Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2bfde12-2712-38f0-abc6-d4f0c2c2e1d4.roa
File: d2bfde12-2712-38f0-abc6-d4f0c2c2e1d4.roa (raw, json)
Hash identifier: 2+uVt2Dqo8IlLimvngeN/wxrJaXo1k4PJecKUHFnits=
Subject key identifier: 9B:82:11:98:46:D1:69:EA:AC:3E:44:8E:CD:2E:9D:7E:50:C0:C3:0B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFD86CFB2A6669C67D7920
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2bfde12-2712-38f0-abc6-d4f0c2c2e1d4.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:d8:6c:fb:2a:66:69:c6:7d:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=6949c9f0-a6c0-4f35-ba16-b16c51e37aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4c:89:22:6f:7d:31:9b:05:04:ef:6a:f2:4f:
97:2f:d5:50:b7:3f:df:d5:59:2a:ff:c1:fa:8f:23:
ee:39:20:1b:31:38:bb:5a:33:89:ad:37:f6:dc:42:
1f:50:57:ca:56:77:41:d7:a0:b1:1f:be:af:8c:09:
e7:02:69:81:05:b4:7a:fc:5e:a1:42:70:79:07:56:
52:52:2d:bb:1f:9a:84:95:f5:67:92:25:59:19:ef:
13:e7:74:cd:8e:23:00:22:e0:19:0d:be:0e:09:06:
ba:19:a6:cb:53:06:c6:a1:21:55:4c:6f:bc:30:25:
09:db:0a:51:42:36:f7:1b:33:e0:68:45:3b:09:09:
8c:9b:75:80:eb:5e:56:f0:24:63:fa:57:51:0b:53:
bf:52:dd:d4:42:51:2f:82:ab:bc:ca:7e:b4:18:54:
77:e9:d2:0b:a9:d8:1c:d1:1b:b7:af:39:12:01:fd:
3a:22:21:3b:f2:fb:da:bf:7f:af:1e:da:73:ac:0e:
e5:88:36:9a:10:3c:0a:b3:ee:a4:38:63:5c:87:74:
92:45:d5:08:81:17:21:7b:e4:01:cf:48:ec:84:14:
4a:72:02:d0:d3:4a:68:5b:a1:d0:68:c4:00:71:8a:
39:5f:28:74:d5:6b:ce:76:1d:c9:21:cd:81:0e:7f:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:11:98:46:D1:69:EA:AC:3E:44:8E:CD:2E:9D:7E:50:C0:C3:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2bfde12-2712-38f0-abc6-d4f0c2c2e1d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3d:23:ca:a0:37:9c:b2:f4:7f:44:c2:43:93:9f:38:58:48:
0c:e2:ec:21:ca:55:3e:5d:08:f5:99:f4:ca:46:5d:38:e7:27:
71:12:ef:be:80:9b:a1:b2:d9:6f:83:ac:3b:8c:d8:17:fa:14:
94:59:56:b8:3a:91:7a:25:7a:d2:af:ff:53:2b:51:12:94:1e:
41:ce:62:a9:b8:08:66:6b:e1:11:43:6b:27:ac:37:01:53:c0:
e1:ba:ad:a4:ad:47:f8:2c:aa:a7:0e:72:a3:5b:1c:b6:8f:c1:
9f:6b:aa:e9:cb:87:05:5f:97:01:f9:9f:ef:88:cf:a1:ef:e8:
90:bc:61:a3:49:34:4b:6c:2e:4a:36:d1:6e:42:3a:28:6f:c2:
60:fc:c0:e8:88:cb:d9:d2:3d:e8:6f:54:1f:f7:75:35:5c:0d:
0f:d7:83:7b:54:18:59:9c:16:d8:6b:80:15:b5:54:fe:78:91:
e2:00:30:f4:db:77:16:c2:96:f7:fd:95:b6:d2:7d:3c:01:36:
db:4c:e3:4e:6f:bb:8f:22:09:c6:7b:11:43:8f:ca:2a:90:d1:
2d:72:c4:ae:7f:29:de:0d:a2:da:06:a3:73:23:72:37:e2:1e:
3d:23:dd:b8:b0:c0:e7:00:69:80:3e:03:58:d7:27:a0:cb:12:
52:f0:0d:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdr9hs+ypmacZ9eSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
Njk0OWM5ZjAtYTZjMC00ZjM1LWJhMTYtYjE2YzUxZTM3YWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEyJIm99MZsFBO9q8k+XL9VQtz/f1Vkq/8H6
jyPuOSAbMTi7WjOJrTf23EIfUFfKVndB16CxH76vjAnnAmmBBbR6/F6hQnB5B1ZS
Ui27H5qElfVnkiVZGe8T53TNjiMAIuAZDb4OCQa6GabLUwbGoSFVTG+8MCUJ2wpR
Qjb3GzPgaEU7CQmMm3WA615W8CRj+ldRC1O/Ut3UQlEvgqu8yn60GFR36dILqdgc
0Ru3rzkSAf06IiE78vvav3+vHtpzrA7liDaaEDwKs+6kOGNch3SSRdUIgRche+QB
z0jshBRKcgLQ00poW6HQaMQAcYo5Xyh01WvOdh3JIc2BDn+snwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuCEZhG0WnqrD5Ejs0unX5QwMMLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDJiZmRlMTItMjcxMi0z
OGYwLWFiYzYtZDRmMGMyYzJlMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGUdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG49I8qgN5yy9H9EwkOTnzhYSAzi7CHKVT5dCPWZ9MpGXTjnJ3ES776A
m6Gy2W+DrDuM2Bf6FJRZVrg6kXoletKv/1MrURKUHkHOYqm4CGZr4RFDayesNwFT
wOG6raStR/gsqqcOcqNbHLaPwZ9rqunLhwVflwH5n++Iz6Hv6JC8YaNJNEtsLko2
0W5COihvwmD8wOiIy9nSPehvVB/3dTVcDQ/Xg3tUGFmcFthrgBW1VP54keIAMPTb
dxbClvf9lbbSfTwBNttM405vu48iCcZ7EUOPyiqQ0S1yxK5/Kd4NotoGo3Mjcjfi
Hj0j3biwwOcAaYA+A1jXJ6DLElLwDR0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:23 2025 by rpki-client