Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8c9ec80-e4d0-3638-8ab1-ff8635e605a7.roa
File: c8c9ec80-e4d0-3638-8ab1-ff8635e605a7.roa (raw, json)
Hash identifier: 1zkZQ++1rmOeTwiQxgQhxeALbxvI8wK8IBOimSozHH8=
Subject key identifier: 05:EF:AE:47:F1:A4:FC:4B:81:DC:9C:84:C4:B7:49:D3:D1:63:6E:2A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209EC43EE69FF9E3A62800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8c9ec80-e4d0-3638-8ab1-ff8635e605a7.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9e:c4:3e:e6:9f:f9:e3:a6:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ae3e0926-dd7d-4727-81c3-a2b518dc356e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:e2:12:9f:18:92:c9:e6:4c:ec:c6:84:35:
a9:db:16:df:fc:76:a9:53:ca:a1:04:03:6e:fe:eb:
6e:b3:43:24:87:ce:2c:e9:4c:aa:7e:1b:27:dd:80:
7d:cf:9e:38:f6:01:7f:00:c0:7f:04:01:38:1e:9c:
56:67:6e:76:b5:c1:2c:23:57:fb:3c:c3:fe:cc:ff:
fb:18:0b:45:21:67:be:94:bc:01:1e:84:e5:85:41:
c1:e8:85:e3:d9:aa:0c:38:c2:8e:54:84:0e:8f:1f:
ea:3c:7e:12:45:51:c1:c8:ca:10:3d:16:e3:80:21:
a3:23:f8:93:a9:fd:0f:78:49:29:d5:c2:26:55:f1:
6c:aa:a6:fa:f5:db:c2:7b:6b:c4:ac:90:98:7f:6e:
53:4a:49:59:d3:ae:85:e1:aa:7a:0d:3a:2d:46:a8:
cc:a8:09:0e:0f:5c:dd:9f:14:24:62:f4:c4:aa:63:
4e:b1:8c:71:9a:ae:bf:26:a0:e4:14:6d:49:d8:b4:
c3:49:c8:be:b9:9c:51:55:b0:28:6c:3c:26:fb:49:
1a:93:da:fd:73:d1:28:63:62:02:c9:9e:00:63:55:
56:02:9c:5d:12:f7:ca:3c:7a:61:58:a4:86:b7:db:
68:21:37:41:14:9f:40:75:98:0c:d9:54:f4:ed:c3:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:AE:47:F1:A4:FC:4B:81:DC:9C:84:C4:B7:49:D3:D1:63:6E:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8c9ec80-e4d0-3638-8ab1-ff8635e605a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:77:23:85:86:c6:bf:43:2b:2c:fc:69:47:51:dc:c8:53:36:
16:9a:5a:5d:2f:e6:61:e5:cd:e5:6a:2d:e2:8b:a6:6b:1c:a4:
d8:c1:a1:30:81:a0:9b:be:51:70:82:f9:d2:33:44:ce:66:b6:
8b:90:b4:7b:e1:fd:4d:5e:15:26:b2:79:70:e9:06:f2:1e:9e:
5f:d1:25:57:4c:42:89:7b:de:32:4c:53:05:b3:e3:89:4c:81:
91:9b:db:53:cf:cf:88:d0:66:cd:10:63:a2:d0:a6:47:0c:61:
49:d8:13:00:70:13:72:a6:5d:34:10:78:63:50:c3:2d:b1:2a:
cd:52:3e:1a:35:3b:c2:6f:43:b1:b1:85:6e:1a:30:8d:82:9f:
66:9f:b0:ae:b2:b2:23:a9:97:85:df:83:6f:a4:9c:e7:48:27:
da:a1:0e:ea:bc:fd:9c:7d:8e:db:d9:95:9f:25:ed:31:d1:a7:
de:6b:ba:b9:f4:6a:e1:f6:12:06:3c:cc:0a:47:65:2a:a8:2d:
fc:73:f6:27:18:a9:c4:70:6c:a6:2d:a9:5e:1f:df:02:2c:17:
67:ec:91:4c:8c:fe:6e:b8:4c:7e:a0:f6:67:2f:7b:5a:8f:b1:
1c:f8:3c:43:a2:e8:d3:2c:32:95:4b:8d:7c:32:89:dd:e5:e4:
86:b0:e6:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJ7EPuaf+eOmKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
YWUzZTA5MjYtZGQ3ZC00NzI3LTgxYzMtYTJiNTE4ZGMzNTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGHiEp8YksnmTOzGhDWp2xbf/HapU8qhBANu
/utus0Mkh84s6Uyqfhsn3YB9z5449gF/AMB/BAE4HpxWZ252tcEsI1f7PMP+zP/7
GAtFIWe+lLwBHoTlhUHB6IXj2aoMOMKOVIQOjx/qPH4SRVHByMoQPRbjgCGjI/iT
qf0PeEkp1cImVfFsqqb69dvCe2vErJCYf25TSklZ066F4ap6DTotRqjMqAkOD1zd
nxQkYvTEqmNOsYxxmq6/JqDkFG1J2LTDSci+uZxRVbAobDwm+0kak9r9c9EoY2IC
yZ4AY1VWApxdEvfKPHphWKSGt9toITdBFJ9AdZgM2VT07cN8AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXvrkfxpPxLgdychMS3SdPRY24qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzhjOWVjODAtZTRkMC0z
NjM4LThhYjEtZmY4NjM1ZTYwNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyj4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZ3I4WGxr9DKyz8aUdR3MhTNhaaWl0v5mHlzeVqLeKLpmscpNjBoTCB
oJu+UXCC+dIzRM5mtouQtHvh/U1eFSayeXDpBvIenl/RJVdMQol73jJMUwWz44lM
gZGb21PPz4jQZs0QY6LQpkcMYUnYEwBwE3KmXTQQeGNQwy2xKs1SPho1O8JvQ7Gx
hW4aMI2Cn2afsK6ysiOpl4Xfg2+knOdIJ9qhDuq8/Zx9jtvZlZ8l7THRp95rurn0
auH2EgY8zApHZSqoLfxz9icYqcRwbKYtqV4f3wIsF2fskUyM/m64TH6g9mcve1qP
sRz4PEOi6NMsMpVLjXwyid3l5Iaw5lE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:18 2025 by rpki-client