Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa
File: 29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa (raw, json)
Hash identifier: NszPDt5NmI0oyIXUfCVyCV4DtCbPEWl+jpTG9GcUeH4=
Subject key identifier: 2A:74:C4:ED:4C:C9:97:A2:FD:D9:43:8E:7E:8D:5F:F0:4B:96:61:E7
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285843F38E56F5B64E4CA0121F27C0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa
Signing time: Mon 20 Nov 2023 14:00:20 +0000
ROA not before: Mon 20 Nov 2023 14:00:20 +0000
ROA not after: Sun 18 Feb 2024 14:00:20 +0000
asID: 60558
IP address blocks: 45.59.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f3:8e:56:f5:b6:4e:4c:a0:12:1f:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Nov 20 14:00:20 2023 GMT
Not After : Feb 18 14:00:20 2024 GMT
Subject: CN=ef3e727b-dfc7-4485-a725-a76eaacef933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:68:d2:e9:51:79:b3:48:98:6f:56:17:d0:
85:9d:85:1c:35:ef:4c:e7:db:eb:46:24:02:df:ae:
d4:e1:48:1c:8a:ac:2e:08:9b:6a:de:ce:69:27:ee:
83:c2:a9:64:b4:08:38:b3:9b:57:67:fb:17:4e:e5:
55:ea:cc:22:03:14:c6:3f:a4:d1:9d:3f:4b:63:e6:
40:8b:08:c5:c8:c4:5a:b6:4f:6d:5f:64:50:2e:5d:
4c:ea:0e:50:b7:2d:68:fb:77:2e:09:10:a3:ef:58:
7a:57:29:e3:a2:6a:7d:59:b7:45:77:0f:b8:d2:25:
e4:36:71:1b:24:26:a1:2f:a0:13:fd:56:7b:83:09:
3a:3c:86:d4:db:fa:0f:64:fa:fc:ae:9a:18:18:6a:
ab:e2:07:3d:fd:b7:60:c6:e4:08:0b:06:02:ba:98:
a9:c3:4f:e4:00:ed:ca:a0:03:8c:ed:55:b4:a3:f4:
e7:af:9f:82:b9:06:c5:c7:ae:bc:e4:d7:bc:c7:e7:
86:06:e7:e6:21:d6:f2:fa:fd:22:f2:f7:10:02:49:
1b:51:1d:88:c3:57:56:96:a7:43:9c:8e:3a:8a:ee:
96:e1:d8:7a:b3:d1:d2:f7:c0:36:81:b4:73:2a:af:
ad:3c:3a:7e:fa:15:33:ef:69:d2:c9:ec:c8:18:19:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:C4:ED:4C:C9:97:A2:FD:D9:43:8E:7E:8D:5F:F0:4B:96:61:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/29e64c7c-2ef3-32c3-b86f-201d9462ef63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a4:7f:ce:0b:91:77:da:ca:7a:33:de:ba:7e:de:3a:a3:93:
2b:b6:89:53:79:4e:57:ef:6c:b7:c6:bf:f7:c9:92:07:7f:22:
a1:8e:f0:48:7b:24:7b:3d:13:73:6e:98:06:42:80:72:a7:9a:
e6:a1:a8:94:36:07:e4:94:5a:42:f6:70:95:87:a0:e5:94:8b:
8b:2b:3e:69:ac:3f:a6:a5:7e:31:f6:6f:fb:33:15:61:a3:6e:
1e:71:18:67:80:24:a9:a3:9b:0e:40:22:dc:e6:27:aa:7e:9d:
a2:cb:b7:ec:e0:ab:fa:dd:6f:8d:40:22:b5:97:ac:05:74:27:
89:db:4f:17:39:f3:31:43:b3:b6:ea:7d:25:b3:92:97:fe:48:
e3:b7:36:62:7f:86:44:9e:be:b9:aa:9c:4d:07:fe:05:b0:a3:
5d:9b:3d:3d:c8:eb:39:ce:6f:9e:a8:8f:5c:e2:ae:66:63:39:
44:f9:b5:64:83:83:4c:79:4b:da:8e:c2:39:9f:f7:71:c0:39:
58:ba:e3:63:6a:1c:ee:c1:0f:f7:4b:07:cf:98:9a:9f:28:f3:
11:c0:25:83:0f:7c:93:ca:b3:89:be:fc:c9:b0:ae:09:44:a9:
6e:23:33:69:c2:fb:6d:e8:ad:4a:79:0b:e1:97:c5:f2:ca:08:
24:41:d3:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPzjlb1tk5MoBIfJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTIzMTEyMDE0MDAyMFoXDTI0MDIxODE0MDAyMFowLzEtMCsGA1UEAxMk
ZWYzZTcyN2ItZGZjNy00NDg1LWE3MjUtYTc2ZWFhY2VmOTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ho0ulRebNImG9WF9CFnYUcNe9M59vrRiQC
367U4UgciqwuCJtq3s5pJ+6DwqlktAg4s5tXZ/sXTuVV6swiAxTGP6TRnT9LY+ZA
iwjFyMRatk9tX2RQLl1M6g5Qty1o+3cuCRCj71h6Vynjomp9WbdFdw+40iXkNnEb
JCahL6AT/VZ7gwk6PIbU2/oPZPr8rpoYGGqr4gc9/bdgxuQICwYCupipw0/kAO3K
oAOM7VW0o/Tnr5+CuQbFx6685Ne8x+eGBufmIdby+v0i8vcQAkkbUR2Iw1dWlqdD
nI46iu6W4dh6s9HS98A2gbRzKq+tPDp++hUz72nSyezIGBlOmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCp0xO1MyZei/dlDjn6NX/BLlmHnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMjllNjRjN2MtMmVmMy0z
MmMzLWI4NmYtMjAxZDk0NjJlZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6kf84LkXfaynoz3rp+3jqjkyu2iVN5TlfvbLfGv/fJkgd/IqGO8Eh7
JHs9E3NumAZCgHKnmuahqJQ2B+SUWkL2cJWHoOWUi4srPmmsP6alfjH2b/szFWGj
bh5xGGeAJKmjmw5AItzmJ6p+naLLt+zgq/rdb41AIrWXrAV0J4nbTxc58zFDs7bq
fSWzkpf+SOO3NmJ/hkSevrmqnE0H/gWwo12bPT3I6znOb56oj1zirmZjOUT5tWSD
g0x5S9qOwjmf93HAOVi642NqHO7BD/dLB8+Ymp8o8xHAJYMPfJPKs4m+/MmwrglE
qW4jM2nC+23orUp5C+GXxfLKCCRB09I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:10 2024 by rpki-client on console-ams.rpki-client.org