Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce879db9-f88c-3b58-ae1c-528851a3946a.roa
File: ce879db9-f88c-3b58-ae1c-528851a3946a.roa (raw, json)
Hash identifier: EYrNcqEHVGAlnmFlu0dJv+TJ9DKx0Z6xFhIR9be4CxE=
Subject key identifier: 99:B3:A3:BC:D7:4C:84:E6:C7:5D:1B:69:F1:8A:DC:EE:B3:46:0E:3B
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583B561846A614A70180CC740D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce879db9-f88c-3b58-ae1c-528851a3946a.roa
Signing time: Tue 21 Sep 2021 04:00:00 +0000
ROA not before: Tue 21 Sep 2021 04:00:00 +0000
ROA not after: Sun 24 Dec 2023 05:00:00 +0000
asID: 396982
IP address blocks: 130.211.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:56:18:46:a6:14:a7:01:80:cc:74:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Sep 21 04:00:00 2021 GMT
Not After : Dec 24 05:00:00 2023 GMT
Subject: CN=0761e7c0-8fa8-4be2-86fe-48b91d463e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:af:3c:20:12:cd:3a:f6:8d:6f:b3:01:1c:
c8:c3:e4:c3:61:ba:db:f5:ae:30:d3:0c:37:63:01:
3a:90:2c:8e:03:49:c8:c7:c1:57:1e:ac:d1:01:92:
69:78:76:c2:f2:eb:bc:5b:46:a6:ac:0c:18:13:d2:
c0:c6:60:1a:18:bf:29:f2:8c:b7:2f:f3:90:ec:2c:
92:65:eb:c3:ea:f4:03:be:49:b1:54:1d:e2:70:68:
ec:e8:eb:d7:d2:9b:eb:48:35:8b:f1:50:4d:09:17:
bf:9e:ae:f5:b8:30:94:2c:84:1b:07:34:81:1a:f6:
83:ec:91:a1:03:3c:39:cd:40:34:18:35:00:70:e3:
d2:10:92:1d:bf:f3:77:a9:4d:07:96:28:ed:7f:a7:
7d:9a:36:dd:73:2b:52:1a:40:a0:6d:82:f9:77:e3:
42:61:9a:20:f4:fe:13:89:9c:e6:dc:05:9a:b0:60:
65:6c:30:13:b3:35:bb:56:61:e0:fb:cf:1c:85:a2:
f8:05:13:9e:2b:a4:e8:61:61:34:dd:bc:4a:c2:d3:
e6:48:25:0e:b7:87:09:1e:fe:dc:2d:df:1b:c1:0b:
bf:2c:76:90:00:0a:ff:df:89:ee:43:c4:1f:89:ef:
da:41:25:fc:47:23:f8:04:62:83:c7:37:ef:38:4e:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B3:A3:BC:D7:4C:84:E6:C7:5D:1B:69:F1:8A:DC:EE:B3:46:0E:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce879db9-f88c-3b58-ae1c-528851a3946a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.211.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:d2:1f:90:1f:cd:92:75:4c:b0:7e:f0:21:1b:41:69:b9:89:
a2:18:be:82:e8:df:07:02:80:f1:94:a4:72:5d:34:6d:da:81:
76:25:be:83:72:14:8e:c8:23:0c:ad:c9:57:3c:ad:1c:46:af:
15:b2:d8:2d:5c:e5:da:ad:64:1d:ea:dc:58:ef:ab:9d:80:d4:
fb:de:28:a7:36:6d:36:6a:7b:ea:c3:72:7e:e3:59:ab:94:8d:
14:c3:08:14:23:3e:78:86:4f:95:43:dd:64:ae:ca:14:21:b2:
39:5f:23:fe:70:b3:d9:ec:99:9c:4d:4b:97:79:cd:57:02:49:
44:8a:d9:36:6a:a2:52:2a:9b:b7:f8:ae:81:ab:ba:ab:69:1d:
cb:2d:db:56:84:8e:0a:da:c1:e3:df:dd:91:8a:75:13:97:47:
8c:28:d3:11:9f:68:72:85:83:5f:33:e2:43:48:58:d0:38:16:
a7:ac:80:1a:25:a6:ca:04:3b:41:d9:4f:e4:8a:4f:44:39:29:
49:34:ac:99:39:c1:39:05:10:47:41:87:53:66:a0:c0:f7:92:
20:64:2a:ab:ba:ba:38:1b:ee:27:c5:3e:69:ab:de:d4:77:ae:
36:0f:dc:00:e4:5a:81:00:c0:f6:73:54:75:4c:e5:d5:57:cf:
a0:17:20:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDtWGEamFKcBgMx0DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDkyMTA0MDAwMFoXDTIzMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
MDc2MWU3YzAtOGZhOC00YmUyLTg2ZmUtNDhiOTFkNDYzZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdmvPCASzTr2jW+zARzIw+TDYbrb9a4w0ww3
YwE6kCyOA0nIx8FXHqzRAZJpeHbC8uu8W0amrAwYE9LAxmAaGL8p8oy3L/OQ7CyS
ZevD6vQDvkmxVB3icGjs6OvX0pvrSDWL8VBNCRe/nq71uDCULIQbBzSBGvaD7JGh
Azw5zUA0GDUAcOPSEJIdv/N3qU0Hlijtf6d9mjbdcytSGkCgbYL5d+NCYZog9P4T
iZzm3AWasGBlbDATszW7VmHg+88chaL4BROeK6ToYWE03bxKwtPmSCUOt4cJHv7c
Ld8bwQu/LHaQAAr/34nuQ8Qfie/aQSX8RyP4BGKDxzfvOE7wHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmzo7zXTITmx10bafGK3O6zRg47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2U4NzlkYjktZjg4Yy0z
YjU4LWFlMWMtNTI4ODUxYTM5NDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgtMIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnSH5AfzZJ1TLB+8CEbQWm5iaIYvoLo3wcCgPGUpHJdNG3agXYlvoNy
FI7IIwytyVc8rRxGrxWy2C1c5dqtZB3q3Fjvq52A1PveKKc2bTZqe+rDcn7jWauU
jRTDCBQjPniGT5VD3WSuyhQhsjlfI/5ws9nsmZxNS5d5zVcCSUSK2TZqolIqm7f4
roGruqtpHcst21aEjgrawePf3ZGKdROXR4wo0xGfaHKFg18z4kNIWNA4FqesgBol
psoEO0HZT+SKT0Q5KUk0rJk5wTkFEEdBh1NmoMD3kiBkKqu6ujgb7ifFPmmr3tR3
rjYP3ADkWoEAwPZzVHVM5dVXz6AXIAw=
-----END CERTIFICATE-----
Generated at Sat May 10 11:07:56 2025 by rpki-client