Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c28cfc3f-ba2c-39be-978c-14ffd272ab53.roa
File: c28cfc3f-ba2c-39be-978c-14ffd272ab53.roa (raw, json)
Hash identifier: eqSkdb4gcJkUAnY3Slmnr+IyuN6UXxUu2kdbDtRqg7o=
Subject key identifier: 25:79:DA:03:21:A5:F5:F9:78:0E:45:B7:F7:4A:B8:E8:97:2E:7B:51
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D293FF8A45A56F134E21A20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c28cfc3f-ba2c-39be-978c-14ffd272ab53.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 7122
IP address blocks: 170.199.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:29:3f:f8:a4:5a:56:f1:34:e2:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=6cc7c138-cb8a-4ade-97ad-0ac905a9e5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:ce:74:cb:d6:c3:62:bd:94:43:ea:9e:89:
70:d5:7d:e8:7f:e6:ac:54:2a:cf:23:25:d8:d5:e7:
92:1d:1b:f2:82:81:d0:28:fb:38:e0:d4:7d:02:6c:
4e:04:7d:a4:05:7f:02:8b:68:f9:d0:fc:d3:ce:4d:
9b:f3:9a:42:cd:64:e3:bb:1c:6e:c4:7a:37:96:cc:
c5:ef:ff:a6:88:c9:70:8b:da:86:cb:7a:4c:a2:ad:
8a:79:6d:5a:26:3b:10:fa:c8:64:e8:a6:70:39:cc:
66:92:7b:25:3a:de:a6:82:4c:34:44:6d:c6:43:ec:
2b:11:2e:aa:da:a5:b4:a8:08:d6:7d:ef:a1:62:04:
24:ce:e2:c8:af:01:cb:45:46:07:f2:ca:c5:a7:60:
ff:40:b8:d9:01:8e:70:1e:37:c4:9a:32:7b:b9:3b:
1c:39:1b:6e:48:07:f7:07:37:c8:7c:98:4d:a6:53:
71:a1:6b:a1:36:29:9e:65:01:55:6a:b0:69:a9:78:
de:5b:59:1f:9f:8f:1c:5d:38:6f:af:06:d8:ed:c7:
7b:8e:82:94:74:93:3c:8a:ef:32:18:af:e4:cf:75:
13:70:fb:16:f2:84:5d:c0:8e:a3:83:67:d6:3f:46:
29:71:f2:b7:39:7d:88:29:ac:cb:ff:49:b2:08:c6:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:DA:03:21:A5:F5:F9:78:0E:45:B7:F7:4A:B8:E8:97:2E:7B:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c28cfc3f-ba2c-39be-978c-14ffd272ab53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
170.199.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d1:4c:34:fb:c5:63:34:99:ce:34:28:78:fc:24:91:de:a0:
e2:11:e9:68:04:a7:99:30:2c:31:11:2a:df:27:68:b6:87:87:
15:2e:c9:69:67:a8:76:c7:31:bb:c0:c4:59:43:f7:ff:b9:48:
1c:81:ae:f3:57:0e:b0:57:88:c2:75:de:b0:a0:94:94:5e:87:
fe:d2:fb:d5:ce:55:bb:44:e2:04:4d:ef:ea:d1:70:32:ce:0f:
ad:50:37:7d:62:a2:0a:7c:92:16:03:d4:0b:e7:53:0e:1c:12:
2d:16:27:8c:e2:ac:38:e2:c5:99:7f:a0:4c:85:48:56:13:0e:
21:5b:e1:46:83:6d:7f:10:ee:a0:bc:e2:b8:7e:ee:68:f8:9d:
bb:bd:1e:93:02:11:b8:26:19:fd:37:3b:3c:69:c0:3f:a1:fe:
58:22:3f:04:79:db:72:e3:9d:61:ae:ec:58:a1:a1:5e:49:02:
23:65:37:49:76:5f:dc:1c:0b:81:f1:60:71:5c:b3:8e:91:d5:
2e:ed:f0:48:7e:8b:e5:89:0d:00:38:cd:27:71:c1:ef:9a:88:
c2:c1:a1:20:7f:34:6c:e4:74:d2:ab:50:3c:c2:96:c8:8e:c4:
82:a7:9c:30:26:8f:a4:60:ef:6b:ab:53:b0:b1:9e:87:5f:e3:
e6:2a:c5:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKT/4pFpW8TTiGiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NmNjN2MxMzgtY2I4YS00YWRlLTk3YWQtMGFjOTA1YTllNWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/OdMvWw2K9lEPqnolw1X3of+asVCrPIyXY
1eeSHRvygoHQKPs44NR9AmxOBH2kBX8Ci2j50PzTzk2b85pCzWTjuxxuxHo3lszF
7/+miMlwi9qGy3pMoq2KeW1aJjsQ+shk6KZwOcxmknslOt6mgkw0RG3GQ+wrES6q
2qW0qAjWfe+hYgQkzuLIrwHLRUYH8srFp2D/QLjZAY5wHjfEmjJ7uTscORtuSAf3
BzfIfJhNplNxoWuhNimeZQFVarBpqXjeW1kfn48cXThvrwbY7cd7joKUdJM8iu8y
GK/kz3UTcPsW8oRdwI6jg2fWP0YpcfK3OX2IKazL/0myCMbzYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCV52gMhpfX5eA5Ft/dKuOiXLntRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzI4Y2ZjM2YtYmEyYy0z
OWJlLTk3OGMtMTRmZmQyNzJhYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqscAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJnRTDT7xWM0mc40KHj8JJHeoOIR6WgEp5kwLDERKt8naLaHhxUuyWln
qHbHMbvAxFlD9/+5SByBrvNXDrBXiMJ13rCglJReh/7S+9XOVbtE4gRN7+rRcDLO
D61QN31iogp8khYD1AvnUw4cEi0WJ4zirDjixZl/oEyFSFYTDiFb4UaDbX8Q7qC8
4rh+7mj4nbu9HpMCEbgmGf03OzxpwD+h/lgiPwR523LjnWGu7FihoV5JAiNlN0l2
X9wcC4HxYHFcs46R1S7t8Eh+i+WJDQA4zSdxwe+aiMLBoSB/NGzkdNKrUDzClsiO
xIKnnDAmj6Rg72urU7Cxnodf4+YqxSg=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:28 2025 by rpki-client