Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/a27a2df3-bae8-3339-866b-bbc568e35e8d.roa
File: a27a2df3-bae8-3339-866b-bbc568e35e8d.roa (raw, json)
Hash identifier: 8g/BwDLkC1+gQTDLE5jcnKm+nkll2J9hObnj5jqw+l0=
Subject key identifier: 66:E3:83:6D:0F:FD:7A:1E:09:79:6F:1F:FF:18:82:65:C5:11:D1:F5
Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial: 010D0C9F4328584430F95E7281CA4A628AA12D00
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/a27a2df3-bae8-3339-866b-bbc568e35e8d.roa
Signing time: Tue 12 Dec 2023 14:00:20 +0000
ROA not before: Tue 12 Dec 2023 14:00:20 +0000
ROA not after: Mon 11 Mar 2024 13:00:20 +0000
asID: 400136
IP address blocks: 24.149.48.0/24 maxlen: 24
24.149.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:30:f9:5e:72:81:ca:4a:62:8a:a1:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Validity
Not Before: Dec 12 14:00:20 2023 GMT
Not After : Mar 11 13:00:20 2024 GMT
Subject: CN=693a9250-4040-4dee-8a2b-f20d38e19f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:e9:d9:56:2b:6b:72:39:4b:2c:31:8f:ae:
8d:8c:e1:b9:1a:5d:6b:67:78:81:9f:ba:bd:89:d9:
38:6a:0b:2b:34:ef:d1:02:cb:bb:4f:92:09:39:00:
db:ee:53:e9:b7:47:75:a3:e2:5f:ee:fa:6c:e7:cf:
92:a3:78:74:c2:7e:89:f2:c3:3b:8e:b1:a5:35:09:
5f:0b:82:9d:fa:7f:10:3e:2d:a3:7d:d6:24:58:62:
8a:5e:c2:96:be:2c:ab:b6:b7:5c:5a:c6:5b:e8:d0:
dd:f3:b9:a5:47:09:06:24:a1:67:d2:a2:ee:ac:2f:
10:c9:36:15:f3:f4:35:dc:01:f2:53:6d:b2:97:1d:
f9:7b:1e:42:dc:0a:34:e0:a3:06:be:87:2b:38:f8:
01:38:b0:62:76:d9:1d:8f:38:c4:75:e0:77:34:d5:
d9:07:f4:aa:ac:9f:b4:ca:b2:30:61:4f:5e:ca:a6:
f7:9a:4c:dc:98:3d:76:65:62:6e:15:69:90:4b:df:
03:9a:2c:70:ce:a9:63:18:6c:29:16:9f:0a:4d:cf:
07:f3:ed:44:4b:f2:2a:2e:a9:70:8f:11:da:5e:49:
b1:73:d5:74:8d:c2:1e:dd:b6:30:fb:b3:c3:0c:de:
b2:59:1f:c8:37:42:26:05:7b:c4:f8:c2:a9:b8:22:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E3:83:6D:0F:FD:7A:1E:09:79:6F:1F:FF:18:82:65:C5:11:D1:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/a27a2df3-bae8-3339-866b-bbc568e35e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
X509v3 Authority Key Identifier:
keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
sbgp-ipAddrBlock: critical
IPv4:
24.149.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a4:4b:df:ef:db:e4:1a:fb:bc:14:dd:49:a9:2d:9a:58:30:
67:b0:f7:49:9d:94:1d:d6:ff:f1:33:ae:a2:75:a9:5b:17:af:
6b:5d:88:fd:1e:48:13:bb:a8:68:3a:59:b3:da:5a:0f:0f:9f:
a4:d8:71:fa:d0:0c:e8:4e:41:d7:8f:fc:a1:43:63:a7:c3:25:
6f:38:df:38:9b:c4:c2:8a:2b:44:9d:0d:fc:29:54:6f:82:42:
3a:ed:8f:79:6d:6d:be:6b:c2:0c:6a:77:18:c7:92:d3:77:1f:
3b:57:90:7c:15:db:c7:49:83:b5:03:f1:d2:70:f5:4f:66:54:
9e:70:a1:51:4f:cc:bb:37:46:5c:95:fd:3c:24:c0:72:20:97:
33:a9:dc:cf:9f:e9:d6:45:78:a2:51:cd:f2:f7:fd:32:6e:26:
b2:01:d3:95:cb:78:44:18:b5:76:e3:87:c7:c4:df:d9:2c:fc:
7c:de:b5:e8:1c:ad:55:f2:4a:40:79:94:bd:ef:2a:d8:14:ca:
a6:8e:61:99:d4:4b:c6:2f:1d:f9:09:1d:d4:b9:ed:dc:9b:a5:
ff:e2:44:93:1d:cd:4c:9b:67:a0:55:a6:ac:de:99:46:88:0e:
2d:e8:31:ff:24:df:c5:65:ee:7a:40:7e:26:12:1d:55:23:ad:
f3:1e:0b:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQw+V5ygcpKYoqhLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjMyZjFkMjMtMmM0Yy00ZWY1LWJhYjEtNTU5ZGNiNDkx
MjkxMB4XDTIzMTIxMjE0MDAyMFoXDTI0MDMxMTEzMDAyMFowLzEtMCsGA1UEAxMk
NjkzYTkyNTAtNDA0MC00ZGVlLThhMmItZjIwZDM4ZTE5Zjc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf/p2VYra3I5Sywxj66NjOG5Gl1rZ3iBn7q9
idk4agsrNO/RAsu7T5IJOQDb7lPpt0d1o+Jf7vps58+So3h0wn6J8sM7jrGlNQlf
C4Kd+n8QPi2jfdYkWGKKXsKWviyrtrdcWsZb6NDd87mlRwkGJKFn0qLurC8QyTYV
8/Q13AHyU22ylx35ex5C3Ao04KMGvocrOPgBOLBidtkdjzjEdeB3NNXZB/SqrJ+0
yrIwYU9eyqb3mkzcmD12ZWJuFWmQS98DmixwzqljGGwpFp8KTc8H8+1ES/IqLqlw
jxHaXkmxc9V0jcIe3bYw+7PDDN6yWR/IN0ImBXvE+MKpuCLwhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbjg20P/XoeCXlvH/8YgmXFEdH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJm
MWQyMy0yYzRjLTRlZjUtYmFiMS01NTlkY2I0OTEyOTEvYTI3YTJkZjMtYmFlOC0z
MzM5LTg2NmItYmJjNTY4ZTM1ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjMyZjFkMjMtMmM0Yy00ZWY1LWJh
YjEtNTU5ZGNiNDkxMjkxL2YzMmYxZDIzLTJjNGMtNGVmNS1iYWIxLTU1OWRjYjQ5
MTI5MS5jcmwwHwYDVR0jBBgwFoAUwO8qm2fyW3+QCH6t3QSVwKfX1PcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMzJmMWQyMy0yYzRjLTRlZjUtYmFiMS01NTlk
Y2I0OTEyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACkS9/v2+Qa+7wU3UmpLZpYMGew90mdlB3W//EzrqJ1qVsXr2tdiP0e
SBO7qGg6WbPaWg8Pn6TYcfrQDOhOQdeP/KFDY6fDJW843zibxMKKK0SdDfwpVG+C
Qjrtj3ltbb5rwgxqdxjHktN3HztXkHwV28dJg7UD8dJw9U9mVJ5woVFPzLs3RlyV
/TwkwHIglzOp3M+f6dZFeKJRzfL3/TJuJrIB05XLeEQYtXbjh8fE39ks/Hzetegc
rVXySkB5lL3vKtgUyqaOYZnUS8YvHfkJHdS57dybpf/iRJMdzUybZ6BVpqzemUaI
Di3oMf8k38Vl7npAfiYSHVUjrfMeCzM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:06 2024 by rpki-client on console-fra.rpki-client.org