Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ebe7a98-63c7-3d5f-8e2e-b7cc4df76f39.roa
File: 8ebe7a98-63c7-3d5f-8e2e-b7cc4df76f39.roa (raw, json)
Hash identifier: Hvh+HWuhb9tM8mf7g/B/s5jLIj4O6CyKO6Nc/YasdUY=
Subject key identifier: A3:ED:E9:13:A1:A1:8C:E5:28:4D:80:9F:E5:E9:05:A1:D5:98:D6:D4
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309FFCFA16A2A505C70258680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ebe7a98-63c7-3d5f-8e2e-b7cc4df76f39.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.255.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:cf:a1:6a:2a:50:5c:70:25:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=dd95b539-d163-4cb6-8d57-d3c6aec51401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:f4:15:ce:e9:58:91:de:fb:7c:f7:d3:87:
a7:96:27:75:c2:83:08:aa:16:3d:da:ce:dc:65:a6:
bd:5a:07:3b:48:4c:75:d8:d1:b5:33:8f:fc:4d:1d:
4f:7b:35:52:86:3c:ee:57:5e:bb:73:ad:15:55:40:
41:0e:16:f5:ed:c2:cd:6e:f9:2d:86:2e:02:9e:f2:
ea:21:13:7c:22:8f:3d:53:24:79:39:7b:9e:98:ae:
30:61:36:48:8f:0a:f0:93:e8:f8:85:da:95:2c:f3:
5a:73:18:f6:2e:1f:75:a6:ce:c9:56:47:00:a2:d0:
6b:c9:e4:d7:e4:73:85:3c:dc:b3:c9:39:4e:f1:cd:
fd:96:43:7c:5c:d2:a8:b1:01:3d:34:d2:41:3a:5d:
d0:5f:bf:06:46:32:f4:6d:e1:39:7e:33:b5:de:1b:
a8:13:51:bb:1e:11:fe:51:5c:7c:19:00:a9:62:04:
7d:98:f2:13:fb:c1:be:10:c8:4f:3f:c6:96:b8:d9:
4a:be:28:b3:ea:34:7f:af:4d:80:c4:55:d1:f2:f7:
1a:95:53:c1:f2:3e:e8:91:e4:a5:73:54:93:15:ba:
9c:e4:35:0a:15:f4:57:e1:f7:62:f8:23:99:0a:33:
da:5b:d4:35:d6:5c:ac:ca:fa:1b:81:dd:e3:3d:a7:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:E9:13:A1:A1:8C:E5:28:4D:80:9F:E5:E9:05:A1:D5:98:D6:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ebe7a98-63c7-3d5f-8e2e-b7cc4df76f39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:2f:d9:06:eb:51:41:9d:7d:8b:ba:f9:9b:40:5a:cd:00:7b:
76:85:94:1e:fe:87:33:b9:17:47:4b:be:ee:5c:f5:52:d3:eb:
2c:6a:16:3a:61:7c:ee:07:09:67:0d:e0:d4:bc:df:64:8b:4b:
e4:51:ac:36:d1:a4:97:e9:42:97:7b:0b:73:ff:21:2e:fd:4b:
6a:0d:36:6f:f4:f0:38:b8:26:6d:b8:40:7d:b0:cb:e1:cc:c8:
1d:d1:7f:4e:39:bf:4a:0c:6a:fa:b2:aa:1d:00:e9:3c:5f:79:
1f:b0:ab:53:d0:d7:64:8a:09:15:81:2f:b6:09:da:62:95:9c:
91:7e:05:92:74:6c:8e:c3:db:32:3f:7d:58:d8:4f:ce:ae:94:
e5:31:6e:5d:9c:25:3d:66:55:42:91:1b:25:53:dd:37:01:4e:
15:70:ca:b4:6f:90:30:4e:cf:00:c5:4d:62:08:f7:b8:8d:92:
55:9d:f0:f5:1e:3c:e6:84:f6:4f:b2:b9:1c:f3:ed:47:d3:87:
05:32:4e:0b:00:3d:4b:a1:bd:f8:01:32:50:2d:2d:a4:ec:ac:
4f:5c:4d:14:92:98:4b:19:d3:c4:5d:fa:2e:c4:7f:3a:b1:46:
7f:6a:07:89:de:91:ff:ef:5b:c9:2a:c0:df:94:fe:d4:96:b1:
05:1e:d5:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/8+haipQXHAlhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGQ5NWI1MzktZDE2My00Y2I2LThkNTctZDNjNmFlYzUxNDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXn0Fc7pWJHe+3z304enlid1woMIqhY92s7c
Zaa9Wgc7SEx12NG1M4/8TR1PezVShjzuV167c60VVUBBDhb17cLNbvkthi4CnvLq
IRN8Io89UyR5OXuemK4wYTZIjwrwk+j4hdqVLPNacxj2Lh91ps7JVkcAotBryeTX
5HOFPNyzyTlO8c39lkN8XNKosQE9NNJBOl3QX78GRjL0beE5fjO13huoE1G7HhH+
UVx8GQCpYgR9mPIT+8G+EMhPP8aWuNlKviiz6jR/r02AxFXR8vcalVPB8j7okeSl
c1STFbqc5DUKFfRX4fdi+COZCjPaW9Q11lysyvobgd3jPac/KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPt6ROhoYzlKE2An+XpBaHVmNbUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGViZTdhOTgtNjNjNy0z
ZDVmLThlMmUtYjdjYzRkZjc2ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErf9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEv2QbrUUGdfYu6+ZtAWs0Ae3aFlB7+hzO5F0dLvu5c9VLT6yxqFjph
fO4HCWcN4NS832SLS+RRrDbRpJfpQpd7C3P/IS79S2oNNm/08Di4Jm24QH2wy+HM
yB3Rf045v0oMavqyqh0A6TxfeR+wq1PQ12SKCRWBL7YJ2mKVnJF+BZJ0bI7D2zI/
fVjYT86ulOUxbl2cJT1mVUKRGyVT3TcBThVwyrRvkDBOzwDFTWII97iNklWd8PUe
POaE9k+yuRzz7UfThwUyTgsAPUuhvfgBMlAtLaTsrE9cTRSSmEsZ08Rd+i7Efzqx
Rn9qB4nekf/vW8kqwN+U/tSWsQUe1YE=
-----END CERTIFICATE-----
Generated at Sat May 10 14:40:07 2025 by rpki-client