Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1926a840-8e67-3512-a9c5-3a48ae8890b8.roa
File: 1926a840-8e67-3512-a9c5-3a48ae8890b8.roa (raw, json)
Hash identifier: 0/CMrcoWI5Po53cJ96tHoRGttd+oJiIBUvmJRidj+Ng=
Subject key identifier: E9:49:20:2C:65:D9:30:83:CC:5B:9A:F4:9E:C4:75:99:C0:75:E7:1D
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F43285847766105EA016D99BEE19CCBB8
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1926a840-8e67-3512-a9c5-3a48ae8890b8.roa
Signing time: Mon 07 Oct 2024 13:00:40 +0000
ROA not before: Mon 07 Oct 2024 13:00:40 +0000
ROA not after: Sun 05 Jan 2025 14:00:40 +0000
asID: 393474
IP address blocks: 64.90.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:76:61:05:ea:01:6d:99:be:e1:9c:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Oct 7 13:00:40 2024 GMT
Not After : Jan 5 14:00:40 2025 GMT
Subject: CN=a50efda3-94b6-4622-b05e-47d08a20268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:eb:9e:b9:23:29:a7:7a:a9:6e:e1:da:ef:
55:57:08:d4:57:aa:6e:55:72:c6:28:76:0d:0f:8f:
06:1f:ee:f7:73:06:76:2e:9f:ed:7a:fd:e3:5d:07:
af:26:c2:2b:c9:c2:a7:68:f3:11:85:fa:ce:06:d1:
bf:ff:16:8d:f4:1b:07:e2:22:ef:2c:19:f0:3b:ef:
98:3d:49:5c:75:81:1b:df:4c:ce:0c:75:ee:22:f3:
5f:5f:1f:b3:28:b7:3f:a1:11:3c:83:33:74:25:5a:
44:f1:98:8e:09:77:78:bd:cc:26:c9:ba:ea:a7:83:
db:a1:dd:46:df:93:64:74:d3:b7:34:97:67:07:68:
93:ac:b7:93:03:f7:ee:f7:32:26:c7:67:84:79:45:
76:71:ec:81:f1:25:68:af:40:e8:7b:45:bf:9b:0c:
f4:0f:bf:1a:ea:14:b7:eb:58:c7:20:e3:91:a8:01:
57:6b:df:a8:1f:33:12:3e:e7:fc:ce:97:48:f3:5a:
87:b1:26:56:0c:5c:44:44:26:98:da:16:56:63:69:
14:a3:1a:29:81:2d:fa:77:e8:83:5d:9b:18:9a:f6:
91:d9:60:8c:55:a6:3f:55:cd:19:38:5b:8d:d9:30:
7f:a6:79:08:ab:93:7c:9c:f0:96:df:ea:d4:34:b8:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:20:2C:65:D9:30:83:CC:5B:9A:F4:9E:C4:75:99:C0:75:E7:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1926a840-8e67-3512-a9c5-3a48ae8890b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:06:72:e2:65:2a:e6:06:d1:15:de:34:cd:ee:93:44:42:a2:
d8:0b:83:c4:21:0a:aa:56:fc:fa:95:55:62:72:2e:28:40:87:
ca:8c:37:72:8d:28:78:24:f9:bb:af:cf:6a:75:8e:a7:c3:18:
98:37:56:5d:2f:22:42:d1:30:50:b1:04:67:15:49:2a:b0:02:
cd:14:9e:e1:7c:38:69:84:e9:4e:bd:7b:ab:01:2b:3e:4b:5a:
ff:d9:71:6d:53:0c:63:ad:1b:0f:25:7a:77:6d:72:bf:e1:cc:
fe:22:22:ac:33:f5:a5:03:54:88:69:68:56:68:82:c9:92:d0:
ab:82:df:2e:46:4f:ca:7e:18:c8:a0:e6:87:2e:f5:d2:66:a3:
0a:65:ad:d0:4b:83:35:f6:0d:af:8c:c3:a6:a4:85:7c:1b:40:
6f:5d:13:e2:11:57:3c:fc:00:1d:cd:74:de:70:09:7e:83:21:
2c:f3:3c:6a:58:b7:c0:94:1a:d9:57:8b:8f:84:e0:78:8a:61:
47:81:23:2e:35:51:65:61:94:1b:41:0f:33:e4:4f:89:0a:39:
15:7a:28:06:2c:00:bb:2b:86:00:0a:3a:4e:ee:34:73:97:48:
b7:9c:cf:3f:43:9e:a3:8c:3e:87:4b:a6:b7:53:88:e0:6e:23:
3d:ec:32:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQXqAW2ZvuGcy7gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh
MWJkMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
YTUwZWZkYTMtOTRiNi00NjIyLWIwNWUtNDdkMDhhMjAyNjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8LrnrkjKad6qW7h2u9VVwjUV6puVXLGKHYN
D48GH+73cwZ2Lp/tev3jXQevJsIrycKnaPMRhfrOBtG//xaN9BsH4iLvLBnwO++Y
PUlcdYEb30zODHXuIvNfXx+zKLc/oRE8gzN0JVpE8ZiOCXd4vcwmybrqp4Pbod1G
35NkdNO3NJdnB2iTrLeTA/fu9zImx2eEeUV2ceyB8SVor0Doe0W/mwz0D78a6hS3
61jHIOORqAFXa9+oHzMSPuf8zpdI81qHsSZWDFxERCaY2hZWY2kUoxopgS36d+iD
XZsYmvaR2WCMVaY/Vc0ZOFuN2TB/pnkIq5N8nPCW3+rUNLjnwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlJICxl2TCDzFua9J7EdZnAdecdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy
ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMTkyNmE4NDAtOGU2Ny0z
NTEyLWE5YzUtM2E0OGFlODg5MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj
NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx
YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5
NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcGcuJlKuYG0RXeNM3uk0RCotgLg8QhCqpW/PqVVWJyLihAh8qMN3KN
KHgk+buvz2p1jqfDGJg3Vl0vIkLRMFCxBGcVSSqwAs0UnuF8OGmE6U69e6sBKz5L
Wv/ZcW1TDGOtGw8lendtcr/hzP4iIqwz9aUDVIhpaFZogsmS0KuC3y5GT8p+GMig
5ocu9dJmowplrdBLgzX2Da+Mw6akhXwbQG9dE+IRVzz8AB3NdN5wCX6DISzzPGpY
t8CUGtlXi4+E4HiKYUeBIy41UWVhlBtBDzPkT4kKORV6KAYsALsrhgAKOk7uNHOX
SLeczz9DnqOMPodLprdTiOBuIz3sMr0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:11 2025 by rpki-client