Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e8e7d39d-0951-32c1-8fc5-2b5740c71384.roa
File: e8e7d39d-0951-32c1-8fc5-2b5740c71384.roa (raw, json)
Hash identifier: /avWG1wsPyuyzv3HV4LMGi8cZrtuAebhtFVoG7LpENk=
Subject key identifier: 61:F7:23:1C:64:90:D7:40:7F:D9:82:68:78:A9:4F:BD:73:B2:95:16
Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial: 010D0C9F43285845DA98F4D3DB75445669C52F00
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e8e7d39d-0951-32c1-8fc5-2b5740c71384.roa
Signing time: Mon 13 May 2024 01:00:25 +0000
ROA not before: Mon 13 May 2024 01:00:25 +0000
ROA not after: Sun 11 Aug 2024 01:00:25 +0000
asID: 16509
IP address blocks: 23.172.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:da:98:f4:d3:db:75:44:56:69:c5:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Validity
Not Before: May 13 01:00:25 2024 GMT
Not After : Aug 11 01:00:25 2024 GMT
Subject: CN=3193148b-b79f-4610-9716-b7edfc777320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:bd:f2:25:5d:49:82:d4:a6:03:ae:25:b8:
d4:2f:49:60:12:76:be:69:38:d4:7d:c6:da:53:bc:
6d:76:ab:75:e3:6d:e0:64:68:7c:bd:c8:04:bc:26:
be:86:3b:8c:44:e1:b9:e0:0f:c9:53:91:93:16:5c:
2e:32:c2:60:89:ba:83:3e:49:07:c0:a5:97:83:23:
88:3c:22:07:7f:e7:43:f5:dd:f2:d3:80:d3:a0:9d:
ab:17:d7:6b:4a:ed:61:84:f7:8a:b7:69:da:09:f2:
6a:bf:01:f7:68:53:06:59:17:a6:38:0d:aa:46:c9:
dc:27:d4:90:e0:bc:d1:31:d2:21:94:cd:ff:29:c0:
14:b5:4d:bc:e9:49:6f:32:63:a3:9f:4c:ce:3e:86:
0f:a1:05:38:8d:e6:ee:5c:d2:da:b9:14:cb:f0:3e:
df:0a:5e:89:6a:53:f7:8b:7a:fd:ab:e9:25:2d:a3:
b9:a0:31:18:9c:2b:68:dd:3c:7a:cd:7b:54:c3:c7:
6a:b6:a2:b8:b5:99:7c:b2:7e:4a:ab:d3:f5:f8:04:
7f:3f:a8:74:9c:7f:ac:71:fa:8c:6e:a5:61:5e:ae:
16:74:e5:e9:bc:d6:ee:c2:ed:61:40:2b:39:6a:a3:
86:81:71:a0:ca:6e:7b:bd:26:3d:68:a7:79:c2:d1:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:23:1C:64:90:D7:40:7F:D9:82:68:78:A9:4F:BD:73:B2:95:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e8e7d39d-0951-32c1-8fc5-2b5740c71384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
X509v3 Authority Key Identifier:
keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:df:b5:ac:91:e9:61:12:34:a7:85:59:70:d9:db:d5:1b:aa:
f6:3d:a4:04:dd:ad:36:6f:37:0e:ca:74:4d:b6:c4:ea:44:df:
21:54:94:de:67:08:ef:b0:a0:88:4a:51:a6:6c:6c:2d:f4:0c:
43:72:61:69:86:09:e6:b5:41:d8:aa:86:e9:9b:3f:93:d1:74:
60:ee:9e:fe:ec:88:3f:ad:3d:99:7d:14:9c:0f:54:ea:ca:ec:
2b:d0:76:35:60:2f:dd:11:3d:ad:fb:46:e1:f3:02:17:f4:4b:
13:24:de:97:17:bd:74:2b:12:38:3b:22:ef:75:f6:75:79:77:
41:04:5c:d8:7c:df:82:5c:62:a1:9c:e2:94:61:b3:77:e1:33:
c3:6b:c1:bf:4b:45:50:60:1d:4b:39:ab:4d:3a:cb:87:db:7d:
f3:50:7c:1c:ff:81:5d:d5:ed:96:97:f9:1b:2c:02:1e:d5:31:
9e:e0:f0:7f:43:4e:ee:0b:61:a4:0f:90:b3:48:54:d3:9b:c3:
cd:de:15:33:51:c3:2f:e6:55:c1:f7:aa:fd:ba:b3:2a:63:4d:
ff:7b:09:4d:69:3e:27:f8:cf:10:1a:e0:d9:4c:46:a5:98:1c:
40:03:ca:c8:a4:e5:a1:6b:75:bd:2d:30:67:91:11:69:a8:54:
07:68:58:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXamPTT23VEVmnFLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl
MWVlMB4XDTI0MDUxMzAxMDAyNVoXDTI0MDgxMTAxMDAyNVowLzEtMCsGA1UEAxMk
MzE5MzE0OGItYjc5Zi00NjEwLTk3MTYtYjdlZGZjNzc3MzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEK98iVdSYLUpgOuJbjUL0lgEna+aTjUfcba
U7xtdqt1423gZGh8vcgEvCa+hjuMROG54A/JU5GTFlwuMsJgibqDPkkHwKWXgyOI
PCIHf+dD9d3y04DToJ2rF9drSu1hhPeKt2naCfJqvwH3aFMGWRemOA2qRsncJ9SQ
4LzRMdIhlM3/KcAUtU286UlvMmOjn0zOPoYPoQU4jebuXNLauRTL8D7fCl6JalP3
i3r9q+klLaO5oDEYnCto3Tx6zXtUw8dqtqK4tZl8sn5Kq9P1+AR/P6h0nH+scfqM
bqVhXq4WdOXpvNbuwu1hQCs5aqOGgXGgym57vSY9aKd5wtH43wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGH3IxxkkNdAf9mCaHipT71zspUWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3
Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvZThlN2QzOWQtMDk1MS0z
MmMxLThmYzUtMmI1NzQwYzcxMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz
MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4
ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl
NjhkOGUxZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHftayR6WESNKeFWXDZ29UbqvY9pATdrTZvNw7KdE22xOpE3yFUlN5n
CO+woIhKUaZsbC30DENyYWmGCea1QdiqhumbP5PRdGDunv7siD+tPZl9FJwPVOrK
7CvQdjVgL90RPa37RuHzAhf0SxMk3pcXvXQrEjg7Iu919nV5d0EEXNh834JcYqGc
4pRhs3fhM8Nrwb9LRVBgHUs5q006y4fbffNQfBz/gV3V7ZaX+RssAh7VMZ7g8H9D
Tu4LYaQPkLNIVNObw83eFTNRwy/mVcH3qv26sypjTf97CU1pPif4zxAa4NlMRqWY
HEADysik5aFrdb0tMGeREWmoVAdoWFY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:08 2025 by rpki-client