Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baab7ddb-22f1-3475-a2a4-ca7644486ed7.roa
File: baab7ddb-22f1-3475-a2a4-ca7644486ed7.roa (raw, json)
Hash identifier: SeTUETjbIL33gT2sRWaEb/RtmoZ2bphH5koL2K0v70U=
Subject key identifier: C2:61:7E:51:DB:ED:20:09:ED:85:03:FB:75:20:02:FC:79:71:09:A5
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F3DB8063A60E8620003FA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baab7ddb-22f1-3475-a2a4-ca7644486ed7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 192.158.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:db:80:63:a6:0e:86:20:00:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0896de38-98b3-4d10-942b-3a834bed2b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:a6:2f:bd:73:a3:94:a5:06:95:10:dc:a2:
c5:50:b0:f5:2f:20:be:1a:2d:91:0f:03:93:db:63:
87:fd:ca:7f:d5:f7:f2:aa:51:1d:f2:3f:5e:2d:98:
31:ee:2a:f8:7b:c5:78:26:8c:d4:2b:5b:b7:34:18:
69:b4:83:c7:da:3c:3d:2f:41:7c:80:7a:ff:49:ed:
dc:f3:80:f6:3b:df:e9:08:f8:da:3e:01:5f:f2:d2:
0a:64:67:07:86:fe:51:54:8c:c7:03:7d:36:a7:7f:
26:46:48:67:55:a8:4e:20:a6:ba:e4:3d:e4:9f:c8:
5e:15:fe:41:69:24:9b:28:20:12:05:8c:be:b9:26:
a8:82:78:f9:db:d1:cc:02:f7:5d:73:ec:dc:9a:67:
7a:60:ec:48:7b:22:12:7e:26:f4:a2:6d:fb:2f:90:
32:20:48:3c:b5:73:87:86:99:c9:e4:2b:b6:c5:83:
10:e0:2d:d3:46:71:d7:6c:6d:06:ce:5f:f4:ec:9f:
22:1d:04:4a:66:6f:a4:dc:f9:4b:ab:8f:73:e8:e7:
41:1c:e1:30:df:f0:be:2e:00:02:ef:ef:36:63:76:
96:f9:86:3c:40:74:db:0c:31:3e:1f:75:1d:a0:9b:
48:75:24:43:41:64:82:0a:ee:b4:2b:4b:2a:1f:90:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:7E:51:DB:ED:20:09:ED:85:03:FB:75:20:02:FC:79:71:09:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baab7ddb-22f1-3475-a2a4-ca7644486ed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:73:8e:78:27:18:68:55:ce:33:bf:2e:94:01:aa:65:3e:43:
fa:8a:61:42:28:e3:fe:03:5f:db:c8:82:d3:8d:7a:55:d1:7c:
d4:c8:07:47:e8:f2:30:8a:bb:09:cd:48:6c:45:03:e5:bd:83:
6b:e9:85:ae:91:74:b7:4c:c5:f8:be:07:90:62:9b:62:7f:9e:
c5:7c:1f:2f:b2:8a:3b:06:06:32:48:48:b9:ec:88:ba:58:f9:
1f:17:80:4b:8c:26:13:67:b9:c8:30:5c:10:6a:21:44:dc:ec:
31:e4:82:9f:a0:19:d7:07:7a:ce:63:bf:9c:55:14:67:a3:14:
23:80:a2:b4:42:00:6d:a1:10:ce:d5:11:13:c7:76:a9:d4:60:
2a:3e:70:62:44:14:79:b0:83:fb:4f:18:9c:02:45:68:86:84:
63:7a:12:d1:98:19:99:84:77:73:39:93:24:c9:aa:12:3d:f9:
11:5e:bb:42:e7:b7:94:88:69:2b:34:a3:ac:d9:8c:2a:3f:94:
2c:e2:ab:32:69:33:63:61:25:1b:5e:21:38:0e:d8:f3:0b:d3:
02:e1:78:74:c2:8b:f4:9b:19:da:8f:7a:0a:34:c3:00:15:aa:
0b:53:9f:15:9f:da:00:83:23:c9:55:58:2f:a4:bb:8a:8e:42:
94:4f:31:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ89uAY6YOhiAAP6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDg5NmRlMzgtOThiMy00ZDEwLTk0MmItM2E4MzRiZWQyYjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV6mL71zo5SlBpUQ3KLFULD1LyC+Gi2RDwOT
22OH/cp/1ffyqlEd8j9eLZgx7ir4e8V4JozUK1u3NBhptIPH2jw9L0F8gHr/Se3c
84D2O9/pCPjaPgFf8tIKZGcHhv5RVIzHA302p38mRkhnVahOIKa65D3kn8heFf5B
aSSbKCASBYy+uSaognj529HMAvddc+zcmmd6YOxIeyISfib0om37L5AyIEg8tXOH
hpnJ5Cu2xYMQ4C3TRnHXbG0Gzl/07J8iHQRKZm+k3PlLq49z6OdBHOEw3/C+LgAC
7+82Y3aW+YY8QHTbDDE+H3UdoJtIdSRDQWSCCu60K0sqH5AK/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJhflHb7SAJ7YUD+3UgAvx5cQmlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmFhYjdkZGItMjJmMS0z
NDc1LWEyYTQtY2E3NjQ0NDg2ZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9zjngnGGhVzjO/LpQBqmU+Q/qKYUIo4/4DX9vIgtONelXRfNTIB0fo
8jCKuwnNSGxFA+W9g2vpha6RdLdMxfi+B5Bim2J/nsV8Hy+yijsGBjJISLnsiLpY
+R8XgEuMJhNnucgwXBBqIUTc7DHkgp+gGdcHes5jv5xVFGejFCOAorRCAG2hEM7V
ERPHdqnUYCo+cGJEFHmwg/tPGJwCRWiGhGN6EtGYGZmEd3M5kyTJqhI9+RFeu0Ln
t5SIaSs0o6zZjCo/lCziqzJpM2NhJRteITgO2PML0wLheHTCi/SbGdqPego0wwAV
qgtTnxWf2gCDI8lVWC+ku4qOQpRPMcg=
-----END CERTIFICATE-----
Generated at Sat May 10 13:40:38 2025 by rpki-client