Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7952b334-4b7d-3ea3-9ce9-8f53306dc024.roa
File: 7952b334-4b7d-3ea3-9ce9-8f53306dc024.roa (raw, json)
Hash identifier: oILNEQSdDnLPJUxW+mrrZ4vuX+IX4WNDXGpdV1QYhUY=
Subject key identifier: A2:0A:4C:4E:B6:88:AB:51:3D:1D:7A:B8:D0:AC:23:5E:32:B7:E1:47
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848424AFECE6C2FE01F61784400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7952b334-4b7d-3ea3-9ce9-8f53306dc024.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6167
IP address blocks: 97.37.10.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fe:ce:6c:2f:e0:1f:61:78:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=113bde14-594e-4908-867d-8be79e79b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:10:23:ce:26:fc:eb:c5:d6:a5:b9:ad:cf:
1b:ef:4e:0b:13:81:55:8f:41:a4:c6:89:c6:fb:62:
97:2f:f0:26:64:63:61:99:3b:07:0f:f3:82:60:94:
ec:fc:4c:a7:9b:f2:20:82:f6:97:eb:7b:a5:bc:1e:
f4:51:af:88:58:98:ec:d3:17:14:af:8d:82:7c:11:
58:ae:2b:aa:5b:5b:fa:a5:ea:ca:e6:51:83:13:bb:
db:e9:80:a2:6e:6c:8f:50:48:ed:c2:86:e5:79:bf:
f6:93:f9:a9:32:27:7a:46:fd:f2:72:73:42:88:58:
bc:c3:9f:cc:59:9e:20:ad:6d:d8:3f:57:f0:2c:97:
77:54:12:96:bd:0b:94:dc:8b:21:6d:29:be:3b:38:
cb:5f:5a:7f:75:f6:81:46:c8:07:d2:b1:9b:8e:32:
12:c3:d4:ca:c8:20:b3:01:cd:a4:e9:86:d3:b1:92:
46:6b:97:b5:6c:57:c5:96:17:da:49:fc:fb:1b:b0:
76:f0:94:11:25:18:02:5c:23:6f:09:74:f4:e5:0b:
a0:59:7c:27:16:25:50:98:72:23:7c:47:ec:35:a0:
a4:ed:44:92:e1:24:00:da:12:2e:58:a9:7e:c3:ae:
11:96:c0:f5:3b:03:ec:90:3f:11:ca:d6:fd:04:87:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:4C:4E:B6:88:AB:51:3D:1D:7A:B8:D0:AC:23:5E:32:B7:E1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7952b334-4b7d-3ea3-9ce9-8f53306dc024.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.37.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:41:09:65:31:0e:35:f8:e9:5a:cb:83:65:1d:fe:81:dd:92:
5a:c6:d5:9b:8e:92:0b:dc:ce:70:3d:ac:8f:7f:20:ba:40:85:
bf:1c:c2:6e:28:cf:5b:47:4f:00:b4:de:58:a4:72:58:4c:72:
06:73:f2:84:de:e7:5b:27:9a:cd:84:c7:92:c5:4b:48:bf:aa:
d5:55:f2:db:9f:f0:f2:a5:50:62:ed:22:e0:86:53:f4:a5:ab:
f4:ff:93:14:64:1a:45:f9:5d:eb:44:ae:03:9a:37:d1:04:46:
5d:b1:a7:0a:43:a1:07:f1:7e:fb:6a:cd:bc:4a:03:1d:d9:6d:
ef:7f:fd:0d:90:3b:38:14:2a:9d:b6:0b:1a:56:5f:64:d0:33:
9f:67:09:14:56:18:23:bd:04:bd:36:84:6c:ff:64:5e:2d:5d:
b8:9f:9a:14:f5:a9:95:b5:1a:61:72:76:ae:64:31:15:ed:39:
85:07:48:f0:0e:af:82:46:17:a2:b6:76:fb:79:28:e7:9a:c0:
b6:d8:a6:db:9c:91:20:b7:55:90:e4:6b:5b:b3:2e:15:a1:7e:
50:16:39:8a:d2:79:6a:a6:85:d2:76:2d:12:16:a1:d5:40:00:
8f:5f:23:90:9d:a2:f4:fc:d1:fd:4e:2f:cb:4d:e2:10:b5:82:
ea:65:a3:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSv7ObC/gH2F4RAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MTEzYmRlMTQtNTk0ZS00OTA4LTg2N2QtOGJlNzllNzliODliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwoQI84m/OvF1qW5rc8b704LE4FVj0GkxonG
+2KXL/AmZGNhmTsHD/OCYJTs/Eynm/IggvaX63ulvB70Ua+IWJjs0xcUr42CfBFY
riuqW1v6perK5lGDE7vb6YCibmyPUEjtwobleb/2k/mpMid6Rv3ycnNCiFi8w5/M
WZ4grW3YP1fwLJd3VBKWvQuU3IshbSm+OzjLX1p/dfaBRsgH0rGbjjISw9TKyCCz
Ac2k6YbTsZJGa5e1bFfFlhfaSfz7G7B28JQRJRgCXCNvCXT05QugWXwnFiVQmHIj
fEfsNaCk7USS4SQA2hIuWKl+w64RlsD1OwPskD8Rytb9BIfVaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIKTE62iKtRPR16uNCsI14yt+FHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzk1MmIzMzQtNGI3ZC0z
ZWEzLTljZTktOGY1MzMwNmRjMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYSUKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9BCWUxDjX46VrLg2Ud/oHdklrG1ZuOkgvcznA9rI9/ILpAhb8cwm4o
z1tHTwC03likclhMcgZz8oTe51snms2Ex5LFS0i/qtVV8tuf8PKlUGLtIuCGU/Sl
q/T/kxRkGkX5XetErgOaN9EERl2xpwpDoQfxfvtqzbxKAx3Zbe9//Q2QOzgUKp22
CxpWX2TQM59nCRRWGCO9BL02hGz/ZF4tXbifmhT1qZW1GmFydq5kMRXtOYUHSPAO
r4JGF6K2dvt5KOeawLbYptuckSC3VZDka1uzLhWhflAWOYrSeWqmhdJ2LRIWodVA
AI9fI5CdovT80f1OL8tN4hC1guplo3U=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:40 2025 by rpki-client