Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/71fb0439-eeb8-3aa0-b0e4-102872b7a5f2.roa
File: 71fb0439-eeb8-3aa0-b0e4-102872b7a5f2.roa (raw, json)
Hash identifier: ERkI4WkMTlzYHQuKiHDTUIxzGN1P/+ADk2zO5xhAXxA=
Subject key identifier: AA:C4:AF:99:F5:70:BB:92:B4:C2:99:D8:44:F2:E0:9F:6F:B7:C2:D4
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285843849D3B8B4FEB42ED53986300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/71fb0439-eeb8-3aa0-b0e4-102872b7a5f2.roa
Signing time: Wed 11 Oct 2023 20:15:42 +0000
ROA not before: Wed 11 Oct 2023 20:15:42 +0000
ROA not after: Tue 09 Jan 2024 21:15:42 +0000
asID: 852
IP address blocks: 216.74.82.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:9d:3b:8b:4f:eb:42:ed:53:98:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Oct 11 20:15:42 2023 GMT
Not After : Jan 9 21:15:42 2024 GMT
Subject: CN=b52a1b09-0c7a-47de-b118-abd469f3232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:66:6f:17:3b:c1:40:88:67:b6:25:8b:cf:
43:36:ac:00:33:fb:9d:16:37:b1:fd:23:1b:7b:fc:
a9:06:87:77:97:64:81:f5:40:54:61:d5:64:ea:f9:
d4:56:dc:6b:14:38:aa:27:90:8b:54:2a:b0:01:66:
23:44:05:a9:bc:57:2e:82:dc:de:9d:5d:fe:1a:e6:
ca:c6:b6:21:46:50:f0:02:03:0c:ba:1e:c0:03:e5:
54:3e:e9:46:f8:b9:75:c4:f9:b3:52:f0:0c:2d:4c:
ca:f8:4e:ed:fa:e0:c8:f5:2c:be:45:d7:93:e7:0f:
4f:26:48:ab:bc:2b:07:57:97:44:a0:d2:4b:92:08:
81:28:6b:89:c4:4f:0d:0e:11:18:87:4f:fe:cd:56:
cc:37:a7:27:94:92:df:3b:e5:b6:df:fe:c0:cb:f7:
45:35:72:41:71:42:bf:2c:0a:ca:62:8f:ce:ae:7f:
62:42:08:4a:41:dd:58:a1:58:2f:bf:df:24:a5:78:
91:28:4a:c8:74:a5:83:4e:80:c4:99:99:e6:67:4b:
16:4e:0d:0a:94:d4:28:4f:bd:3c:9d:a6:a4:90:80:
04:5e:f0:17:02:3f:40:2f:3e:65:6f:97:98:7d:bb:
60:bf:6d:8a:eb:7b:47:68:36:40:22:71:f2:97:83:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:AF:99:F5:70:BB:92:B4:C2:99:D8:44:F2:E0:9F:6F:B7:C2:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/71fb0439-eeb8-3aa0-b0e4-102872b7a5f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.74.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:71:6c:09:29:2b:e7:68:c4:ed:a3:60:f5:88:62:e9:66:82:
5b:2b:ee:e8:13:0a:b6:f8:87:97:0d:d1:89:fc:68:c1:9a:99:
e8:94:6d:a2:47:02:9f:e4:6f:25:17:e5:e3:dd:37:e7:f6:9c:
41:d8:d2:17:ce:cf:77:30:68:59:37:f5:41:b3:77:84:bf:55:
93:20:1e:65:69:d5:93:9c:38:74:a9:1d:01:36:de:8a:e8:a6:
e4:b4:4b:28:c3:3f:77:b3:09:27:ff:60:92:bc:ea:e0:b0:96:
90:18:22:ff:58:d4:af:fc:fc:41:60:d5:09:e9:8f:48:37:55:
60:4d:c5:ce:3d:59:37:ee:b2:03:a1:b1:30:a6:12:a8:89:90:
fb:80:48:82:e9:16:18:2d:2c:5c:ea:aa:e1:f8:21:e6:59:3b:
0d:6c:6d:17:c7:ff:2c:aa:28:e4:b8:99:62:97:2a:00:a1:68:
97:ba:f1:70:a6:b7:f4:85:e5:d9:be:d9:76:00:0e:76:b1:ba:
c2:1b:a7:d0:da:84:2f:44:d1:cb:e8:bd:46:de:76:44:5e:90:
90:39:dd:fa:f2:a1:4a:0a:45:7a:89:08:83:00:b4:ca:2c:43:
e4:68:a8:0b:eb:7e:5b:3e:3f:5e:6d:d0:89:55:ef:8c:70:14:
f2:78:14:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOEnTuLT+tC7VOYYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMTAxMTIwMTU0MloXDTI0MDEwOTIxMTU0MlowLzEtMCsGA1UEAxMk
YjUyYTFiMDktMGM3YS00N2RlLWIxMTgtYWJkNDY5ZjMyMzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8dmbxc7wUCIZ7Yli89DNqwAM/udFjex/SMb
e/ypBod3l2SB9UBUYdVk6vnUVtxrFDiqJ5CLVCqwAWYjRAWpvFcugtzenV3+GubK
xrYhRlDwAgMMuh7AA+VUPulG+Ll1xPmzUvAMLUzK+E7t+uDI9Sy+RdeT5w9PJkir
vCsHV5dEoNJLkgiBKGuJxE8NDhEYh0/+zVbMN6cnlJLfO+W23/7Ay/dFNXJBcUK/
LArKYo/Orn9iQghKQd1YoVgvv98kpXiRKErIdKWDToDEmZnmZ0sWTg0KlNQoT708
naakkIAEXvAXAj9ALz5lb5eYfbtgv22K63tHaDZAInHyl4OWIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrEr5n1cLuStMKZ2ETy4J9vt8LUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzFmYjA0MzktZWViOC0z
YWEwLWIwZTQtMTAyODcyYjdhNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EpSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBxbAkpK+doxO2jYPWIYulmglsr7ugTCrb4h5cN0Yn8aMGameiUbaJH
Ap/kbyUX5ePdN+f2nEHY0hfOz3cwaFk39UGzd4S/VZMgHmVp1ZOcOHSpHQE23oro
puS0SyjDP3ezCSf/YJK86uCwlpAYIv9Y1K/8/EFg1Qnpj0g3VWBNxc49WTfusgOh
sTCmEqiJkPuASILpFhgtLFzqquH4IeZZOw1sbRfH/yyqKOS4mWKXKgChaJe68XCm
t/SF5dm+2XYADnaxusIbp9DahC9E0cvovUbedkRekJA53fryoUoKRXqJCIMAtMos
Q+RoqAvrfls+P15t0IlV74xwFPJ4FO8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:25 2025 by rpki-client