Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12219a80-a205-3eca-81e2-7137f46da8b4.roa
File: 12219a80-a205-3eca-81e2-7137f46da8b4.roa (raw, json)
Hash identifier: CL0spLMhiX6opFj+vnaDg1LqCYrXGRW40fz/ac83/bc=
Subject key identifier: F3:B3:DC:D7:BC:7F:08:B0:BE:8A:AC:36:22:CA:9B:71:D5:F0:BA:32
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858460483459F75E07DEFA3BCC100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12219a80-a205-3eca-81e2-7137f46da8b4.roa
Signing time: Mon 27 May 2024 12:00:00 +0000
ROA not before: Mon 27 May 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 162.158.7.0/24 maxlen: 24
162.158.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:04:83:45:9f:75:e0:7d:ef:a3:bc:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: May 27 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=1a1fe0e9-8327-4785-9b6f-e9ef77ba399b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:d3:21:6e:17:73:19:f7:09:6b:6f:98:b0:
1c:34:18:82:5f:30:cd:c6:ee:26:47:d6:61:97:14:
1f:19:c7:25:5f:8f:d0:91:8a:a6:5b:a8:bd:3d:f7:
ba:9c:f7:f8:88:69:5a:fa:c3:a9:75:c2:ad:9f:ce:
f6:c0:84:b5:e6:9f:4c:d0:03:0c:e3:5a:a6:b1:4c:
8a:4d:b2:04:56:0c:e2:9b:49:a0:c0:02:30:f2:80:
50:6c:c6:fc:c0:be:93:51:40:2e:0b:35:b1:1c:fc:
93:3c:df:32:da:5e:b8:f0:ab:cf:85:8b:6c:3a:e1:
4e:b5:f5:af:d3:87:46:29:46:19:ba:98:45:ba:f1:
73:c2:13:06:f5:85:e1:47:36:62:a2:06:b6:1d:02:
a5:b3:64:d6:c4:d7:75:af:df:ca:c1:83:3c:5a:d6:
21:7b:66:d0:ea:4b:e8:09:96:11:f8:94:c2:d2:e9:
76:75:b4:57:db:cf:13:25:72:ac:d2:5e:bc:07:f2:
4e:a9:46:66:96:f3:b9:f0:2b:67:83:53:2f:11:3c:
dd:0c:6a:b2:22:ae:14:b5:05:89:21:90:65:10:ec:
ec:c1:33:35:e8:26:ea:67:ef:ed:63:ac:2a:b0:8a:
bd:ce:a3:67:c5:76:96:33:09:7c:a9:72:3a:57:67:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:DC:D7:BC:7F:08:B0:BE:8A:AC:36:22:CA:9B:71:D5:F0:BA:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12219a80-a205-3eca-81e2-7137f46da8b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.7.0/24
162.158.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:ea:15:28:5a:f6:7a:7a:08:e4:74:ae:5c:be:4e:9d:da:30:
d9:2a:92:18:2f:12:3a:e5:64:69:23:5a:79:0e:7c:e8:85:8f:
73:fa:8d:5c:c8:d0:3e:e7:45:31:3a:79:e3:a2:23:9e:47:6b:
b4:ee:80:da:d3:af:40:2f:04:c1:e9:a5:28:24:57:54:57:a1:
86:23:3e:a6:50:ed:63:37:5a:37:4f:7a:a3:79:e3:12:88:8e:
79:72:5b:f3:5e:22:f3:43:bb:f3:54:21:92:d3:ea:b8:a9:f4:
da:e2:79:bc:95:2b:7b:bc:3c:ce:c4:cd:76:97:b8:d5:be:f5:
5d:31:d8:7d:c5:8d:41:37:47:13:75:57:28:e3:33:e9:0d:6f:
60:99:2b:b6:29:92:c2:eb:26:4c:6b:c5:d5:62:ee:79:c3:a7:
a6:03:f4:15:a6:e3:1e:c0:89:96:56:7f:10:15:9e:df:2d:2a:
a8:8f:97:93:ab:77:dd:65:8d:5e:c1:12:d8:6b:0d:03:85:b2:
cb:a3:00:9d:a8:47:7a:8c:7d:0d:bf:4b:bc:47:92:bd:ef:c2:
7d:ea:2e:4c:ef:e9:99:10:cf:2a:93:f1:7c:7a:3e:d1:ff:ed:
d5:67:d8:11:9d:75:af:58:cf:c0:42:0e:48:7a:12:82:1f:c7:
87:36:2b:b1
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEYEg0WfdeB976O8wQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDUyNzEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWExZmUwZTktODMyNy00Nzg1LTliNmYtZTllZjc3YmEzOTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdLTIW4Xcxn3CWtvmLAcNBiCXzDNxu4mR9Zh
lxQfGcclX4/QkYqmW6i9Pfe6nPf4iGla+sOpdcKtn872wIS15p9M0AMM41qmsUyK
TbIEVgzim0mgwAIw8oBQbMb8wL6TUUAuCzWxHPyTPN8y2l648KvPhYtsOuFOtfWv
04dGKUYZuphFuvFzwhMG9YXhRzZioga2HQKls2TWxNd1r9/KwYM8WtYhe2bQ6kvo
CZYR+JTC0ul2dbRX288TJXKs0l68B/JOqUZmlvO58Ctng1MvETzdDGqyIq4UtQWJ
IZBlEOzswTM16CbqZ+/tY6wqsIq9zqNnxXaWMwl8qXI6V2enLwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPOz3Ne8fwiwvoqsNiLKm3HV8LoyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTIyMTlhODAtYTIwNS0z
ZWNhLTgxZTItNzEzN2Y0NmRhOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAop4HAwQA
op4xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJjqFSha9np6COR0rly+Tp3aMNkqkhgvEjrlZGkjWnkOfOiF
j3P6jVzI0D7nRTE6eeOiI55Ha7TugNrTr0AvBMHppSgkV1RXoYYjPqZQ7WM3WjdP
eqN54xKIjnlyW/NeIvNDu/NUIZLT6rip9NriebyVK3u8PM7EzXaXuNW+9V0x2H3F
jUE3RxN1VyjjM+kNb2CZK7YpksLrJkxrxdVi7nnDp6YD9BWm4x7AiZZWfxAVnt8t
KqiPl5Ord91ljV7BEthrDQOFssujAJ2oR3qMfQ2/S7xHkr3vwn3qLkzv6ZkQzyqT
8Xx6PtH/7dVn2BGdda9Yz8BCDkh6EoIfx4c2K7E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:04 2025 by rpki-client