Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/f147c118-7729-3de4-9c7e-f7195e5bcb91.roa
File: f147c118-7729-3de4-9c7e-f7195e5bcb91.roa (raw, json)
Hash identifier: 3YXiObWKjO+jhlQqQk2P2k/5p+kTFQTmBKLW5r0j8zQ=
Subject key identifier: EB:36:80:61:CC:E0:07:13:08:72:84:3A:F8:02:3A:69:7A:68:F3:41
Certificate issuer: /CN=7b231006-d2b6-41f0-82bb-4d669658922f
Certificate serial: 010D0C9F43285841FB880C6C90A0EF594A491B40
Authority key identifier: E2:BA:BF:80:05:D7:D3:B2:FE:E2:30:F8:08:8E:00:21:10:80:2B:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/f147c118-7729-3de4-9c7e-f7195e5bcb91.roa
Signing time: Wed 24 May 2023 01:00:16 +0000
ROA not before: Wed 24 May 2023 01:00:16 +0000
ROA not after: Tue 22 Aug 2023 01:00:16 +0000
asID: 53587
IP address blocks: 162.221.12.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:fb:88:0c:6c:90:a0:ef:59:4a:49:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b231006-d2b6-41f0-82bb-4d669658922f
Validity
Not Before: May 24 01:00:16 2023 GMT
Not After : Aug 22 01:00:16 2023 GMT
Subject: CN=ed793e94-0fec-4817-9307-48b900c2e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:c7:19:bf:fa:c3:09:99:cd:4f:b1:9e:65:
a6:c1:2f:54:10:fb:79:45:b0:84:a6:59:e3:9d:89:
e5:19:5b:08:8e:89:f0:3e:6f:d7:3a:7c:eb:f6:b7:
55:64:c4:23:f9:9d:f1:76:c8:4c:96:88:c0:57:b2:
6b:81:92:fd:1b:a5:f7:a5:06:f6:eb:6c:99:16:84:
db:1f:93:05:a7:fd:c6:c5:6a:a9:57:f9:ea:9d:07:
3f:5b:eb:c9:2e:1b:29:14:62:4f:7f:30:82:24:28:
ed:3b:29:02:d0:c7:f5:05:d7:69:9d:d7:06:06:32:
13:63:b4:15:2c:b9:ba:d3:c7:84:5e:ac:b0:36:2e:
01:56:a7:f6:70:fe:9e:41:e0:3a:81:23:a0:ff:56:
3d:36:6e:c4:23:52:40:40:b2:40:13:99:0a:0f:73:
bb:8a:8f:67:4e:bf:c0:24:49:14:39:3d:e9:db:af:
55:ae:0f:e4:d3:0d:4e:8b:59:86:53:25:40:c3:52:
d3:1c:15:24:01:28:57:82:69:0f:7b:a6:b2:da:c4:
be:32:95:12:51:7a:28:56:32:96:1c:95:43:d8:e5:
82:66:f4:20:10:b4:76:28:ce:2a:b5:78:09:b3:3b:
b1:33:1a:35:c7:ed:4d:5d:a1:37:8a:86:72:99:f0:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:80:61:CC:E0:07:13:08:72:84:3A:F8:02:3A:69:7A:68:F3:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/f147c118-7729-3de4-9c7e-f7195e5bcb91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/7b231006-d2b6-41f0-82bb-4d669658922f.crl
X509v3 Authority Key Identifier:
keyid:E2:BA:BF:80:05:D7:D3:B2:FE:E2:30:F8:08:8E:00:21:10:80:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:11:db:36:f5:0f:1c:df:b3:13:54:10:ff:8c:85:78:b7:fe:
4d:61:a3:66:e7:59:b1:15:32:95:a7:72:08:b2:ac:50:5b:44:
05:aa:ec:9e:c9:49:99:1b:c0:ad:3d:47:1f:d4:75:a9:b7:7d:
95:c2:a7:0c:32:1c:af:1c:ba:1d:7d:56:16:10:3a:1e:d3:76:
8f:bf:58:3b:ca:90:fb:3d:4e:9d:5c:73:ac:5c:56:8f:c5:90:
4f:f9:4c:31:9c:b7:54:d0:3e:6f:f8:ab:5d:ca:2f:8c:b1:13:
01:b7:ad:ad:1d:50:49:8a:38:38:8a:ad:ab:b6:a2:38:eb:ba:
06:f5:b2:50:64:b6:d6:d4:57:3a:0a:24:ab:91:7e:a1:9d:f0:
c8:7d:5c:dd:84:10:20:9b:6a:ca:fa:e3:96:15:d2:69:4a:6e:
d1:42:f2:18:54:8b:88:ad:e5:27:1f:05:9c:b4:c6:6e:32:d2:
bf:bb:71:1b:4c:a2:54:54:e5:80:22:0c:43:59:a6:1b:50:c9:
df:32:0c:ed:d8:fc:b9:12:33:69:02:0f:1c:d7:3e:b3:ca:62:
3c:9d:24:52:6f:90:96:33:2e:12:7d:ea:fd:44:82:15:9b:35:
64:78:45:fc:72:63:56:07:7c:b7:66:62:43:2a:00:cd:31:73:
c3:a9:5b:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEH7iAxskKDvWUpJG0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IyMzEwMDYtZDJiNi00MWYwLTgyYmItNGQ2Njk2NTg5
MjJmMB4XDTIzMDUyNDAxMDAxNloXDTIzMDgyMjAxMDAxNlowLzEtMCsGA1UEAxMk
ZWQ3OTNlOTQtMGZlYy00ODE3LTkzMDctNDhiOTAwYzJlNWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2nHGb/6wwmZzU+xnmWmwS9UEPt5RbCEplnj
nYnlGVsIjonwPm/XOnzr9rdVZMQj+Z3xdshMlojAV7JrgZL9G6X3pQb262yZFoTb
H5MFp/3GxWqpV/nqnQc/W+vJLhspFGJPfzCCJCjtOykC0Mf1BddpndcGBjITY7QV
LLm608eEXqywNi4BVqf2cP6eQeA6gSOg/1Y9Nm7EI1JAQLJAE5kKD3O7io9nTr/A
JEkUOT3p269Vrg/k0w1Oi1mGUyVAw1LTHBUkAShXgmkPe6ay2sS+MpUSUXooVjKW
HJVD2OWCZvQgELR2KM4qtXgJszuxMxo1x+1NXaE3ioZymfCU7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOs2gGHM4AcTCHKEOvgCOml6aPNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YjIz
MTAwNi1kMmI2LTQxZjAtODJiYi00ZDY2OTY1ODkyMmYvZjE0N2MxMTgtNzcyOS0z
ZGU0LTljN2UtZjcxOTVlNWJjYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2IyMzEwMDYtZDJiNi00MWYwLTgy
YmItNGQ2Njk2NTg5MjJmLzdiMjMxMDA2LWQyYjYtNDFmMC04MmJiLTRkNjY5NjU4
OTIyZi5jcmwwHwYDVR0jBBgwFoAU4rq/gAXX07L+4jD4CI4AIRCAK0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjIzMTAwNi1kMmI2LTQxZjAtODJiYi00ZDY2
OTY1ODkyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot0MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQR2zb1DxzfsxNUEP+MhXi3/k1ho2bnWbEVMpWncgiyrFBbRAWq7J7J
SZkbwK09Rx/Udam3fZXCpwwyHK8cuh19VhYQOh7Tdo+/WDvKkPs9Tp1cc6xcVo/F
kE/5TDGct1TQPm/4q13KL4yxEwG3ra0dUEmKODiKrau2ojjrugb1slBkttbUVzoK
JKuRfqGd8Mh9XN2EECCbasr645YV0mlKbtFC8hhUi4it5ScfBZy0xm4y0r+7cRtM
olRU5YAiDENZphtQyd8yDO3Y/LkSM2kCDxzXPrPKYjydJFJvkJYzLhJ96v1EghWb
NWR4RfxyY1YHfLdmYkMqAM0xc8OpWzo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:13:13 2025 by rpki-client