Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/51042497-ce7c-3a58-905a-f03ca23a71b5.roa
File: 51042497-ce7c-3a58-905a-f03ca23a71b5.roa (raw, json)
Hash identifier: FqgKlUivJpGLN78NyP1pCYB4iAuTgPB9fhWGHvEaPaA=
Subject key identifier: 56:12:38:71:EE:39:D6:E2:32:E0:46:1F:DC:DE:C8:FB:21:EE:5E:39
Certificate issuer: /CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Certificate serial: 010D0C9F432858480434E6646493BCCAADBEC3C0
Authority key identifier: FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/51042497-ce7c-3a58-905a-f03ca23a71b5.roa
Signing time: Wed 27 Nov 2024 08:16:42 +0000
ROA not before: Wed 27 Nov 2024 08:16:42 +0000
ROA not after: Tue 25 Feb 2025 08:16:42 +0000
asID: 834
IP address blocks: 23.247.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:34:e6:64:64:93:bc:ca:ad:be:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
Validity
Not Before: Nov 27 08:16:42 2024 GMT
Not After : Feb 25 08:16:42 2025 GMT
Subject: CN=0310d136-1ba9-4cfa-bde7-7137bfb593c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:17:b5:2f:40:26:8e:2c:13:de:3a:6a:0b:
80:a7:0e:06:e8:8a:51:af:7e:dd:d8:df:a0:06:a6:
8b:d0:88:92:9b:26:3c:26:3f:83:31:ff:9e:74:1f:
12:17:d3:44:5d:a4:7f:82:ce:3d:79:ab:46:d0:fb:
05:25:9f:ec:ed:09:60:f3:f0:7f:32:49:4e:85:c1:
61:5e:5d:a9:5a:9b:3f:26:f6:e9:0a:02:31:45:46:
76:97:50:17:7e:6a:f1:91:25:94:51:a0:6f:e2:13:
91:3e:9d:0d:ba:ef:78:42:fa:d6:4b:cf:59:78:42:
f1:a1:6a:eb:2e:7d:cf:ba:c3:f1:c7:ad:bb:ff:75:
66:ad:16:30:58:2f:48:18:74:01:70:75:bd:86:ca:
63:53:60:a5:20:05:f4:e0:d0:96:a2:3f:e6:cf:41:
16:d9:f3:3f:1c:92:4d:b2:7e:40:fe:ad:aa:64:82:
3d:71:28:65:fe:cf:bb:84:42:26:90:54:70:98:ef:
ae:26:a6:5f:80:09:fe:86:fa:f8:8b:84:4f:af:e4:
f9:f9:5d:fe:bd:f4:95:db:16:2a:21:93:17:ec:85:
bb:41:8c:0e:a6:fd:92:09:34:8f:83:54:0e:54:7e:
31:88:cd:10:9b:5a:c5:2c:2b:09:1e:6b:09:33:45:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:38:71:EE:39:D6:E2:32:E0:46:1F:DC:DE:C8:FB:21:EE:5E:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/51042497-ce7c-3a58-905a-f03ca23a71b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.crl
X509v3 Authority Key Identifier:
keyid:FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a7:ba:ab:16:87:21:f7:a1:12:0d:de:5e:1f:ca:83:d5:ae:
6a:8b:bc:1b:4e:2e:f3:f0:c8:cd:af:8f:2a:ad:40:aa:b9:72:
31:24:97:ce:a7:80:eb:a1:8a:f0:64:59:66:4a:d3:05:84:c1:
d8:37:b5:a7:6f:a6:13:19:e2:1f:39:f4:56:45:da:95:97:6f:
fd:ae:db:fe:05:1c:78:3b:bc:9f:e9:ae:4f:45:11:17:bc:dc:
48:c5:c4:2e:7a:ea:aa:03:16:35:84:47:30:81:78:c4:27:20:
8c:66:0c:9e:ee:09:e3:39:0c:9b:b1:31:d4:e4:c3:5a:88:c5:
29:b0:37:ba:78:c2:9e:ba:e8:48:1a:38:56:fe:9e:cc:00:c0:
0b:95:51:0d:19:46:15:8b:ff:99:10:60:e2:75:b6:f4:c8:e3:
ec:aa:a6:88:b9:d8:6c:5c:5f:3b:07:8e:35:c7:bd:f0:bb:64:
bd:f7:d1:3c:5b:e7:e1:47:dd:5e:89:ca:f8:3c:1c:ae:04:44:
98:8e:d3:62:35:2f:a3:5b:ab:53:15:c0:7d:e8:56:25:1f:a9:
89:86:cc:de:f8:ea:d0:68:48:cd:8b:7d:cb:38:ac:9b:9a:bb:
89:ba:22:89:0a:59:dd:b5:04:12:8b:d6:59:f1:ba:0b:ef:76:
a9:d9:d0:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgENOZkZJO8yq2+w8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhlYmExYjYtODU1Yy00YjRjLThlY2MtMjM3NDZjYWQx
YWU5MB4XDTI0MTEyNzA4MTY0MloXDTI1MDIyNTA4MTY0MlowLzEtMCsGA1UEAxMk
MDMxMGQxMzYtMWJhOS00Y2ZhLWJkZTctNzEzN2JmYjU5M2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0cXtS9AJo4sE946aguApw4G6IpRr37d2N+g
BqaL0IiSmyY8Jj+DMf+edB8SF9NEXaR/gs49eatG0PsFJZ/s7Qlg8/B/MklOhcFh
Xl2pWps/JvbpCgIxRUZ2l1AXfmrxkSWUUaBv4hORPp0Nuu94QvrWS89ZeELxoWrr
Ln3PusPxx627/3VmrRYwWC9IGHQBcHW9hspjU2ClIAX04NCWoj/mz0EW2fM/HJJN
sn5A/q2qZII9cShl/s+7hEImkFRwmO+uJqZfgAn+hvr4i4RPr+T5+V3+vfSV2xYq
IZMX7IW7QYwOpv2SCTSPg1QOVH4xiM0Qm1rFLCsJHmsJM0WrbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYSOHHuOdbiMuBGH9zeyPsh7l45MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OGVi
YTFiNi04NTVjLTRiNGMtOGVjYy0yMzc0NmNhZDFhZTkvNTEwNDI0OTctY2U3Yy0z
YTU4LTkwNWEtZjAzY2EyM2E3MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzhlYmExYjYtODU1Yy00YjRjLThl
Y2MtMjM3NDZjYWQxYWU5Lzc4ZWJhMWI2LTg1NWMtNGI0Yy04ZWNjLTIzNzQ2Y2Fk
MWFlOS5jcmwwHwYDVR0jBBgwFoAU/krH7nNFcH5dReY+tADJjxlmPrcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83OGViYTFiNi04NTVjLTRiNGMtOGVjYy0yMzc0
NmNhZDFhZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/fJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGnuqsWhyH3oRIN3l4fyoPVrmqLvBtOLvPwyM2vjyqtQKq5cjEkl86n
gOuhivBkWWZK0wWEwdg3tadvphMZ4h859FZF2pWXb/2u2/4FHHg7vJ/prk9FERe8
3EjFxC566qoDFjWERzCBeMQnIIxmDJ7uCeM5DJuxMdTkw1qIxSmwN7p4wp666Ega
OFb+nswAwAuVUQ0ZRhWL/5kQYOJ1tvTI4+yqpoi52GxcXzsHjjXHvfC7ZL330Txb
5+FH3V6Jyvg8HK4ERJiO02I1L6Nbq1MVwH3oViUfqYmGzN746tBoSM2Lfcs4rJua
u4m6IokKWd21BBKL1lnxugvvdqnZ0Mg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:18 2025 by rpki-client