Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2c108a3-f2f5-32dd-9a1d-1d2519c67f5c.roa
File: c2c108a3-f2f5-32dd-9a1d-1d2519c67f5c.roa (raw, json)
Hash identifier: nI80X3BcTsYhpRKYnh2Ek0wO7vwQjKpn8Ttv82Vdv5s=
Subject key identifier: 23:97:41:21:35:2E:86:52:D0:E5:6F:49:8E:40:93:6F:96:94:34:E2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD363C2CC0553BAE1B93500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2c108a3-f2f5-32dd-9a1d-1d2519c67f5c.roa
Signing time: Tue 26 Sep 2023 21:00:53 +0000
ROA not before: Tue 26 Sep 2023 21:00:53 +0000
ROA not after: Mon 25 Dec 2023 22:00:53 +0000
asID: 397236
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:63:c2:cc:05:53:ba:e1:b9:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:53 2023 GMT
Not After : Dec 25 22:00:53 2023 GMT
Subject: CN=ece64603-ea9d-49f6-bea4-b6468e44eb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:dd:f8:32:96:59:24:ba:4c:91:74:e8:f0:
85:83:0f:f7:fc:43:c1:18:6b:5a:37:03:83:df:ff:
45:56:bd:df:e6:40:a8:fc:3f:d4:c8:cd:b4:6e:eb:
07:98:c3:19:04:91:df:3b:60:7d:39:54:be:f9:9e:
a2:40:6f:df:dd:a2:61:02:f8:f2:43:e4:e5:dd:77:
01:57:78:11:52:51:bd:15:f1:91:a0:95:0e:dc:10:
6f:2c:dc:a7:31:c6:ba:58:be:c8:1f:fd:52:72:44:
1a:41:31:bd:10:e1:d8:16:39:60:9e:86:7d:c5:cf:
4e:19:69:25:ba:af:7d:40:60:13:62:e2:bf:12:7e:
fa:33:55:5d:54:37:38:1f:56:a8:bc:12:a9:f4:e0:
12:2d:47:87:2a:48:da:be:60:24:21:d3:f4:41:ba:
d0:07:ac:6b:0f:b4:22:7c:1f:b6:9d:77:83:58:4e:
f3:14:73:be:5f:54:23:c4:37:cd:aa:11:28:dd:7e:
c3:04:a8:64:d3:91:f3:2a:11:75:da:9c:fd:79:21:
91:af:1a:3b:8c:93:fd:52:c9:b8:0e:55:e9:65:cc:
e2:f8:df:12:e4:33:b3:a6:e3:e5:95:3d:5f:29:29:
d6:6a:0e:1c:8e:ff:d6:b5:88:a6:fe:30:0e:c9:92:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:41:21:35:2E:86:52:D0:E5:6F:49:8E:40:93:6F:96:94:34:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2c108a3-f2f5-32dd-9a1d-1d2519c67f5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:91:c7:68:b9:02:be:23:f5:ae:9c:e4:cb:3f:60:e8:47:04:
bb:30:8f:3a:c8:12:33:8f:c0:d8:18:42:72:fe:f8:ab:c7:54:
18:23:86:4a:bb:c5:58:69:35:6d:aa:31:dd:4b:33:70:fe:00:
c2:4a:f6:0c:5e:55:78:14:96:6e:5e:5c:66:72:ac:e8:ba:35:
bc:0c:a9:f2:cd:19:b6:ba:1b:6c:68:53:c7:cb:e9:4f:79:63:
3c:49:77:fe:16:66:fa:66:a2:95:fd:5b:3b:73:6f:63:45:ee:
9d:d4:0e:0f:6c:48:00:3c:ec:1f:c7:2c:7c:9c:38:e1:42:38:
99:32:92:cc:cc:88:db:b0:7a:a9:59:c9:4a:e3:76:53:bf:1d:
05:18:1b:c3:56:b9:3e:80:a4:1d:23:b1:05:81:f8:d2:50:f8:
fe:23:08:0b:6c:e2:ea:51:f9:9b:87:15:38:d4:19:d9:90:f8:
81:a1:d8:43:db:da:d4:2f:c2:ad:0e:d3:37:02:90:84:c5:fb:
6d:ef:b1:ad:a7:b9:2a:6e:91:3a:02:7b:24:8e:93:3a:c7:71:
62:fc:18:e0:84:9e:7a:bc:6c:28:33:71:fc:1f:d7:7d:9f:63:
2e:1f:a1:36:e0:20:be:ca:e5:23:6f:ef:f9:3d:00:46:5f:4c:
9b:a8:76:93
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWENa02PCzAVTuuG5NQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTIzMDkyNjIxMDA1M1oXDTIzMTIyNTIyMDA1M1owLzEtMCsGA1UEAxMk
ZWNlNjQ2MDMtZWE5ZC00OWY2LWJlYTQtYjY0NjhlNDRlYjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MPd+DKWWSS6TJF06PCFgw/3/EPBGGtaNwOD
3/9FVr3f5kCo/D/UyM20busHmMMZBJHfO2B9OVS++Z6iQG/f3aJhAvjyQ+Tl3XcB
V3gRUlG9FfGRoJUO3BBvLNynMca6WL7IH/1SckQaQTG9EOHYFjlgnoZ9xc9OGWkl
uq99QGATYuK/En76M1VdVDc4H1aovBKp9OASLUeHKkjavmAkIdP0QbrQB6xrD7Qi
fB+2nXeDWE7zFHO+X1QjxDfNqhEo3X7DBKhk05HzKhF12pz9eSGRrxo7jJP9Usm4
DlXpZczi+N8S5DOzpuPllT1fKSnWag4cjv/WtYim/jAOyZLXoQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCOXQSE1LoZS0OVvSY5Ak2+WlDTiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzJjMTA4YTMtZjJmNS0z
MmRkLTlhMWQtMWQyNTE5YzY3ZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnJo6AwQA
nJq/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABqRx2i5Ar4j9a6c5Ms/YOhHBLswjzrIEjOPwNgYQnL++KvH
VBgjhkq7xVhpNW2qMd1LM3D+AMJK9gxeVXgUlm5eXGZyrOi6NbwMqfLNGba6G2xo
U8fL6U95YzxJd/4WZvpmopX9Wztzb2NF7p3UDg9sSAA87B/HLHycOOFCOJkykszM
iNuweqlZyUrjdlO/HQUYG8NWuT6ApB0jsQWB+NJQ+P4jCAts4upR+ZuHFTjUGdmQ
+IGh2EPb2tQvwq0O0zcCkITF+23vsa2nuSpukToCeySOkzrHcWL8GOCEnnq8bCgz
cfwf132fYy4foTbgIL7K5SNv7/k9AEZfTJuodpM=
-----END CERTIFICATE-----
Generated at Fri May 9 03:33:34 2025 by rpki-client