Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cc15192-6565-3f1f-b892-9969c7698f73.roa
File: 1cc15192-6565-3f1f-b892-9969c7698f73.roa (raw, json)
Hash identifier: 9GmVJSyMwoDlX2Bwi7wK9fU070e5U9vxYMEOS9hFFUc=
Subject key identifier: 3A:00:3B:46:58:76:C0:A3:D9:81:F0:E8:97:AC:BE:5E:4B:3A:59:2E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285839B8D7CEEB9986794DE124DB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cc15192-6565-3f1f-b892-9969c7698f73.roa
Signing time: Mon 26 Apr 2021 04:00:00 +0000
ROA not before: Mon 26 Apr 2021 04:00:00 +0000
ROA not after: Sat 29 Jul 2023 04:00:00 +0000
asID: 396982
IP address blocks: 23.251.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:b8:d7:ce:eb:99:86:79:4d:e1:24:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Apr 26 04:00:00 2021 GMT
Not After : Jul 29 04:00:00 2023 GMT
Subject: CN=6e10810a-ee8b-46b4-bf62-9e92c1f19e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:60:b9:7f:1e:c1:f6:e1:aa:cb:cb:23:68:
75:de:2e:79:03:30:fe:f6:c4:9f:17:dd:90:d5:95:
a9:91:1a:65:88:fa:82:0e:6c:09:67:0b:b8:49:e9:
1f:26:c0:0c:fc:48:5b:d0:48:bf:68:d8:22:b1:85:
56:35:58:20:47:46:01:fe:7f:30:05:d9:b1:17:44:
11:75:5f:d7:52:c3:c8:53:66:3a:da:58:6c:7f:13:
ca:30:66:8a:34:43:ac:b0:78:27:7e:32:cc:bc:0e:
c6:fa:0d:29:5c:37:83:49:dd:8f:ec:22:72:d1:06:
d6:ba:78:c1:3b:11:6c:dd:e1:b1:e6:40:2f:60:58:
75:ae:7d:8f:37:9a:d8:89:fd:f7:d6:98:0e:61:84:
a3:ce:93:46:a1:b8:31:97:5d:1b:18:9c:ea:02:b4:
8b:0e:71:ae:a0:4b:00:c6:23:1e:06:c6:13:a6:e7:
d8:30:2f:2b:8d:01:31:57:53:62:e4:34:92:92:02:
aa:bc:bd:90:ac:46:15:67:79:d8:44:6f:42:d2:2e:
37:dc:ab:40:cc:20:12:bf:2a:0e:01:01:8f:11:61:
6f:a3:cc:61:de:30:02:d1:4c:51:1f:ab:6e:d3:06:
ea:38:5a:77:38:74:a5:eb:11:76:2a:15:4c:07:ed:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:3B:46:58:76:C0:A3:D9:81:F0:E8:97:AC:BE:5E:4B:3A:59:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1cc15192-6565-3f1f-b892-9969c7698f73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:90:88:fe:69:c7:10:3a:e9:1e:e7:c1:53:96:c3:86:63:06:
85:0e:9f:3c:f9:bd:44:a5:fe:2e:40:ce:da:26:5b:cb:70:ab:
e1:a1:e1:00:46:01:d5:f5:83:73:b7:87:18:9f:5e:c7:db:8f:
50:a0:6a:b2:89:e6:5d:c5:e3:5e:ea:18:b8:88:72:53:27:19:
70:90:c7:ed:8b:11:1f:ff:69:d9:30:ee:21:ef:03:df:9d:53:
49:fc:1f:6f:df:4f:a3:c9:89:4d:57:3d:3e:09:98:7f:d3:26:
67:7c:bc:50:aa:24:e2:54:a2:ca:47:40:e9:c3:a1:39:d6:95:
de:e2:12:61:4d:80:35:b1:16:09:fd:61:52:33:42:77:1f:cd:
56:7a:69:52:f6:d9:52:ae:dc:80:dd:75:13:37:35:8b:58:60:
ff:df:e0:16:0b:15:35:9e:48:a5:d4:57:c0:cb:24:0c:1c:ca:
ea:95:83:5b:90:4c:39:09:d4:99:7f:c3:3f:71:03:bf:31:b0:
4b:26:e3:49:dc:07:1e:5f:8d:33:b8:fd:3b:51:2a:6e:71:dd:
01:7d:75:d4:15:0e:0a:d9:cc:de:35:ea:ea:fe:62:3a:0d:1b:
c9:a6:14:44:a4:06:17:5b:d6:7a:d7:1b:87:da:67:f1:34:c7:
a2:ae:97:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDm4187rmYZ5TeEk24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDQyNjA0MDAwMFoXDTIzMDcyOTA0MDAwMFowLzEtMCsGA1UEAxMk
NmUxMDgxMGEtZWU4Yi00NmI0LWJmNjItOWU5MmMxZjE5ZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFZguX8ewfbhqsvLI2h13i55AzD+9sSfF92Q
1ZWpkRpliPqCDmwJZwu4SekfJsAM/Ehb0Ei/aNgisYVWNVggR0YB/n8wBdmxF0QR
dV/XUsPIU2Y62lhsfxPKMGaKNEOssHgnfjLMvA7G+g0pXDeDSd2P7CJy0QbWunjB
OxFs3eGx5kAvYFh1rn2PN5rYif331pgOYYSjzpNGobgxl10bGJzqArSLDnGuoEsA
xiMeBsYTpufYMC8rjQExV1Ni5DSSkgKqvL2QrEYVZ3nYRG9C0i433KtAzCASvyoO
AQGPEWFvo8xh3jAC0UxRH6tu0wbqOFp3OHSl6xF2KhVMB+27QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDoAO0ZYdsCj2YHw6Jesvl5LOlkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWNjMTUxOTItNjU2NS0z
ZjFmLWI4OTItOTk2OWM3Njk4ZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/uAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeQiP5pxxA66R7nwVOWw4ZjBoUOnzz5vUSl/i5AztomW8twq+Gh4QBG
AdX1g3O3hxifXsfbj1CgarKJ5l3F417qGLiIclMnGXCQx+2LER//adkw7iHvA9+d
U0n8H2/fT6PJiU1XPT4JmH/TJmd8vFCqJOJUospHQOnDoTnWld7iEmFNgDWxFgn9
YVIzQncfzVZ6aVL22VKu3IDddRM3NYtYYP/f4BYLFTWeSKXUV8DLJAwcyuqVg1uQ
TDkJ1Jl/wz9xA78xsEsm40ncBx5fjTO4/TtRKm5x3QF9ddQVDgrZzN416ur+YjoN
G8mmFESkBhdb1nrXG4faZ/E0x6Kul5c=
-----END CERTIFICATE-----
Generated at Sat May 10 13:05:04 2025 by rpki-client