Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5ad4497d-2437-311c-a7f5-310411de6a2b.roa
File: 5ad4497d-2437-311c-a7f5-310411de6a2b.roa (raw, json)
Hash identifier: 9+timqfEyLbDoa/xRWcU7sSQzuGas3lucnos+yE6TWU=
Subject key identifier: B4:F4:FF:BA:77:44:20:A0:C5:51:78:E7:17:F9:9C:72:BA:AD:F6:A8
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285846A2D65C6C910D4873423C0A00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5ad4497d-2437-311c-a7f5-310411de6a2b.roa
Signing time: Tue 23 Jul 2024 18:25:53 +0000
ROA not before: Tue 23 Jul 2024 18:25:53 +0000
ROA not after: Mon 21 Oct 2024 18:25:53 +0000
asID: 4922
IP address blocks: 184.170.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a2:d6:5c:6c:91:0d:48:73:42:3c:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jul 23 18:25:53 2024 GMT
Not After : Oct 21 18:25:53 2024 GMT
Subject: CN=849d82a9-8058-4e0d-9b43-d1df3223e5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:12:c3:4a:3e:f8:d4:19:26:53:74:25:a3:
61:57:f3:e6:0e:1f:e1:45:aa:fe:02:30:c2:b4:e8:
a8:3e:bc:7f:bd:cf:57:f8:d9:d8:82:4d:77:ed:bf:
71:b7:47:24:80:68:ea:9c:9b:39:9b:68:1a:b8:2f:
a5:bc:69:e1:15:7a:2b:ab:31:2c:c3:80:51:b8:c8:
e8:1c:70:54:51:bb:26:b0:ca:5a:cf:8a:ed:0f:c7:
25:14:27:37:b2:5a:f2:2c:ea:f5:b0:58:f9:ff:79:
e2:d4:1c:ba:a4:fb:62:fb:15:70:19:79:21:f8:c8:
c5:4e:21:ef:f5:ec:7a:da:90:a8:93:98:21:bb:c5:
77:b9:34:1c:6d:37:09:6e:c9:6a:bc:07:f6:50:55:
26:09:af:ce:11:f5:04:fd:c5:3f:ed:57:f4:0c:d3:
d8:cb:14:05:b5:74:e4:85:e6:10:8d:d3:7d:01:2b:
3b:c2:f4:d1:67:9c:a8:51:2b:dc:c8:d6:29:83:d9:
34:5a:27:5a:fe:52:11:fa:c9:61:fa:9e:87:3f:80:
ac:41:7e:41:93:b2:fc:e0:b4:9f:10:d9:42:6e:70:
ee:d7:07:e7:c7:24:84:20:4b:5b:9f:37:cc:4a:18:
e5:a9:78:6f:a8:e3:01:9b:0b:a5:b9:5a:98:d4:5f:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F4:FF:BA:77:44:20:A0:C5:51:78:E7:17:F9:9C:72:BA:AD:F6:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5ad4497d-2437-311c-a7f5-310411de6a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
184.170.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fb:ed:bc:57:42:c9:d9:6f:73:fc:7d:bf:33:39:09:55:47:
4b:a4:5c:f4:d9:b0:fa:8d:47:ab:9d:a9:08:95:f3:45:7b:a7:
e4:7a:23:a6:04:f1:3f:69:e4:27:27:8d:db:4f:ce:19:b5:e8:
22:a2:e9:bb:57:32:65:f0:ac:24:12:61:28:0e:2e:d1:1c:73:
5e:70:af:24:09:50:63:ad:e1:97:65:16:3f:e2:96:d8:11:1b:
c4:ab:d8:7c:1c:80:24:29:3c:a3:8b:10:d2:e3:3f:08:1f:03:
5a:10:2d:b4:3b:af:c1:6e:3d:cf:f8:df:f4:81:af:f6:f2:ec:
d9:cd:10:98:d3:4b:45:a0:ee:ad:8c:73:40:69:bc:af:81:51:
b3:a4:59:24:7c:fa:bd:04:1a:b0:d2:eb:c8:41:6e:cf:06:ff:
61:8b:dd:ef:27:6d:2e:ca:d6:5f:e4:85:06:37:6f:df:22:d2:
3f:97:fe:03:53:80:ea:55:56:d7:4a:94:20:b5:0d:1b:c4:97:
91:a3:d3:d0:73:e5:bb:3d:0d:75:c2:1b:dd:56:d0:02:6b:f5:
56:33:b1:be:cb:97:3f:d8:5a:74:86:88:ab:6b:5f:09:70:aa:
99:12:bc:fc:05:b1:38:0f:cb:19:cc:25:04:10:c7:78:53:eb:
80:28:72:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEai1lxskQ1Ic0I8CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI0MDcyMzE4MjU1M1oXDTI0MTAyMTE4MjU1M1owLzEtMCsGA1UEAxMk
ODQ5ZDgyYTktODA1OC00ZTBkLTliNDMtZDFkZjMyMjNlNWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrcSw0o++NQZJlN0JaNhV/PmDh/hRar+AjDC
tOioPrx/vc9X+NnYgk137b9xt0ckgGjqnJs5m2gauC+lvGnhFXorqzEsw4BRuMjo
HHBUUbsmsMpaz4rtD8clFCc3slryLOr1sFj5/3ni1By6pPti+xVwGXkh+MjFTiHv
9ex62pCok5ghu8V3uTQcbTcJbslqvAf2UFUmCa/OEfUE/cU/7Vf0DNPYyxQFtXTk
heYQjdN9ASs7wvTRZ5yoUSvcyNYpg9k0Wida/lIR+slh+p6HP4CsQX5Bk7L84LSf
ENlCbnDu1wfnxySEIEtbnzfMShjlqXhvqOMBmwuluVqY1F8ujQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLT0/7p3RCCgxVF45xf5nHK6rfaoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNWFkNDQ5N2QtMjQzNy0z
MTFjLWE3ZjUtMzEwNDExZGU2YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuKpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF377bxXQsnZb3P8fb8zOQlVR0ukXPTZsPqNR6udqQiV80V7p+R6I6YE
8T9p5CcnjdtPzhm16CKi6btXMmXwrCQSYSgOLtEcc15wryQJUGOt4ZdlFj/iltgR
G8Sr2HwcgCQpPKOLENLjPwgfA1oQLbQ7r8FuPc/43/SBr/by7NnNEJjTS0Wg7q2M
c0BpvK+BUbOkWSR8+r0EGrDS68hBbs8G/2GL3e8nbS7K1l/khQY3b98i0j+X/gNT
gOpVVtdKlCC1DRvEl5Gj09Bz5bs9DXXCG91W0AJr9VYzsb7Llz/YWnSGiKtrXwlw
qpkSvPwFsTgPyxnMJQQQx3hT64Aocqw=
-----END CERTIFICATE-----
Generated at Tue May 6 11:09:23 2025 by rpki-client