Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/22a4d7e3-e42f-39ca-9737-5471ee000ba1.roa
File: 22a4d7e3-e42f-39ca-9737-5471ee000ba1.roa (raw, json)
Hash identifier: BmDiZzwhQO9zwwwOj/F4owMywYXtnYcUAYhculAknCQ=
Subject key identifier: 6F:02:82:34:78:A0:F0:CF:4E:06:BE:7F:36:E5:8A:B4:3D:97:64:5B
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858481B7CD9A87654F7B124B7B100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/22a4d7e3-e42f-39ca-9737-5471ee000ba1.roa
Signing time: Thu 05 Dec 2024 16:25:16 +0000
ROA not before: Thu 05 Dec 2024 16:25:16 +0000
ROA not after: Wed 05 Mar 2025 16:25:16 +0000
asID: 834
IP address blocks: 67.207.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:7c:d9:a8:76:54:f7:b1:24:b7:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 5 16:25:16 2024 GMT
Not After : Mar 5 16:25:16 2025 GMT
Subject: CN=91ceb7d0-6e4e-4180-b409-5c4ea65be3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:b4:f5:05:51:32:46:b7:87:df:7c:7b:bb:
c1:68:ae:eb:66:e8:1d:9d:44:9f:19:5c:fc:11:3f:
f0:ba:c3:cd:be:27:37:b4:39:65:82:03:59:69:fe:
65:96:4c:25:f0:46:23:3f:95:8f:f6:dd:8f:e8:e8:
53:58:13:59:64:ef:09:c1:29:74:89:30:3c:f7:d6:
1a:0c:a0:10:a3:22:2a:92:f4:d4:57:c5:54:2f:e6:
5f:7f:ae:78:23:a6:2e:6e:a3:a2:e2:a0:bc:b8:77:
3a:ff:f3:14:a4:ec:da:94:a8:aa:14:bc:92:d4:48:
d7:b8:81:df:7c:7c:a8:e5:51:a6:4a:af:b5:3f:b9:
a2:42:e0:23:fb:bd:0d:d6:3d:43:c3:b1:23:c3:46:
d1:e3:74:10:da:f3:aa:53:ec:7b:82:ec:13:5e:32:
14:5c:e7:e2:f4:ca:91:3b:a0:e0:1f:3a:c8:25:d2:
b0:a8:65:2e:51:7b:69:e6:3f:1e:6d:26:28:7b:90:
e9:b7:25:9e:fa:58:8c:96:c7:de:d9:69:95:ca:19:
64:f6:c7:66:2e:30:2b:60:7b:8a:b1:53:95:a6:53:
6e:5e:64:fd:77:ba:25:72:4a:66:61:aa:12:4c:de:
41:98:b1:3b:33:78:be:60:eb:0e:4d:29:cc:21:53:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:82:34:78:A0:F0:CF:4E:06:BE:7F:36:E5:8A:B4:3D:97:64:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/22a4d7e3-e42f-39ca-9737-5471ee000ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
67.207.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:47:64:f3:51:59:6f:e7:23:37:c9:3d:e5:66:a7:02:6b:62:
5b:b4:89:30:08:e2:36:e5:a4:0e:82:76:ed:b1:14:6c:03:f3:
83:2d:19:8b:ba:ba:10:0d:fd:f8:31:a5:7e:df:b5:f4:ed:49:
44:95:70:9a:8d:a3:f8:3a:22:93:a5:57:4b:12:bd:2f:eb:b9:
0f:33:9e:34:fe:9f:4b:1a:f2:fc:47:98:27:a1:d5:8a:41:54:
eb:eb:dd:cd:11:89:c4:16:40:94:3f:87:a6:2e:89:ba:8a:e8:
5c:db:11:56:3f:0a:91:58:5e:29:22:3b:6a:b0:12:17:26:ca:
55:25:3e:4b:a1:d2:fe:b2:55:45:c2:94:0c:b7:2f:0b:c9:19:
a8:d4:70:be:02:f1:62:a0:45:c6:33:d3:53:f5:8b:5c:2a:ba:
fd:24:48:6f:76:9d:64:28:cc:4f:9b:3c:00:0e:10:3d:90:d3:
d8:bd:67:94:75:3c:9d:fc:fa:c0:9e:77:6c:51:72:76:66:06:
d9:19:14:0f:f9:76:0a:b1:e4:49:02:4e:26:6c:d6:36:9a:24:
a4:73:4e:1b:e0:39:77:0e:52:eb:f6:b6:a3:74:e5:fd:f9:6a:
28:0a:d4:0a:39:22:4c:b7:48:fc:f7:c1:95:b5:d1:47:39:2b:
41:71:16:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbfNmodlT3sSS3sQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTIwNTE2MjUxNloXDTI1MDMwNTE2MjUxNlowLzEtMCsGA1UEAxMk
OTFjZWI3ZDAtNmU0ZS00MTgwLWI0MDktNWM0ZWE2NWJlM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriS09QVRMka3h998e7vBaK7rZugdnUSfGVz8
ET/wusPNvic3tDllggNZaf5llkwl8EYjP5WP9t2P6OhTWBNZZO8JwSl0iTA899Ya
DKAQoyIqkvTUV8VUL+Zff654I6YubqOi4qC8uHc6//MUpOzalKiqFLyS1EjXuIHf
fHyo5VGmSq+1P7miQuAj+70N1j1Dw7Ejw0bR43QQ2vOqU+x7guwTXjIUXOfi9MqR
O6DgHzrIJdKwqGUuUXtp5j8ebSYoe5DptyWe+liMlsfe2WmVyhlk9sdmLjArYHuK
sVOVplNuXmT9d7olckpmYaoSTN5BmLE7M3i+YOsOTSnMIVPvswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8CgjR4oPDPTga+fzblirQ9l2RbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjJhNGQ3ZTMtZTQyZi0z
OWNhLTk3MzctNTQ3MWVlMDAwYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8+8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhHZPNRWW/nIzfJPeVmpwJrYlu0iTAI4jblpA6Cdu2xFGwD84MtGYu6
uhAN/fgxpX7ftfTtSUSVcJqNo/g6IpOlV0sSvS/ruQ8znjT+n0sa8vxHmCeh1YpB
VOvr3c0RicQWQJQ/h6YuibqK6FzbEVY/CpFYXikiO2qwEhcmylUlPkuh0v6yVUXC
lAy3LwvJGajUcL4C8WKgRcYz01P1i1wquv0kSG92nWQozE+bPAAOED2Q09i9Z5R1
PJ38+sCed2xRcnZmBtkZFA/5dgqx5EkCTiZs1jaaJKRzThvgOXcOUuv2tqN05f35
aigK1Ao5Iky3SPz3wZW10Uc5K0FxFpE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:11:57 2025 by rpki-client