Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/bfe1ea33-3491-3d8c-9a5f-31fbe0883b17.roa
File: bfe1ea33-3491-3d8c-9a5f-31fbe0883b17.roa (raw, json)
Hash identifier: AmRAsWhvKbPlmcn5pGsxhHDMZap7ghBDhqma2v5gbd8=
Subject key identifier: 2E:18:44:72:F9:7F:C3:21:CF:CE:67:56:54:18:CD:42:34:2D:C9:C1
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F432858481BC35700AD76FBDA21E4BB00
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/bfe1ea33-3491-3d8c-9a5f-31fbe0883b17.roa
Signing time: Thu 05 Dec 2024 18:47:18 +0000
ROA not before: Thu 05 Dec 2024 18:47:18 +0000
ROA not after: Wed 05 Mar 2025 18:47:18 +0000
asID: 46432
IP address blocks: 208.88.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:c3:57:00:ad:76:fb:da:21:e4:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Dec 5 18:47:18 2024 GMT
Not After : Mar 5 18:47:18 2025 GMT
Subject: CN=a473f8e2-a293-475f-8f9d-cf38e5211121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:c5:90:8b:df:a3:9c:6c:97:fc:fc:f2:41:
4d:4a:07:2a:25:44:76:60:06:ba:c6:41:06:47:73:
26:ed:21:41:c4:90:6b:53:8d:c4:40:f5:9b:6c:e1:
91:53:5b:97:b1:76:11:57:d0:b3:32:24:1c:a8:a8:
9c:42:12:7c:52:15:37:dd:9e:05:48:b6:86:a5:73:
99:06:1d:c9:11:dc:6a:ac:1d:a3:5c:27:cc:54:75:
e3:b4:a3:50:53:71:a5:8e:b0:c7:c2:69:0e:c7:ef:
3b:ee:23:91:ed:99:3c:d6:3d:f0:12:85:8b:27:63:
71:a5:63:23:ff:bb:b3:62:e0:c7:b2:9e:85:2a:a4:
c2:f1:3d:f2:94:b0:0a:f7:69:93:b5:e2:3d:c7:b3:
49:4c:dd:09:30:33:4d:cd:37:43:d9:fc:22:3e:02:
4d:9f:cd:24:12:66:34:59:ab:6f:9f:c3:28:db:3f:
9c:77:4e:0a:12:e8:14:a6:b8:c4:b4:9b:fa:3e:f4:
fc:80:04:6e:e9:32:8c:47:4c:47:b4:c3:85:cd:21:
40:31:f7:3d:ae:c9:90:c1:fd:aa:26:52:28:a5:d2:
11:10:4e:d1:21:76:b1:95:b2:68:ac:d1:c3:9c:fb:
91:47:c3:3e:41:d9:44:c3:4f:c2:32:ec:c2:18:f3:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:18:44:72:F9:7F:C3:21:CF:CE:67:56:54:18:CD:42:34:2D:C9:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/bfe1ea33-3491-3d8c-9a5f-31fbe0883b17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f2:01:a5:27:3a:02:7a:ed:4b:07:03:ee:db:08:9c:ee:1e:
c8:70:a9:d8:c3:44:94:21:46:40:21:52:60:78:4d:36:3c:97:
65:86:a8:19:0c:41:9d:27:c3:71:f4:87:eb:73:b3:e1:ff:6d:
5d:1d:b4:cd:8e:03:16:e2:8d:52:08:a5:42:a7:ed:48:31:99:
4b:04:30:02:a5:80:46:41:c0:7f:54:2a:68:1e:60:8d:cd:65:
c8:7f:39:90:89:58:60:e5:1f:32:21:22:9b:bf:f4:51:00:79:
51:67:fa:21:fa:d3:59:e0:29:4f:35:cd:c9:20:9e:b0:b2:42:
43:98:c6:9f:67:1a:f1:6d:d1:aa:8f:44:13:d8:95:ac:c6:8e:
b3:71:f5:5d:22:96:f6:f4:15:49:13:80:6e:2f:2c:5c:12:8f:
79:d4:ac:57:ed:83:f5:87:e9:69:47:55:fe:b5:e4:5e:4a:80:
a6:cc:c6:07:8a:38:10:7c:d0:71:4d:18:81:e9:aa:84:61:5a:
b6:0a:47:26:1f:48:27:65:fb:21:79:87:62:40:1a:85:16:c9:
cd:f9:e3:76:9b:92:d9:44:a2:3c:be:60:78:4a:27:11:39:a1:
59:5a:de:5a:42:4a:2a:70:d4:7d:fe:e0:10:69:d8:7b:e3:65:
46:ea:a7:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbw1cArXb72iHkuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm
Yjg1MB4XDTI0MTIwNTE4NDcxOFoXDTI1MDMwNTE4NDcxOFowLzEtMCsGA1UEAxMk
YTQ3M2Y4ZTItYTI5My00NzVmLThmOWQtY2YzOGU1MjExMTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxPFkIvfo5xsl/z88kFNSgcqJUR2YAa6xkEG
R3Mm7SFBxJBrU43EQPWbbOGRU1uXsXYRV9CzMiQcqKicQhJ8UhU33Z4FSLaGpXOZ
Bh3JEdxqrB2jXCfMVHXjtKNQU3GljrDHwmkOx+877iOR7Zk81j3wEoWLJ2NxpWMj
/7uzYuDHsp6FKqTC8T3ylLAK92mTteI9x7NJTN0JMDNNzTdD2fwiPgJNn80kEmY0
Watvn8Mo2z+cd04KEugUprjEtJv6PvT8gARu6TKMR0xHtMOFzSFAMfc9rsmQwf2q
JlIopdIREE7RIXaxlbJorNHDnPuRR8M+QdlEw0/CMuzCGPPDKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4YRHL5f8Mhz85nVlQYzUI0LcnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw
ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYmZlMWVhMzMtMzQ5MS0z
ZDhjLTlhNWYtMzFmYmUwODgzYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh
NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm
ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1
Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAryAaUnOgJ67UsHA+7bCJzuHshwqdjDRJQhRkAhUmB4TTY8l2WGqBkM
QZ0nw3H0h+tzs+H/bV0dtM2OAxbijVIIpUKn7UgxmUsEMAKlgEZBwH9UKmgeYI3N
Zch/OZCJWGDlHzIhIpu/9FEAeVFn+iH601ngKU81zckgnrCyQkOYxp9nGvFt0aqP
RBPYlazGjrNx9V0ilvb0FUkTgG4vLFwSj3nUrFftg/WH6WlHVf615F5KgKbMxgeK
OBB80HFNGIHpqoRhWrYKRyYfSCdl+yF5h2JAGoUWyc3543abktlEojy+YHhKJxE5
oVla3lpCSipw1H3+4BBp2HvjZUbqp+Y=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:06:55 2025 by rpki-client