Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5136651d-7f59-3a5e-8f97-0d64516b5ed7.roa
File: 5136651d-7f59-3a5e-8f97-0d64516b5ed7.roa (raw, json)
Hash identifier: D6qxmNM2iY/NmASIN5hgxS2bqX6QUVSwfACkC6tMGEE=
Subject key identifier: B5:EC:42:BD:86:5A:AD:DB:FA:DB:02:13:EE:BC:02:96:61:EA:AC:52
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584834555A081A07D5C78F249BE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5136651d-7f59-3a5e-8f97-0d64516b5ed7.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 393238
IP address blocks: 184.105.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:5a:08:1a:07:d5:c7:8f:24:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=a712411a-005b-47ac-afb2-44e81bb12ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:74:30:2a:c6:0f:13:08:74:56:04:23:a3:
54:b2:7c:b5:a9:1e:d0:65:23:d4:53:87:fe:0e:27:
b1:a9:6c:39:9a:10:b1:fc:87:be:6e:b6:b1:f2:3b:
98:df:6a:a6:ae:dd:db:0a:aa:71:e9:45:40:3d:b6:
bd:64:f0:6e:1e:7d:9c:44:04:07:7c:ee:29:5c:fd:
06:31:67:5c:73:fe:f9:15:46:20:64:d1:79:45:cd:
bb:70:97:15:f7:34:70:1a:13:d8:f7:d1:bd:16:6f:
61:7c:33:04:2b:28:cc:f7:ec:2e:b1:8b:53:d5:fb:
31:c3:c4:ef:01:fb:a3:55:40:94:b7:02:5c:d0:ad:
09:4d:a8:1e:d7:48:29:48:cf:7c:63:59:a6:9e:e8:
55:ee:c8:6b:6e:41:de:24:b2:00:d4:c0:3e:ee:75:
75:41:85:46:da:56:0c:45:1e:fd:5d:38:c7:f4:ae:
bc:02:e4:ec:a4:79:1c:b7:0e:3b:1e:5a:d4:8a:32:
64:05:e9:be:f4:69:72:8e:b9:5c:73:80:ce:ab:18:
f5:52:5c:6b:e2:81:7d:11:a0:69:9b:bd:f6:22:cb:
b4:55:1f:40:09:e8:dc:a0:c2:2f:66:bb:db:97:6d:
21:89:5b:b4:6f:64:aa:dd:c0:bb:14:3b:f8:e8:30:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:42:BD:86:5A:AD:DB:FA:DB:02:13:EE:BC:02:96:61:EA:AC:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5136651d-7f59-3a5e-8f97-0d64516b5ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:6d:46:38:b6:66:a7:df:fc:6e:48:fb:60:a5:8e:c9:04:89:
ad:79:0b:a2:a7:64:2b:02:60:5c:90:72:24:aa:6b:9d:5b:74:
aa:d4:4d:e6:f9:d6:25:2b:dc:ce:9a:20:74:43:32:6f:f5:4f:
81:03:7b:d3:06:56:2c:ea:25:2a:9d:06:fd:9b:3e:48:bd:ac:
a8:51:c1:45:23:cf:e8:cd:74:f1:0f:b5:0c:44:98:f9:38:5c:
d9:75:8d:94:8e:58:e1:c9:fe:5a:0b:20:ce:92:04:2a:6a:13:
85:91:c4:8a:d9:e6:ad:7b:d2:87:db:4a:cd:f6:e4:da:3a:12:
63:53:ca:5b:c1:40:ed:18:38:76:20:d5:e2:e9:58:68:c1:18:
19:7d:51:5d:7f:cc:dd:10:e1:50:fd:dc:65:e5:9f:33:7f:6d:
c9:90:4f:c9:67:b1:8e:06:33:b9:59:eb:0d:ed:c2:e7:0d:25:
bc:94:0d:69:ac:7d:5d:bd:4e:dc:7e:9a:98:9c:a3:d9:4a:84:
74:56:49:3f:b0:fc:cd:b5:3d:23:96:13:3a:56:30:73:58:2a:
f5:25:d9:50:08:e0:b9:48:dc:1b:3f:31:2e:48:5a:87:bf:ac:
43:11:df:98:91:b4:6f:bc:a5:54:a8:fe:7a:18:83:e0:90:a6:
fd:ed:04:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VVoIGgfVx48km+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
YTcxMjQxMWEtMDA1Yi00N2FjLWFmYjItNDRlODFiYjEyYWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIF0MCrGDxMIdFYEI6NUsny1qR7QZSPUU4f+
DiexqWw5mhCx/Ie+brax8juY32qmrt3bCqpx6UVAPba9ZPBuHn2cRAQHfO4pXP0G
MWdcc/75FUYgZNF5Rc27cJcV9zRwGhPY99G9Fm9hfDMEKyjM9+wusYtT1fsxw8Tv
AfujVUCUtwJc0K0JTage10gpSM98Y1mmnuhV7shrbkHeJLIA1MA+7nV1QYVG2lYM
RR79XTjH9K68AuTspHkctw47HlrUijJkBem+9Glyjrlcc4DOqxj1Ulxr4oF9EaBp
m732Isu0VR9ACejcoMIvZrvbl20hiVu0b2Sq3cC7FDv46DACSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXsQr2GWq3b+tsCE+68ApZh6qxSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTEzNjY1MWQtN2Y1OS0z
YTVlLThmOTctMGQ2NDUxNmI1ZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGlvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNtRji2Zqff/G5I+2CljskEia15C6KnZCsCYFyQciSqa51bdKrUTeb5
1iUr3M6aIHRDMm/1T4EDe9MGVizqJSqdBv2bPki9rKhRwUUjz+jNdPEPtQxEmPk4
XNl1jZSOWOHJ/loLIM6SBCpqE4WRxIrZ5q170ofbSs325No6EmNTylvBQO0YOHYg
1eLpWGjBGBl9UV1/zN0Q4VD93GXlnzN/bcmQT8lnsY4GM7lZ6w3twucNJbyUDWms
fV29Ttx+mpico9lKhHRWST+w/M21PSOWEzpWMHNYKvUl2VAI4LlI3Bs/MS5IWoe/
rEMR35iRtG+8pVSo/noYg+CQpv3tBNE=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:41:35 2025 by rpki-client