAxMk
Mjk4MTY3MTMtYjg5OS00YjkzLTlkZGQtZGYyNjQ2ZDMzYTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhPc4MwwZmHkMV7tShEATyCJFq2+45DT4mVk
elfWllZXZreZoTzSjqq8HkpHpA+ojD3TDJHKEnCejtYJgtYgF4JT3iPRWh8rlCIX
4BruYtUWYFRlhg98O71Pnu0aIBEszHxIfz7EEEjCNO99AYO7FShfSg2jaj9137X9
kRvp1nGGSzGL4y0hyiDQVcLZ0YRm5rFL/flaZp9BUFOK71ZMVcSSLdcF+iYFqNoQ
6/U9bwdjNmXQKhptKB1UJgDMQEzmOE4/9Ud6BjtSa769d/sPRn/8q5H9XxeiJRwA
ZrFvpOm0e1saufpaTY1bttLg3RPWCMU34T6AMfrulIFnp3g1JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn7ecqkL2LC8QHKNY5hzRorFfmzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM2MjgwYmYtM2Q0Mi0z
NGQwLTllYTAtMDY2N2FkZjQyNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9PQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2ekQnJRS/cr+9x0itSE/b/eKj0l6V2TSLzajsU1j8d+h3fOCRVZ7XW
87CcndyiE2CHY0AL5Wpep8pw0R5ThgBFgxsGuia91l8SM5rQqjH/ME+4VM9U7qUJ
WwROHfYfdj2/GNMd1J5XXJ3laCqR6cjUPcK9WdbnrM2qDKyUUojA3o4kKucpdw/S
Q/vlrCYBtSbwtFIVJGYtZY0QmEfxYAYZk1run8LkYPWMRL5l3RJY43hh3kpt4i/j
6W19UwU05ILoBQDMEfXfauKtMKGJsXy0mZI5dXCNkxfu5429J1pZb+JByw8I1fJz
83sq+9lUb4ieEp/YnIFEOaoMPA3lTE8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:45:47 2025 by rpki-client