Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/d501ceac-6451-3204-b7cb-da08afe1abad.roa
File: d501ceac-6451-3204-b7cb-da08afe1abad.roa (raw, json)
Hash identifier: B7bVuNaJhxjqctcZZpBNxU0+pPbS8uPGUFv49dt7W3g=
Subject key identifier: FF:22:59:49:94:1D:75:F1:3E:AF:AE:E5:CB:18:D7:AE:FF:C9:E9:69
Certificate issuer: /CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Certificate serial: 010D0C9F43285842942A1CC31AE3E664325713A0
Authority key identifier: 41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/d501ceac-6451-3204-b7cb-da08afe1abad.roa
Signing time: Mon 17 Jul 2023 17:09:45 +0000
ROA not before: Mon 17 Jul 2023 17:09:45 +0000
ROA not after: Sun 15 Oct 2023 17:09:45 +0000
asID: 46887
IP address blocks: 162.252.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:94:2a:1c:c3:1a:e3:e6:64:32:57:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b493bda5-0caa-4a42-8d7a-d94d27b079ea
Validity
Not Before: Jul 17 17:09:45 2023 GMT
Not After : Oct 15 17:09:45 2023 GMT
Subject: CN=4f455836-3547-45ba-bf84-0ff0cfd0b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:0a:df:0e:eb:4d:fe:8b:06:75:4c:98:cc:
28:d4:2c:db:6b:9e:e2:bf:46:d6:c3:8d:c8:5f:fc:
7a:f8:71:cf:01:66:e7:b1:02:64:61:25:1e:0e:46:
80:d1:ec:3b:aa:99:ce:6b:b4:e7:e7:60:5e:a2:54:
9f:28:f3:50:6e:f7:d6:07:f1:4c:0f:5d:31:be:57:
4c:ef:03:82:37:4b:76:99:51:4c:0d:89:8f:2a:06:
a1:9b:4f:2e:96:af:36:cc:b6:e8:40:43:3f:b1:5d:
65:d6:e7:69:73:31:2c:2c:98:b8:e0:cc:d0:cb:a1:
bd:03:26:10:16:a4:24:70:e4:8a:f1:96:47:9b:b3:
8b:87:bb:d9:bd:b3:59:f3:62:ac:43:01:9f:7e:ef:
cb:df:51:ed:7e:c2:1b:48:82:16:d2:c7:de:1f:3c:
18:87:9f:54:34:15:d7:2a:23:e5:06:4b:11:8c:4e:
17:7b:d8:bd:c9:8e:7e:5d:53:c1:d3:cf:76:c6:d6:
70:c4:66:4c:b8:e3:f5:0f:6e:d9:31:20:09:06:9c:
0d:ed:65:eb:59:a0:19:96:37:35:b3:4d:a8:0a:f2:
ee:06:54:f8:e0:f2:fb:af:e3:ae:2d:16:87:e4:51:
1e:fe:55:ff:e3:06:de:db:55:92:88:8a:de:9e:1b:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:59:49:94:1D:75:F1:3E:AF:AE:E5:CB:18:D7:AE:FF:C9:E9:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/d501ceac-6451-3204-b7cb-da08afe1abad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea/b493bda5-0caa-4a42-8d7a-d94d27b079ea.crl
X509v3 Authority Key Identifier:
keyid:41:03:7A:0E:B7:0C:51:C0:85:17:D3:8C:50:A7:12:96:E7:39:58:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b493bda5-0caa-4a42-8d7a-d94d27b079ea.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:d3:94:b2:32:4b:b4:a6:b0:c7:6a:c2:86:0a:83:49:e6:97:
b5:b6:34:d5:22:45:ba:fe:50:3a:d0:87:83:b8:f0:7a:83:5f:
40:12:6e:df:6e:30:6f:e3:96:94:25:4a:03:04:cd:d6:31:0c:
59:5e:7c:32:ce:7c:7c:c0:55:dd:9d:67:c1:80:24:15:87:73:
2d:b2:52:f2:98:4f:67:3a:10:8d:ec:3b:b0:17:11:7b:30:12:
6a:29:14:0c:c7:d2:f1:85:de:ea:91:af:38:91:8f:ea:f3:54:
f6:8c:f1:70:ee:3d:09:a0:2a:6a:b9:a7:f6:d8:41:6d:df:b1:
ff:8c:a4:b9:9e:26:85:16:7d:45:88:8e:86:48:6e:88:30:98:
da:89:c8:18:24:66:48:41:33:ae:b3:f1:23:c0:18:6e:96:b6:
46:a4:f5:0e:c6:26:8f:3f:ef:5e:8f:37:b2:f9:c9:06:6f:6c:
74:df:c6:e5:4c:32:a7:6b:9d:6c:04:02:b9:b6:25:1f:8a:25:
6f:84:98:f7:98:ea:f1:f9:60:a0:e8:92:82:39:b8:74:00:4f:
20:79:8e:5a:0e:6e:e6:67:e5:97:cb:6e:72:98:06:14:27:4d:
20:38:20:0b:1a:b4:68:b6:66:93:a4:15:5b:84:de:b4:c4:20:
3e:81:83:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKUKhzDGuPmZDJXE6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ5M2JkYTUtMGNhYS00YTQyLThkN2EtZDk0ZDI3YjA3
OWVhMB4XDTIzMDcxNzE3MDk0NVoXDTIzMTAxNTE3MDk0NVowLzEtMCsGA1UEAxMk
NGY0NTU4MzYtMzU0Ny00NWJhLWJmODQtMGZmMGNmZDBiNmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJkK3w7rTf6LBnVMmMwo1Czba57iv0bWw43I
X/x6+HHPAWbnsQJkYSUeDkaA0ew7qpnOa7Tn52BeolSfKPNQbvfWB/FMD10xvldM
7wOCN0t2mVFMDYmPKgahm08ulq82zLboQEM/sV1l1udpczEsLJi44MzQy6G9AyYQ
FqQkcOSK8ZZHm7OLh7vZvbNZ82KsQwGffu/L31HtfsIbSIIW0sfeHzwYh59UNBXX
KiPlBksRjE4Xe9i9yY5+XVPB0892xtZwxGZMuOP1D27ZMSAJBpwN7WXrWaAZljc1
s02oCvLuBlT44PL7r+OuLRaH5FEe/lX/4wbe21WSiIrenhtOeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8iWUmUHXXxPq+u5csY167/yelpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNDkz
YmRhNS0wY2FhLTRhNDItOGQ3YS1kOTRkMjdiMDc5ZWEvZDUwMWNlYWMtNjQ1MS0z
MjA0LWI3Y2ItZGEwOGFmZTFhYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjQ5M2JkYTUtMGNhYS00YTQyLThk
N2EtZDk0ZDI3YjA3OWVhL2I0OTNiZGE1LTBjYWEtNGE0Mi04ZDdhLWQ5NGQyN2Iw
NzllYS5jcmwwHwYDVR0jBBgwFoAUQQN6DrcMUcCFF9OMUKcSluc5WOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNDkzYmRhNS0wY2FhLTRhNDItOGQ3YS1kOTRk
MjdiMDc5ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovylMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDTlLIyS7SmsMdqwoYKg0nml7W2NNUiRbr+UDrQh4O48HqDX0ASbt9u
MG/jlpQlSgMEzdYxDFlefDLOfHzAVd2dZ8GAJBWHcy2yUvKYT2c6EI3sO7AXEXsw
EmopFAzH0vGF3uqRrziRj+rzVPaM8XDuPQmgKmq5p/bYQW3fsf+MpLmeJoUWfUWI
joZIbogwmNqJyBgkZkhBM66z8SPAGG6Wtkak9Q7GJo8/716PN7L5yQZvbHTfxuVM
MqdrnWwEArm2JR+KJW+EmPeY6vH5YKDokoI5uHQATyB5jloObuZn5ZfLbnKYBhQn
TSA4IAsatGi2ZpOkFVuE3rTEID6Bg4o=
-----END CERTIFICATE-----
Generated at Sat May 10 19:34:05 2025 by rpki-client