Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/0bdcdc9a-1a8d-3eca-ac70-bb9f13a0b1b7.roa
File: 0bdcdc9a-1a8d-3eca-ac70-bb9f13a0b1b7.roa (raw, json)
Hash identifier: t7GHCNnxPu5jWe9VTmOgcFIf2yDbqQAPtIa8NspV9Qc=
Subject key identifier: FA:84:49:20:BC:52:CB:63:2A:BD:90:81:59:AB:5B:D8:42:B1:50:94
Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial: 010D0C9F43285842E23029DB732C1D18DC58BD00
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/0bdcdc9a-1a8d-3eca-ac70-bb9f13a0b1b7.roa
Signing time: Mon 14 Aug 2023 15:55:00 +0000
ROA not before: Mon 14 Aug 2023 15:55:00 +0000
ROA not after: Sun 12 Nov 2023 16:55:00 +0000
asID: 398465
IP address blocks: 209.240.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e2:30:29:db:73:2c:1d:18:dc:58:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Validity
Not Before: Aug 14 15:55:00 2023 GMT
Not After : Nov 12 16:55:00 2023 GMT
Subject: CN=eaf846c5-7192-4554-b8f7-84bd491c9e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:9e:9e:59:f3:bb:cd:35:fb:55:67:68:86:
a8:ba:43:4f:8a:6c:f6:87:1d:1b:ee:48:2e:36:99:
e6:6d:ce:ac:d7:a4:c1:90:0d:27:ec:dc:9b:e4:08:
f5:fc:0d:58:87:f1:ae:f7:4a:0e:8b:42:44:90:69:
40:c2:db:a9:5b:31:d9:2d:ab:d7:4b:40:b4:08:6d:
53:7c:95:31:de:6b:d0:cb:cc:c5:18:0c:d5:88:c4:
c9:68:8c:49:73:45:0f:85:bd:0d:22:d9:63:ab:bb:
10:5a:97:83:20:3b:31:da:cc:14:2d:41:75:8e:0c:
2a:e1:d5:bc:02:b6:c2:5b:ef:d4:0b:53:18:4a:e6:
1c:4a:fe:c2:e8:88:90:96:f7:22:17:75:ef:29:c9:
82:90:7c:16:58:97:5f:5f:02:6c:89:5d:da:44:c1:
24:db:ee:62:c8:70:44:85:6e:03:96:30:ee:2c:4b:
7a:43:98:78:ab:30:9a:27:0d:e8:9a:7e:5d:59:57:
53:5c:8a:02:7a:a7:40:20:de:30:31:16:8f:ce:80:
24:5e:bb:d8:5c:45:d7:40:d2:10:f3:ad:9d:45:ca:
fd:96:0a:42:05:d3:80:2b:e9:1d:08:6f:86:01:54:
8e:b3:a1:9a:26:94:9e:82:8d:2b:45:56:6f:0d:fb:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:49:20:BC:52:CB:63:2A:BD:90:81:59:AB:5B:D8:42:B1:50:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/0bdcdc9a-1a8d-3eca-ac70-bb9f13a0b1b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
X509v3 Authority Key Identifier:
keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:22:4c:52:4c:25:a9:a1:01:ca:8e:94:7a:8b:2c:d9:af:f0:
96:e8:e2:8f:c6:d5:dc:7b:17:73:bc:79:41:dc:8c:d8:93:27:
0c:69:58:e2:4b:62:20:90:4f:c6:07:21:a6:28:77:ac:69:4e:
06:22:9b:43:51:00:66:94:2b:c6:4d:e6:14:62:d7:7c:0d:7d:
e5:12:20:a8:c9:75:fe:be:fd:8a:82:0b:f8:0d:8b:37:69:0d:
8c:c1:da:a7:b0:a4:79:95:5e:28:ea:b7:85:19:d5:cd:1e:9f:
da:f2:d4:1b:18:a0:58:19:f8:a9:8a:55:61:82:91:09:7a:23:
32:b2:e9:fc:21:11:d4:ff:b0:89:75:20:07:b6:5b:d7:fa:16:
dd:af:3c:d1:56:84:08:d1:2f:aa:a6:5b:3f:02:e6:46:f1:dd:
44:16:a0:0b:e6:ea:c2:0e:ce:51:52:ba:2a:43:89:d1:b8:78:
e7:e3:3b:35:56:a0:26:92:e3:4c:a6:3f:dd:53:9e:bb:44:0a:
20:75:5c:2d:8e:90:ae:cd:a3:4b:74:ec:cf:4e:40:7b:67:c4:
9a:03:3d:03:24:36:f1:d1:ba:a5:9e:aa:fb:1b:13:54:3d:03:
94:52:ac:6d:23:13:2e:4e:12:bf:c8:96:29:57:44:50:94:4d:
33:a7:2c:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELiMCnbcywdGNxYvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4
NDdlMB4XDTIzMDgxNDE1NTUwMFoXDTIzMTExMjE2NTUwMFowLzEtMCsGA1UEAxMk
ZWFmODQ2YzUtNzE5Mi00NTU0LWI4ZjctODRiZDQ5MWM5ZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjCenlnzu801+1VnaIaoukNPimz2hx0b7kgu
Npnmbc6s16TBkA0n7Nyb5Aj1/A1Yh/Gu90oOi0JEkGlAwtupWzHZLavXS0C0CG1T
fJUx3mvQy8zFGAzViMTJaIxJc0UPhb0NItljq7sQWpeDIDsx2swULUF1jgwq4dW8
ArbCW+/UC1MYSuYcSv7C6IiQlvciF3XvKcmCkHwWWJdfXwJsiV3aRMEk2+5iyHBE
hW4DljDuLEt6Q5h4qzCaJw3omn5dWVdTXIoCeqdAIN4wMRaPzoAkXrvYXEXXQNIQ
862dRcr9lgpCBdOAK+kdCG+GAVSOs6GaJpSego0rRVZvDfuCaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqESSC8UstjKr2QgVmrW9hCsVCUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5
ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMGJkY2RjOWEtMWE4ZC0z
ZWNhLWFjNzAtYmI5ZjEzYTBiMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1
MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy
ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk
YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkiTFJMJamhAcqOlHqLLNmv8Jbo4o/G1dx7F3O8eUHcjNiTJwxpWOJL
YiCQT8YHIaYod6xpTgYim0NRAGaUK8ZN5hRi13wNfeUSIKjJdf6+/YqCC/gNizdp
DYzB2qewpHmVXijqt4UZ1c0en9ry1BsYoFgZ+KmKVWGCkQl6IzKy6fwhEdT/sIl1
IAe2W9f6Ft2vPNFWhAjRL6qmWz8C5kbx3UQWoAvm6sIOzlFSuipDidG4eOfjOzVW
oCaS40ymP91TnrtECiB1XC2OkK7No0t07M9OQHtnxJoDPQMkNvHRuqWeqvsbE1Q9
A5RSrG0jEy5OEr/IlilXRFCUTTOnLPw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:48 2024 by rpki-client on console-ams.rpki-client.org