Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8849248e-6e43-33d5-98a3-25632ac6b70c.roa
File: 8849248e-6e43-33d5-98a3-25632ac6b70c.roa (raw, json)
Hash identifier: 5YWIjk24nmLVsO1fAG70wn2yTOxQ2/xPXv5t4fZQpUs=
Subject key identifier: 5D:6C:F8:44:86:73:D1:82:FB:A8:BB:BF:38:08:78:5F:E6:94:9C:0B
Certificate issuer: /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial: 010D0C9F43285848DC9B241977C9DF78BE140520
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8849248e-6e43-33d5-98a3-25632ac6b70c.roa
Signing time: Wed 12 Feb 2025 20:37:19 +0000
ROA not before: Wed 12 Feb 2025 20:37:19 +0000
ROA not after: Tue 13 May 2025 19:37:19 +0000
asID: 14619
IP address blocks: 205.233.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dc:9b:24:19:77:c9:df:78:be:14:05:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Validity
Not Before: Feb 12 20:37:19 2025 GMT
Not After : May 13 19:37:19 2025 GMT
Subject: CN=42ccbbf8-69f4-4159-850b-156d6e23d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:1e:06:7b:c8:2a:4e:68:d9:c2:2c:7f:ab:
b3:f3:72:1a:2e:1d:1a:b3:e5:c7:a3:c6:49:ce:45:
e8:06:b9:a2:54:a6:56:a5:84:9f:d2:08:03:f1:91:
21:5c:66:f4:6a:bf:10:66:c4:45:a0:bb:70:ad:fd:
73:26:99:ac:33:9b:c9:8e:0a:1c:b4:4e:28:7f:6a:
20:3d:14:d1:98:50:55:f8:02:8f:3c:08:da:0f:07:
b6:75:17:6c:26:09:26:14:b0:ed:9d:65:71:fa:0e:
3c:37:5d:18:9d:6c:b7:55:41:44:b5:3a:d2:7f:d7:
17:6f:9d:db:ba:24:74:6b:47:0b:6a:07:7a:47:36:
78:eb:b5:9c:16:43:d8:32:5d:40:fd:a8:7f:90:82:
fd:c6:c1:ef:68:99:0b:c9:a2:ae:ca:27:41:c5:a5:
f0:e1:60:06:be:48:e8:b5:3c:fa:49:68:2a:d5:de:
ad:c3:bb:c3:a0:19:01:c4:f1:50:bb:9e:90:07:60:
57:71:82:d8:54:24:ef:10:ef:05:fc:10:c7:ee:66:
cc:96:33:d1:3b:63:c3:51:10:32:86:fd:4a:72:26:
15:e9:ba:75:0b:a2:7a:4a:2f:c1:2a:24:53:0d:2c:
78:ea:57:c7:75:48:0f:c1:c8:e0:f7:e2:80:9a:95:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6C:F8:44:86:73:D1:82:FB:A8:BB:BF:38:08:78:5F:E6:94:9C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8849248e-6e43-33d5-98a3-25632ac6b70c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
X509v3 Authority Key Identifier:
keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
sbgp-ipAddrBlock: critical
IPv4:
205.233.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:be:07:b1:be:95:32:de:a9:e3:46:12:03:04:f0:d8:4f:d4:
f2:e8:88:c9:48:66:67:94:07:92:44:d1:60:36:97:a4:b6:bd:
48:9e:4d:49:3e:ce:a7:83:1a:7c:30:8d:71:7c:4a:5c:f1:33:
14:37:2e:4a:4f:ab:dd:b5:05:79:0e:48:b9:63:7e:1d:e8:b3:
01:db:16:93:9f:a7:df:ce:6c:b8:57:bb:14:18:99:a7:f8:be:
b2:49:f9:5b:f6:b4:2b:16:43:dc:03:ee:63:db:b7:ce:ab:e5:
3a:48:56:59:a5:85:b2:7d:7d:d4:55:7f:32:5d:79:12:16:3c:
9b:05:16:39:7e:9c:47:49:f6:ce:db:f3:ca:90:c0:06:d5:82:
c2:48:41:8d:84:f3:8e:64:ce:96:d9:a0:d4:c7:55:dc:4f:ca:
4c:97:69:a9:0c:7a:84:f1:19:43:32:fc:55:bc:d6:8c:07:9d:
2f:ad:34:1f:38:ca:86:04:23:0f:29:7e:62:51:f9:5d:72:51:
46:b4:20:38:b4:b1:ab:a0:9e:c3:ad:43:ef:8b:1b:49:e4:40:
1d:dc:f2:71:5b:46:91:62:c4:17:fd:07:4b:a4:b9:92:30:74:
55:b5:96:d5:99:05:00:6a:41:0a:a6:01:d8:29:9d:d8:56:99:
81:2d:2b:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcmyQZd8nfeL4UBSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAw
NDE4MB4XDTI1MDIxMjIwMzcxOVoXDTI1MDUxMzE5MzcxOVowLzEtMCsGA1UEAxMk
NDJjY2JiZjgtNjlmNC00MTU5LTg1MGItMTU2ZDZlMjNkMGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT8eBnvIKk5o2cIsf6uz83IaLh0as+XHo8ZJ
zkXoBrmiVKZWpYSf0ggD8ZEhXGb0ar8QZsRFoLtwrf1zJpmsM5vJjgoctE4of2og
PRTRmFBV+AKPPAjaDwe2dRdsJgkmFLDtnWVx+g48N10YnWy3VUFEtTrSf9cXb53b
uiR0a0cLagd6RzZ467WcFkPYMl1A/ah/kIL9xsHvaJkLyaKuyidBxaXw4WAGvkjo
tTz6SWgq1d6tw7vDoBkBxPFQu56QB2BXcYLYVCTvEO8F/BDH7mbMljPRO2PDURAy
hv1KciYV6bp1C6J6Si/BKiRTDSx46lfHdUgPwcjg9+KAmpXIEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1s+ESGc9GC+6i7vzgIeF/mlJwLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjM1
NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvODg0OTI0OGUtNmU0My0z
M2Q1LTk4YTMtMjU2MzJhYzZiNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGIzNTVhYTMtY2YyOC00YTUzLTk2
YzUtZGRmM2JiODAwNDE4LzhiMzU1YWEzLWNmMjgtNGE1My05NmM1LWRkZjNiYjgw
MDQxOC5jcmwwHwYDVR0jBBgwFoAUy1Kokcx0j44ypXPtDxqDz0H1JHgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYz
YmI4MDA0MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzekAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe+B7G+lTLeqeNGEgME8NhP1PLoiMlIZmeUB5JE0WA2l6S2vUieTUk+
zqeDGnwwjXF8SlzxMxQ3LkpPq921BXkOSLljfh3oswHbFpOfp9/ObLhXuxQYmaf4
vrJJ+Vv2tCsWQ9wD7mPbt86r5TpIVlmlhbJ9fdRVfzJdeRIWPJsFFjl+nEdJ9s7b
88qQwAbVgsJIQY2E845kzpbZoNTHVdxPykyXaakMeoTxGUMy/FW81owHnS+tNB84
yoYEIw8pfmJR+V1yUUa0IDi0saugnsOtQ++LG0nkQB3c8nFbRpFixBf9B0ukuZIw
dFW1ltWZBQBqQQqmAdgpndhWmYEtK64=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:57 2025 by rpki-client