Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2233674b-7c8d-3a1a-beae-3e932df27006.roa
File: 2233674b-7c8d-3a1a-beae-3e932df27006.roa (raw, json)
Hash identifier: +nVkz/GnDkY6d+qdK1WnegVaBfYGjXqUW00an3P20hI=
Subject key identifier: 66:7B:B5:EF:EB:4B:E7:CB:42:33:C3:A0:20:F6:08:D1:A7:5F:58:14
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2A9C1533EC4840D8AC4580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2233674b-7c8d-3a1a-beae-3e932df27006.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 398713
IP address blocks: 207.161.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2a:9c:15:33:ec:48:40:d8:ac:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=dcff8c0f-1a54-4d34-a587-6015d46499c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:cb:b7:93:9c:17:4f:5d:b5:f6:35:e1:43:
13:df:77:f0:29:ba:ec:67:3e:73:d6:26:f4:75:40:
3b:02:d2:27:c4:4f:1e:29:db:11:1e:4c:ac:af:b2:
90:54:be:77:ec:84:9d:0f:8b:be:bf:ef:ca:e4:ad:
de:fd:1e:b1:a9:ac:24:8d:5e:b9:a3:ed:61:22:3c:
b0:80:0f:c3:93:8c:a5:5e:48:b0:37:b5:34:1a:5a:
21:2b:a0:3e:fc:b2:01:00:a6:92:ff:02:70:bc:ca:
ff:70:94:5e:d3:8f:6b:f0:c4:9d:36:5a:02:34:f7:
0b:45:d9:2c:ba:34:78:b5:cb:f2:ff:bf:55:c2:5b:
10:0e:ea:55:39:4c:c4:ea:0a:68:ce:61:05:d1:63:
20:db:e8:44:1d:67:7f:20:e9:73:ea:c8:75:e0:72:
7c:71:e2:ca:bf:9f:18:df:25:67:0d:5b:f8:29:30:
08:e9:4f:3c:5f:54:8f:84:56:9a:b0:b9:67:5b:83:
06:a3:5d:b6:3d:5f:59:c2:72:09:62:d7:60:d6:73:
6f:d6:fa:ba:9f:ab:e6:3f:49:f3:51:b3:f2:b1:85:
ea:62:8b:c2:bf:45:47:41:33:4e:d3:7d:c8:b0:84:
fc:28:72:9b:45:50:73:dc:d9:d5:83:01:78:23:37:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7B:B5:EF:EB:4B:E7:CB:42:33:C3:A0:20:F6:08:D1:A7:5F:58:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2233674b-7c8d-3a1a-beae-3e932df27006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.161.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:d5:d3:5b:3f:bf:12:72:df:f3:cb:27:3c:79:d7:81:c5:fa:
7a:23:59:1c:57:17:3c:74:ab:59:08:92:02:f3:18:44:4a:ac:
11:8b:0c:8c:01:58:aa:7c:f4:9b:fe:73:7a:6a:d9:6d:b2:f2:
3c:d2:74:39:e2:4f:72:39:52:fe:e5:d4:2a:18:9b:d2:11:6c:
f4:92:36:ec:16:07:4c:e5:57:18:52:45:fa:e7:0e:b0:ae:87:
6e:3e:b2:d3:1f:2f:d6:47:25:93:e5:43:10:8c:c6:c2:bf:8a:
32:5e:fa:c7:46:2a:fe:58:a3:67:94:13:b3:40:06:13:8a:e9:
13:15:98:c5:52:b1:87:53:a8:c6:01:59:71:64:7b:4c:70:f3:
14:19:9b:ac:96:d0:54:e2:62:54:9e:ec:05:fd:cd:cb:41:b8:
42:da:e2:c2:99:4b:dc:dd:4c:3e:33:c3:29:e3:5e:ea:61:b5:
71:b2:bd:94:59:0c:99:a9:9d:c3:43:15:0e:52:71:41:ac:4e:
06:86:ab:d8:b4:e7:71:6e:6d:ee:1c:8b:12:fb:54:bd:c9:27:
db:3b:d1:c1:19:69:1f:12:0b:f4:9a:80:75:ac:ae:1a:2c:15:
79:b4:19:77:56:3e:96:38:84:a8:69:11:8e:aa:3e:cc:ba:8f:
a4:c3:9b:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKpwVM+xIQNisRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGNmZjhjMGYtMWE1NC00ZDM0LWE1ODctNjAxNWQ0NjQ5OWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8zLt5OcF09dtfY14UMT33fwKbrsZz5z1ib0
dUA7AtInxE8eKdsRHkysr7KQVL537ISdD4u+v+/K5K3e/R6xqawkjV65o+1hIjyw
gA/Dk4ylXkiwN7U0GlohK6A+/LIBAKaS/wJwvMr/cJRe049r8MSdNloCNPcLRdks
ujR4tcvy/79VwlsQDupVOUzE6gpozmEF0WMg2+hEHWd/IOlz6sh14HJ8ceLKv58Y
3yVnDVv4KTAI6U88X1SPhFaasLlnW4MGo122PV9ZwnIJYtdg1nNv1vq6n6vmP0nz
UbPysYXqYovCv0VHQTNO033IsIT8KHKbRVBz3NnVgwF4IzdMfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZ7te/rS+fLQjPDoCD2CNGnX1gUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjIzMzY3NGItN2M4ZC0z
YTFhLWJlYWUtM2U5MzJkZjI3MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6HTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjV01s/vxJy3/PLJzx514HF+nojWRxXFzx0q1kIkgLzGERKrBGLDIwB
WKp89Jv+c3pq2W2y8jzSdDniT3I5Uv7l1CoYm9IRbPSSNuwWB0zlVxhSRfrnDrCu
h24+stMfL9ZHJZPlQxCMxsK/ijJe+sdGKv5Yo2eUE7NABhOK6RMVmMVSsYdTqMYB
WXFke0xw8xQZm6yW0FTiYlSe7AX9zctBuELa4sKZS9zdTD4zwynjXuphtXGyvZRZ
DJmpncNDFQ5ScUGsTgaGq9i053Fube4cixL7VL3JJ9s70cEZaR8SC/SagHWsrhos
FXm0GXdWPpY4hKhpEY6qPsy6j6TDm6E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:36 2025 by rpki-client