Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b1a48b-25f3-3296-8040-1cb2777e2651.roa
File: 13b1a48b-25f3-3296-8040-1cb2777e2651.roa (raw, json)
Hash identifier: bili7IgAPbkCl5QoyX3VeTLFzsdTWby+rtLOxKL3Dzo=
Subject key identifier: 2E:87:B0:9F:57:19:03:86:2D:3B:BE:77:65:C0:72:EC:C0:D8:D1:EC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285846A3BFEF5B041D039E36189B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b1a48b-25f3-3296-8040-1cb2777e2651.roa
Signing time: Tue 23 Jul 2024 12:00:00 +0000
ROA not before: Tue 23 Jul 2024 12:00:00 +0000
ROA not after: Mon 16 Sep 2024 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a3:bf:ef:5b:04:1d:03:9e:36:18:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jul 23 12:00:00 2024 GMT
Not After : Sep 16 04:00:00 2024 GMT
Subject: CN=c5c298f5-d452-4596-9505-af3254129b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:9e:e1:dc:c4:60:75:52:70:38:86:20:21:
40:a4:30:fa:74:a3:7c:ab:30:bf:30:03:80:63:9b:
82:b9:b7:1c:43:7f:f8:53:1b:f7:a2:08:50:67:2a:
eb:12:19:6a:a4:52:76:af:c0:42:68:07:03:d3:7d:
e4:48:1a:37:4b:db:02:30:9a:dd:0f:ba:88:ed:28:
79:ff:53:e4:ce:d5:21:4d:f0:ee:50:b9:38:64:0e:
c0:5b:05:14:7d:76:91:0a:8b:c7:76:ef:3a:b1:09:
ec:25:f1:73:64:33:6f:4d:92:23:c0:6b:f0:ea:7e:
89:53:7a:ad:82:cf:33:a5:90:d0:ce:db:4c:88:fe:
88:01:4c:ec:d5:50:12:6e:3a:51:23:7c:3b:06:38:
cd:da:64:fe:89:87:ed:d3:c8:98:53:05:04:41:56:
91:47:02:73:f0:7c:c8:91:21:ec:53:e5:14:96:48:
61:47:eb:0a:42:63:cf:cc:ec:49:fa:fc:d5:3c:51:
aa:2c:bf:58:fa:d3:03:0a:5c:db:88:47:99:97:e8:
1c:5e:94:bd:e1:28:09:5c:2c:f5:18:90:fa:40:19:
50:23:75:6a:0a:02:8b:1d:68:27:a5:3a:a3:97:ca:
34:05:30:04:f8:10:cf:2c:e8:58:9f:a2:29:51:ca:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:87:B0:9F:57:19:03:86:2D:3B:BE:77:65:C0:72:EC:C0:D8:D1:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13b1a48b-25f3-3296-8040-1cb2777e2651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c5:56:a0:66:d9:4e:18:65:dc:af:4a:f6:f2:46:2a:de:32:
59:6b:42:2c:e9:be:26:90:0c:7a:99:3e:f0:4d:c3:bb:97:ef:
db:2a:00:35:a9:d0:02:bd:b2:51:c3:cf:83:5a:af:1b:00:26:
b0:c2:d5:00:61:67:5a:ce:e5:83:07:5a:69:5c:01:60:fc:fa:
cd:59:f9:f6:7c:12:4e:3e:37:22:14:c1:7f:1d:c3:78:bf:71:
ee:e9:d5:8a:d0:9a:df:c7:72:30:ae:d8:21:f1:f3:c1:5d:90:
cb:1f:3d:c7:91:c0:d0:53:a7:3f:31:99:7d:59:3b:09:8f:7b:
fc:25:73:28:3e:70:2a:c1:c0:75:e2:29:94:16:4c:3f:fc:f0:
dc:aa:f4:bf:99:d9:f0:c7:c9:38:d8:b0:b0:a3:75:ed:3b:4f:
82:73:01:07:20:83:b4:23:82:d6:2d:31:76:d8:fc:cc:ca:f8:
a8:43:a0:81:ec:b3:72:6d:9c:ff:08:47:a4:43:7a:c1:fd:42:
80:3a:81:80:b5:d1:ac:bb:be:a4:dc:d2:04:d2:ab:6b:4b:02:
7a:85:40:a6:dc:14:fc:87:8f:14:cb:94:1e:6f:4b:f6:3c:b7:
57:11:06:a6:6f:f3:1d:cd:a4:eb:2e:4b:f6:1d:f2:b4:29:57:
5f:84:9c:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEajv+9bBB0DnjYYmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDcyMzEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YzVjMjk4ZjUtZDQ1Mi00NTk2LTk1MDUtYWYzMjU0MTI5YjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxee4dzEYHVScDiGICFApDD6dKN8qzC/MAOA
Y5uCubccQ3/4Uxv3oghQZyrrEhlqpFJ2r8BCaAcD033kSBo3S9sCMJrdD7qI7Sh5
/1PkztUhTfDuULk4ZA7AWwUUfXaRCovHdu86sQnsJfFzZDNvTZIjwGvw6n6JU3qt
gs8zpZDQzttMiP6IAUzs1VASbjpRI3w7BjjN2mT+iYft08iYUwUEQVaRRwJz8HzI
kSHsU+UUlkhhR+sKQmPPzOxJ+vzVPFGqLL9Y+tMDClzbiEeZl+gcXpS94SgJXCz1
GJD6QBlQI3VqCgKLHWgnpTqjl8o0BTAE+BDPLOhYn6IpUconCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6HsJ9XGQOGLTu+d2XAcuzA2NHsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTNiMWE0OGItMjVmMy0z
Mjk2LTgwNDAtMWNiMjc3N2UyNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTFVqBm2U4YZdyvSvbyRireMllrQizpviaQDHqZPvBNw7uX79sqADWp
0AK9slHDz4NarxsAJrDC1QBhZ1rO5YMHWmlcAWD8+s1Z+fZ8Ek4+NyIUwX8dw3i/
ce7p1YrQmt/HcjCu2CHx88FdkMsfPceRwNBTpz8xmX1ZOwmPe/wlcyg+cCrBwHXi
KZQWTD/88Nyq9L+Z2fDHyTjYsLCjde07T4JzAQcgg7QjgtYtMXbY/MzK+KhDoIHs
s3JtnP8IR6RDesH9QoA6gYC10ay7vqTc0gTSq2tLAnqFQKbcFPyHjxTLlB5vS/Y8
t1cRBqZv8x3NpOsuS/Yd8rQpV1+EnKU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:39 2025 by rpki-client