Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24d3a889-8db2-3285-baea-046ea6a32ab4.roa
File: 24d3a889-8db2-3285-baea-046ea6a32ab4.roa (raw, json)
Hash identifier: AGtCfTVf/d9GrrjECoyzzUkjKNh5qRAdXiZjw4+RYKo=
Subject key identifier: 75:5D:F7:5C:FA:DF:94:2A:09:07:58:21:F7:7F:2A:F2:E2:CE:E4:F1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A284DA5AB5ACD4C774BA440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24d3a889-8db2-3285-baea-046ea6a32ab4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 209.85.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:28:4d:a5:ab:5a:cd:4c:77:4b:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=680a0e12-e702-4932-864a-560ee3e155e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:19:43:f1:be:56:df:2d:b6:5c:00:25:75:
e1:35:c2:22:8e:92:24:01:5d:e6:b3:8a:ff:f6:ae:
18:54:84:46:97:ef:bc:b6:5e:5b:30:78:c3:db:3a:
4b:a8:ea:36:cc:c4:65:a4:be:87:5b:07:c8:5f:af:
66:67:ad:18:2d:50:44:17:c3:a0:80:6c:06:d2:c0:
6c:ab:14:a3:85:7f:1b:99:63:7b:7b:c5:ef:28:c5:
74:fd:c3:11:57:e2:19:60:df:f4:ef:45:e5:e8:06:
97:c2:e9:6d:c1:8e:a9:b5:28:cb:db:f8:d9:60:12:
ae:01:a7:9b:ab:31:0a:97:85:67:a3:a1:ca:76:ed:
3f:c0:8f:5a:89:bf:42:50:ad:36:fe:71:80:11:5a:
bc:9d:78:9f:95:fb:90:d4:c5:64:1e:6a:c8:ef:29:
6d:a7:14:2a:e9:cb:dd:b8:b2:66:3d:a6:be:cf:f3:
92:3c:57:5c:00:37:dc:bc:e5:f7:57:d5:1f:9f:dd:
4f:2f:51:52:d5:11:95:f1:49:b3:00:84:b5:76:92:
57:1a:e3:45:d0:76:b8:d4:06:7f:f7:d0:2f:5e:42:
48:01:7c:e7:a1:6b:cd:d9:21:3d:be:ad:be:ac:d4:
96:e5:07:d0:07:65:f2:6b:55:3f:76:f2:51:ba:8d:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:F7:5C:FA:DF:94:2A:09:07:58:21:F7:7F:2A:F2:E2:CE:E4:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24d3a889-8db2-3285-baea-046ea6a32ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:b7:5f:ea:77:73:ef:73:9a:54:8e:f8:ab:cf:81:fb:c6:6d:
29:8f:7d:1c:39:8c:06:bc:82:53:99:1a:70:c4:e5:9c:7e:05:
27:30:c1:3a:51:5d:8e:94:02:6a:98:10:8a:5d:01:cb:df:3f:
49:95:d3:50:89:4d:d2:4c:94:05:ed:7c:a3:ed:27:68:75:d1:
6e:b7:dd:15:c9:fc:49:9c:16:f8:28:1e:50:22:21:4d:dc:3c:
d4:fb:7d:b1:92:f4:e0:b2:68:c9:59:97:70:17:d0:2e:65:68:
09:be:f2:72:90:29:02:97:b8:00:cc:e9:82:6d:79:76:a5:31:
65:e6:e5:35:bb:8c:f9:3e:b2:23:4e:8a:91:71:f1:68:f0:4f:
58:bd:e0:19:42:8e:f3:4a:0f:97:57:ae:2a:5b:2c:0c:a5:0e:
ce:64:1d:b4:a9:7a:dd:c2:18:d4:28:a4:d2:08:21:40:3a:4f:
72:cb:34:12:3e:06:9d:b7:a1:bc:2b:bf:72:36:95:89:9a:ba:
bd:e5:e9:8e:c5:3e:69:49:b4:d5:23:bb:68:b3:12:22:fa:26:
79:4b:c3:8c:46:77:3a:1c:d7:e6:4d:d7:2a:2d:ce:86:50:c0:
2a:17:1a:c6:b4:c1:52:8b:3a:11:bf:2d:30:be:bf:0a:0d:d4:
27:ba:c9:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKKE2lq1rNTHdLpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjgwYTBlMTItZTcwMi00OTMyLTg2NGEtNTYwZWUzZTE1NWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tYZQ/G+Vt8ttlwAJXXhNcIijpIkAV3ms4r/
9q4YVIRGl++8tl5bMHjD2zpLqOo2zMRlpL6HWwfIX69mZ60YLVBEF8OggGwG0sBs
qxSjhX8bmWN7e8XvKMV0/cMRV+IZYN/070Xl6AaXwultwY6ptSjL2/jZYBKuAaeb
qzEKl4Vno6HKdu0/wI9aib9CUK02/nGAEVq8nXiflfuQ1MVkHmrI7yltpxQq6cvd
uLJmPaa+z/OSPFdcADfcvOX3V9Ufn91PL1FS1RGV8UmzAIS1dpJXGuNF0Ha41AZ/
99AvXkJIAXznoWvN2SE9vq2+rNSW5QfQB2Xya1U/dvJRuo1WBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVd91z635QqCQdYIfd/KvLizuTxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjRkM2E4ODktOGRiMi0z
Mjg1LWJhZWEtMDQ2ZWE2YTMyYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+3X+p3c+9zmlSO+KvPgfvGbSmPfRw5jAa8glOZGnDE5Zx+BScwwTpR
XY6UAmqYEIpdAcvfP0mV01CJTdJMlAXtfKPtJ2h10W633RXJ/EmcFvgoHlAiIU3c
PNT7fbGS9OCyaMlZl3AX0C5laAm+8nKQKQKXuADM6YJteXalMWXm5TW7jPk+siNO
ipFx8WjwT1i94BlCjvNKD5dXripbLAylDs5kHbSpet3CGNQopNIIIUA6T3LLNBI+
Bp23obwrv3I2lYmaur3l6Y7FPmlJtNUju2izEiL6JnlLw4xGdzoc1+ZN1yotzoZQ
wCoXGsa0wVKLOhG/LTC+vwoN1Ce6ycs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:33 2025 by rpki-client