Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/02a3fb02-ba24-3829-8426-931237813761.roa
File: 02a3fb02-ba24-3829-8426-931237813761.roa (raw, json)
Hash identifier: MupUYN/bw7e9xmqSFoGmcskqRwDb7KHwvQVnECI8Vek=
Subject key identifier: 14:79:43:5E:82:D3:0A:7D:64:87:10:D3:84:98:82:96:C2:C5:8C:BD
Certificate issuer: /CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
Certificate serial: 010D0C9F4328584890B4F44B4B44A2F9AF5FA580
Authority key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/02a3fb02-ba24-3829-8426-931237813761.roa
Signing time: Thu 16 Jan 2025 16:07:53 +0000
ROA not before: Thu 16 Jan 2025 16:07:53 +0000
ROA not after: Wed 16 Apr 2025 15:07:53 +0000
asID: 30011
IP address blocks: 162.118.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:b4:f4:4b:4b:44:a2:f9:af:5f:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
Validity
Not Before: Jan 16 16:07:53 2025 GMT
Not After : Apr 16 15:07:53 2025 GMT
Subject: CN=a708a12d-4e4e-49e6-a1fe-7c05452246de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:49:b3:e4:c5:5f:fa:10:60:13:2f:86:f0:
a4:a7:73:02:5e:a5:a5:62:98:99:67:fa:2d:56:14:
62:1d:2d:5a:04:54:0f:93:4f:c3:46:28:a8:18:20:
a1:c3:94:d0:eb:35:e0:73:77:0a:fe:18:91:d4:cd:
55:6a:bd:fd:fb:80:5c:66:ff:d0:a0:63:f3:82:86:
9c:d4:e3:1a:e7:15:d5:ed:8d:19:21:32:ee:a5:b0:
f7:03:b9:8b:84:92:d8:29:d6:d0:c0:f0:96:0e:90:
cc:8b:31:8a:41:98:ad:86:6f:9d:32:19:a2:38:60:
da:af:d4:60:06:ac:5d:7f:2d:e4:81:c0:ac:93:01:
81:fc:cd:3c:14:3a:7d:02:09:74:6a:ef:74:97:4a:
1f:41:2f:06:2a:64:53:c6:c2:82:44:31:8a:91:4b:
31:70:c9:e9:11:66:01:76:94:05:14:28:cc:b5:d5:
f1:7d:65:5c:42:3a:65:15:c4:37:a3:29:ab:bd:d0:
77:13:d5:40:b8:dc:3b:98:e3:b1:7d:e9:4f:30:f8:
39:34:f3:53:e7:e3:4e:e4:60:cc:f0:99:68:8b:be:
b1:f2:a0:45:97:b6:c8:62:b0:75:e9:bc:c4:1c:bf:
02:e7:93:c4:1b:2b:4f:22:61:b4:14:c1:b1:da:c5:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:43:5E:82:D3:0A:7D:64:87:10:D3:84:98:82:96:C2:C5:8C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/02a3fb02-ba24-3829-8426-931237813761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl
X509v3 Authority Key Identifier:
keyid:32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.118.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:e5:6d:b2:66:43:8e:0d:09:e2:54:c8:50:aa:35:22:e2:ce:
88:f9:d3:ae:fa:10:fc:67:bb:df:60:35:93:14:fe:e9:92:22:
a2:c0:b3:67:f4:2c:6e:a8:c4:a2:83:12:bd:76:4d:45:72:2f:
f0:bc:f4:10:49:aa:f0:ca:79:58:f1:b8:2f:6c:45:8c:3a:0d:
22:17:70:db:de:d5:2e:69:7b:f5:88:1b:a6:32:80:8d:ac:d5:
c2:ad:23:56:64:5d:e3:68:70:55:a5:fa:19:3a:6a:ca:d9:93:
bd:0c:3c:44:c1:1e:b3:18:93:85:bc:b1:56:88:7c:39:1f:aa:
bd:58:b0:9f:8f:7c:e4:2f:1e:5a:6c:dd:41:96:b8:ed:60:f3:
b3:60:e6:7c:bd:f0:f4:79:62:f2:0d:70:54:f0:23:8c:6b:48:
d4:c5:ef:0e:d3:38:a1:31:75:e6:95:26:9f:2b:64:d6:3b:11:
0e:7a:38:11:d7:ac:2f:0d:50:10:ea:b8:35:98:f8:4f:99:86:
4f:e6:fd:d3:37:00:10:8d:7a:00:bf:b4:51:1a:0f:74:76:a5:
56:16:4f:b0:97:e0:5d:64:ca:f7:11:c9:bb:af:8b:b7:f3:41:
a4:f9:ae:47:e0:7e:a8:26:5e:39:53:de:2e:06:18:79:cf:d6:
a5:fd:16:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQtPRLS0Si+a9fpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE4NDQzZDEtNWM3Yy00NGViLTgyMmMtNjJhMWExNDIz
YTJiMB4XDTI1MDExNjE2MDc1M1oXDTI1MDQxNjE1MDc1M1owLzEtMCsGA1UEAxMk
YTcwOGExMmQtNGU0ZS00OWU2LWExZmUtN2MwNTQ1MjI0NmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd5Js+TFX/oQYBMvhvCkp3MCXqWlYpiZZ/ot
VhRiHS1aBFQPk0/DRiioGCChw5TQ6zXgc3cK/hiR1M1Var39+4BcZv/QoGPzgoac
1OMa5xXV7Y0ZITLupbD3A7mLhJLYKdbQwPCWDpDMizGKQZithm+dMhmiOGDar9Rg
Bqxdfy3kgcCskwGB/M08FDp9Agl0au90l0ofQS8GKmRTxsKCRDGKkUsxcMnpEWYB
dpQFFCjMtdXxfWVcQjplFcQ3oymrvdB3E9VAuNw7mOOxfelPMPg5NPNT5+NO5GDM
8Jloi76x8qBFl7bIYrB16bzEHL8C55PEGytPImG0FMGx2sWDPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBR5Q16C0wp9ZIcQ04SYgpbCxYy9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YTg0
NDNkMS01YzdjLTQ0ZWItODIyYy02MmExYTE0MjNhMmIvMDJhM2ZiMDItYmEyNC0z
ODI5LTg0MjYtOTMxMjM3ODEzNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGE4NDQzZDEtNWM3Yy00NGViLTgy
MmMtNjJhMWExNDIzYTJiLzhhODQ0M2QxLTVjN2MtNDRlYi04MjJjLTYyYTFhMTQy
M2EyYi5jcmwwHwYDVR0jBBgwFoAUMsuAQwPZabYdEU2LzWE9ljUgC8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84YTg0NDNkMS01YzdjLTQ0ZWItODIyYy02MmEx
YTE0MjNhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEonYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADflbbJmQ44NCeJUyFCqNSLizoj50676EPxnu99gNZMU/umSIqLAs2f0
LG6oxKKDEr12TUVyL/C89BBJqvDKeVjxuC9sRYw6DSIXcNve1S5pe/WIG6YygI2s
1cKtI1ZkXeNocFWl+hk6asrZk70MPETBHrMYk4W8sVaIfDkfqr1YsJ+PfOQvHlps
3UGWuO1g87Ng5ny98PR5YvINcFTwI4xrSNTF7w7TOKExdeaVJp8rZNY7EQ56OBHX
rC8NUBDquDWY+E+Zhk/m/dM3ABCNegC/tFEaD3R2pVYWT7CX4F1kyvcRybuvi7fz
QaT5rkfgfqgmXjlT3i4GGHnP1qX9FsI=
-----END CERTIFICATE-----
Generated at Sun May 11 01:48:28 2025 by rpki-client