Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b87f6ce-4372-3bd9-83d8-8e9bfe91c3f3.roa
File: 3b87f6ce-4372-3bd9-83d8-8e9bfe91c3f3.roa (raw, json)
Hash identifier: 6BIbfXfQA62UNS2NwWN+9fqU/GZ2MbcOQECOZlDrtFs=
Subject key identifier: 95:7E:83:87:05:2E:E4:FE:27:5C:19:3C:7B:8A:D1:9D:41:8E:93:47
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858483720219201B8A91C33336FA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b87f6ce-4372-3bd9-83d8-8e9bfe91c3f3.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 6167
IP address blocks: 72.103.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:21:92:01:b8:a9:1c:33:33:6f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=d7b5a6bb-2ff3-4f7c-9de1-18d434737d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:3e:71:5a:ad:7a:28:2f:07:bf:9b:9e:65:
6e:74:42:95:07:74:8e:80:a2:fc:af:8f:7f:59:55:
f6:02:af:8a:cc:08:33:fd:9a:45:1a:f2:71:7c:88:
b1:29:95:46:1f:43:08:60:e1:bc:28:3a:47:44:a1:
b1:6e:cb:c1:3e:9b:76:c9:b8:b3:18:5d:d3:69:69:
3c:0f:1e:1c:14:ce:95:7a:40:75:b9:ed:96:93:9d:
eb:5d:23:71:9d:16:30:cb:68:fb:be:c6:a8:dd:87:
10:af:24:b6:57:b5:ca:a8:f9:f4:8d:4f:3b:8f:69:
fe:ed:b5:4d:a1:a9:fc:12:56:58:a4:73:e0:31:c9:
80:5f:aa:50:81:64:d1:45:b3:1b:26:25:98:9a:07:
b2:58:6b:cb:fa:63:ff:4a:61:4f:63:31:c0:45:89:
fa:c2:f3:7f:4a:c3:52:05:51:56:81:19:31:72:4a:
11:65:de:6c:22:1f:ae:3c:44:9b:7a:f5:e5:32:e6:
f1:19:95:6f:05:d2:5b:76:d2:31:af:e4:3a:2a:df:
4d:0c:03:aa:30:3a:cb:5f:a5:6d:bc:d1:88:7a:48:
de:4f:1d:d9:93:82:43:e1:97:41:d9:4a:45:9b:82:
aa:c3:fb:ca:a6:2a:9f:6e:f9:6d:c5:a7:de:47:a4:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:83:87:05:2E:E4:FE:27:5C:19:3C:7B:8A:D1:9D:41:8E:93:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b87f6ce-4372-3bd9-83d8-8e9bfe91c3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.103.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:85:2b:14:b8:38:82:fd:33:8b:25:88:99:cf:3f:1f:70:df:
9a:e8:1b:ef:e2:a9:e7:7a:97:ef:05:2e:92:2e:be:1b:2b:59:
21:fe:1b:2c:03:e7:67:25:d9:1c:a6:fe:da:cc:19:8d:77:fe:
3f:30:45:f4:ac:b9:7e:93:b8:89:ae:16:25:96:21:9b:d8:9d:
df:bc:d3:e7:14:c9:89:ec:6d:81:13:9b:a1:c8:60:d5:06:32:
75:c2:e7:c9:2c:28:17:89:a4:16:f4:4d:6f:8f:c0:55:c8:54:
3c:a8:c9:61:95:4d:e0:59:b5:2c:76:58:6b:18:6b:99:52:e1:
75:a6:6e:5c:fe:01:73:47:75:09:ae:28:1c:46:93:1d:ef:01:
c8:67:b5:c2:60:4e:df:02:9e:ef:7b:56:50:3a:16:92:39:d1:
b2:1a:1b:01:6d:e0:16:32:df:70:0b:02:da:45:8b:92:41:81:
1e:ce:13:3b:8a:98:5a:f0:93:18:b0:2f:dc:76:92:4d:75:26:
f3:fd:ce:c3:03:85:c6:6a:1d:4a:44:df:93:7e:a9:6d:25:53:
df:11:d2:a1:b4:33:67:bc:be:c6:d7:95:7a:9a:9b:18:3c:94:
b8:48:bc:ed:47:7a:d0:64:46:1a:6c:39:19:a5:76:1f:4e:70:
d0:e3:5a:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg3ICGSAbipHDMzb6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNTE0MDA1M1oXDTI1MDMxNTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDdiNWE2YmItMmZmMy00ZjdjLTlkZTEtMThkNDM0NzM3ZDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KU+cVqteigvB7+bnmVudEKVB3SOgKL8r49/
WVX2Aq+KzAgz/ZpFGvJxfIixKZVGH0MIYOG8KDpHRKGxbsvBPpt2ybizGF3TaWk8
Dx4cFM6VekB1ue2Wk53rXSNxnRYwy2j7vsao3YcQryS2V7XKqPn0jU87j2n+7bVN
oan8ElZYpHPgMcmAX6pQgWTRRbMbJiWYmgeyWGvL+mP/SmFPYzHARYn6wvN/SsNS
BVFWgRkxckoRZd5sIh+uPESbevXlMubxGZVvBdJbdtIxr+Q6Kt9NDAOqMDrLX6Vt
vNGIekjeTx3Zk4JD4ZdB2UpFm4Kqw/vKpiqfbvltxafeR6TE9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJV+g4cFLuT+J1wZPHuK0Z1BjpNHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2I4N2Y2Y2UtNDM3Mi0z
YmQ5LTgzZDgtOGU5YmZlOTFjM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGfMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWFKxS4OIL9M4sliJnPPx9w35roG+/iqed6l+8FLpIuvhsrWSH+GywD
52cl2Rym/trMGY13/j8wRfSsuX6TuImuFiWWIZvYnd+80+cUyYnsbYETm6HIYNUG
MnXC58ksKBeJpBb0TW+PwFXIVDyoyWGVTeBZtSx2WGsYa5lS4XWmblz+AXNHdQmu
KBxGkx3vAchntcJgTt8Cnu97VlA6FpI50bIaGwFt4BYy33ALAtpFi5JBgR7OEzuK
mFrwkxiwL9x2kk11JvP9zsMDhcZqHUpE35N+qW0lU98R0qG0M2e8vsbXlXqamxg8
lLhIvO1HetBkRhpsORmldh9OcNDjWtA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:16 2025 by rpki-client