Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6d1823a-e6d1-3725-9ba4-f51792053595.roa
File: d6d1823a-e6d1-3725-9ba4-f51792053595.roa (raw, json)
Hash identifier: mZJNHcN3ZzN2xc34W1ARLWeHRgAvnTZbuwLjQnjc4Vk=
Subject key identifier: 06:7C:8F:1B:A0:96:44:9A:37:F6:92:CC:ED:05:A2:A5:A0:E2:5E:8E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858470C4B048F08D91E6663574080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6d1823a-e6d1-3725-9ba4-f51792053595.roa
Signing time: Fri 30 Aug 2024 13:00:41 +0000
ROA not before: Fri 30 Aug 2024 13:00:41 +0000
ROA not after: Thu 28 Nov 2024 14:00:41 +0000
asID: 16625
IP address blocks: 23.222.20.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:0c:4b:04:8f:08:d9:1e:66:63:57:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 30 13:00:41 2024 GMT
Not After : Nov 28 14:00:41 2024 GMT
Subject: CN=20128499-8462-4c0f-b9ae-89cb4530fbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:8c:e2:13:ba:7d:31:eb:f4:27:bb:44:1a:
fd:05:e5:e4:c1:1a:94:04:0d:11:43:2b:a8:d7:ca:
27:49:01:96:f6:fa:a2:36:4a:ec:b4:cd:fe:70:2e:
8e:58:e7:47:d9:e7:46:b5:9d:1f:ac:06:5a:d2:01:
fd:74:cd:05:e4:8b:ca:2f:a0:f3:69:dc:e0:9b:32:
4c:ef:28:a4:69:90:71:10:90:f6:01:44:4d:f2:4d:
72:4e:d5:3b:54:2b:a9:c3:88:a3:d2:8b:87:59:5f:
b2:91:88:0c:65:32:b4:4e:42:9e:f7:f9:9d:a2:cc:
b7:4d:34:0d:e1:c4:53:f7:e9:27:16:9f:98:e4:e2:
5c:7c:04:0f:d3:e6:67:00:17:39:7d:67:92:3c:45:
c4:90:9b:62:15:54:08:76:6e:09:2d:e6:34:ec:55:
62:6b:30:2e:06:5a:30:47:90:2f:fe:c4:00:32:d3:
2f:4d:14:91:86:2d:c3:f4:72:94:b2:05:d4:45:b4:
c9:c1:ff:71:01:e0:4d:88:a9:62:4a:11:96:90:cb:
64:57:59:ac:de:01:9d:1e:70:ad:ba:f8:d1:b3:2a:
bd:bd:a5:04:3d:97:00:5c:a9:cc:3c:78:49:3d:43:
2c:66:7f:ad:e8:78:87:4f:36:8c:d6:46:55:77:b5:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:8F:1B:A0:96:44:9A:37:F6:92:CC:ED:05:A2:A5:A0:E2:5E:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6d1823a-e6d1-3725-9ba4-f51792053595.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:7a:17:23:1c:4f:5e:9b:7d:74:fd:5e:48:d0:52:d5:6b:2d:
e6:71:d2:26:f7:cb:96:69:c9:9a:9d:03:22:8a:3a:b4:01:03:
87:29:7b:43:0b:9f:2c:d8:52:49:ac:ce:35:61:c4:36:44:86:
15:41:92:06:25:84:d2:d0:47:bb:f1:ad:fb:20:57:5f:a5:2f:
90:f3:e6:74:ef:91:5d:03:33:62:92:b1:94:5c:3b:1b:e1:d2:
da:7a:d0:d7:21:0e:1a:06:14:c5:5b:c8:6a:c6:b8:5e:53:08:
9b:0d:02:69:a5:ad:5d:f2:00:0e:4a:c4:a4:ee:7f:d8:71:45:
a5:e3:86:cc:7d:d3:55:df:56:d7:81:4b:9f:c5:f0:ad:c1:7b:
bb:75:46:38:34:ae:85:cb:4c:b8:d4:ff:0a:83:46:12:af:85:
86:f9:f0:76:12:33:5f:11:ff:7b:60:42:42:fb:b4:e2:ed:84:
b7:c5:42:2d:05:bb:b4:f0:e6:c4:1e:03:9f:e5:8e:a5:bc:25:
a3:a1:8e:07:a0:5c:f4:45:7b:bb:7b:ba:21:35:20:f3:3d:1e:
f9:ad:95:15:44:5b:b0:cb:df:67:07:37:e3:b7:d8:5b:62:cf:
2e:4a:17:86:46:b7:2c:80:97:17:66:bf:92:70:4c:8c:36:b1:
78:68:1c:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcMSwSPCNkeZmNXQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDgzMDEzMDA0MVoXDTI0MTEyODE0MDA0MVowLzEtMCsGA1UEAxMk
MjAxMjg0OTktODQ2Mi00YzBmLWI5YWUtODljYjQ1MzBmYmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+qM4hO6fTHr9Ce7RBr9BeXkwRqUBA0RQyuo
18onSQGW9vqiNkrstM3+cC6OWOdH2edGtZ0frAZa0gH9dM0F5IvKL6DzadzgmzJM
7yikaZBxEJD2AURN8k1yTtU7VCupw4ij0ouHWV+ykYgMZTK0TkKe9/mdosy3TTQN
4cRT9+knFp+Y5OJcfAQP0+ZnABc5fWeSPEXEkJtiFVQIdm4JLeY07FViazAuBlow
R5Av/sQAMtMvTRSRhi3D9HKUsgXURbTJwf9xAeBNiKliShGWkMtkV1ms3gGdHnCt
uvjRsyq9vaUEPZcAXKnMPHhJPUMsZn+t6HiHTzaM1kZVd7UMcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZ8jxuglkSaN/aSzO0FoqWg4l6OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZkMTgyM2EtZTZkMS0z
NzI1LTliYTQtZjUxNzkyMDUzNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF94UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH96FyMcT16bfXT9XkjQUtVrLeZx0ib3y5ZpyZqdAyKKOrQBA4cpe0ML
nyzYUkmszjVhxDZEhhVBkgYlhNLQR7vxrfsgV1+lL5Dz5nTvkV0DM2KSsZRcOxvh
0tp60NchDhoGFMVbyGrGuF5TCJsNAmmlrV3yAA5KxKTuf9hxRaXjhsx901XfVteB
S5/F8K3Be7t1Rjg0roXLTLjU/wqDRhKvhYb58HYSM18R/3tgQkL7tOLthLfFQi0F
u7Tw5sQeA5/ljqW8JaOhjgegXPRFe7t7uiE1IPM9HvmtlRVEW7DL32cHN+O32Fti
zy5KF4ZGtyyAlxdmv5JwTIw2sXhoHGg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:10:52 2025 by rpki-client