Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e89b1f06-36fc-3e84-913e-fd5b019e3597.roa
File: e89b1f06-36fc-3e84-913e-fd5b019e3597.roa (raw, json)
Hash identifier: vkI8P4MtOyA/+S/fDdxovci9ZEaHmNBznNr/b6Rhq+c=
Subject key identifier: 07:D3:A5:A1:F8:7F:3B:C9:A3:F7:48:A3:2E:24:50:19:70:09:3E:CA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584309F0004ED18985BBE8905540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e89b1f06-36fc-3e84-913e-fd5b019e3597.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 130.211.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:00:4e:d1:89:85:bb:e8:90:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4941044c-ac85-4146-9123-52f446d58298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f8:e6:e9:0f:b2:08:38:8d:a4:21:37:d8:84:
dd:b8:84:8d:4c:5c:de:2a:3b:a4:8e:ea:1b:57:1e:
e1:8c:58:9d:91:37:5e:c1:d5:72:48:8e:03:3d:38:
33:f3:43:18:9e:3f:fd:b9:2f:76:64:d5:11:6b:61:
e3:a6:c9:6e:f5:28:6b:f9:6a:2a:d1:eb:e9:5b:64:
e7:c1:b3:9d:ad:5e:9d:6b:4e:6d:17:af:de:1d:d3:
59:7b:4f:8d:64:ec:d0:f5:35:20:09:43:32:7a:5b:
43:aa:38:c5:c8:56:0a:69:f6:e2:29:23:1c:a8:93:
48:dd:3f:21:9e:54:49:c3:8b:a4:d9:c8:f0:16:b9:
91:02:e8:24:07:47:e4:49:49:66:38:a8:4a:11:ac:
8b:f9:2a:4c:d4:6e:e5:af:03:3e:ff:25:c1:b5:bd:
ff:b1:43:d9:4e:98:94:12:e7:2c:89:a6:3a:40:ea:
3c:34:2b:ef:5f:4b:43:7b:3f:90:c5:0e:b5:82:d8:
98:55:87:e1:a3:da:6c:1c:8f:c5:70:1d:bf:ce:7a:
d7:c0:54:20:d4:29:ab:fb:36:80:e8:0c:90:11:d5:
3b:71:42:dc:97:11:43:4d:1d:49:55:d8:c6:28:1a:
71:9d:96:f5:24:0b:74:b5:5a:17:b2:2c:d7:d5:1e:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:A5:A1:F8:7F:3B:C9:A3:F7:48:A3:2E:24:50:19:70:09:3E:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e89b1f06-36fc-3e84-913e-fd5b019e3597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.211.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:3a:82:4d:84:24:24:1c:6b:65:80:9a:98:66:2e:5c:78:71:
53:d2:95:29:df:2c:5b:ce:fd:b0:81:35:79:6b:a5:af:07:a0:
97:fe:49:dd:17:3b:4d:be:8c:61:3a:21:b9:ef:6f:16:7c:76:
6b:bf:cd:98:03:5a:f3:19:56:98:d8:12:7c:e8:63:5a:06:04:
0c:3b:94:21:b1:c5:28:ee:18:5d:2a:c5:a4:f4:bf:ea:e7:cb:
71:5d:4f:d3:42:a8:0a:72:74:f8:48:a9:90:eb:71:aa:11:d8:
02:30:14:b6:65:6f:b6:a8:dc:4f:68:84:7d:63:4d:86:a0:ff:
88:5b:f5:7d:8f:e6:7b:6e:fb:62:2f:10:64:8a:df:e0:a6:e7:
e2:60:bf:5e:0e:4a:11:dd:51:11:02:bc:55:03:2a:54:c2:42:
27:4d:94:d3:72:61:c8:85:58:fa:51:f9:74:3c:d2:c7:5a:a5:
83:dd:51:fc:ed:ed:3f:1f:75:29:68:dc:ff:d9:21:fd:74:ea:
02:58:2f:e0:fb:b1:3a:27:e4:de:d2:ec:4b:7a:c2:86:a1:57:
91:c6:fc:5c:6a:72:77:6d:04:1c:90:d8:43:a6:39:85:ad:0a:
03:9e:68:21:49:5e:2e:47:7f:2c:8e:0a:24:63:cf:a8:16:e7:
32:e6:16:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ8ABO0YmFu+iQVUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDk0MTA0NGMtYWM4NS00MTQ2LTkxMjMtNTJmNDQ2ZDU4Mjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/jm6Q+yCDiNpCE32ITduISNTFzeKjukjuob
Vx7hjFidkTdewdVySI4DPTgz80MYnj/9uS92ZNURa2Hjpslu9Shr+Woq0evpW2Tn
wbOdrV6da05tF6/eHdNZe0+NZOzQ9TUgCUMyeltDqjjFyFYKafbiKSMcqJNI3T8h
nlRJw4uk2cjwFrmRAugkB0fkSUlmOKhKEayL+SpM1G7lrwM+/yXBtb3/sUPZTpiU
EucsiaY6QOo8NCvvX0tDez+QxQ61gtiYVYfho9psHI/FcB2/znrXwFQg1Cmr+zaA
6AyQEdU7cULclxFDTR1JVdjGKBpxnZb1JAt0tVoXsizX1R4ZpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfTpaH4fzvJo/dIoy4kUBlwCT7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTg5YjFmMDYtMzZmYy0z
ZTg0LTkxM2UtZmQ1YjAxOWUzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgtMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFo6gk2EJCQca2WAmphmLlx4cVPSlSnfLFvO/bCBNXlrpa8HoJf+Sd0X
O02+jGE6IbnvbxZ8dmu/zZgDWvMZVpjYEnzoY1oGBAw7lCGxxSjuGF0qxaT0v+rn
y3FdT9NCqApydPhIqZDrcaoR2AIwFLZlb7ao3E9ohH1jTYag/4hb9X2P5ntu+2Iv
EGSK3+Cm5+Jgv14OShHdURECvFUDKlTCQidNlNNyYciFWPpR+XQ80sdapYPdUfzt
7T8fdSlo3P/ZIf106gJYL+D7sTon5N7S7Et6woahV5HG/FxqcndtBByQ2EOmOYWt
CgOeaCFJXi5HfyyOCiRjz6gW5zLmFoo=
-----END CERTIFICATE-----
Generated at Sat May 10 14:48:46 2025 by rpki-client