Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f9f359c6-ad0b-39ff-8490-0be7b963f3f3.roa
File: f9f359c6-ad0b-39ff-8490-0be7b963f3f3.roa (raw, json)
Hash identifier: BWoK9hiI3Jhkn3Y4Mx0V/8IySOttFSUwR+7d1fPA/9Q=
Subject key identifier: AC:0E:43:EC:E5:79:07:FB:F8:22:ED:4E:98:37:30:B3:DC:4F:F2:DE
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858446339B17C3E8564B4920C2460
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f9f359c6-ad0b-39ff-8490-0be7b963f3f3.roa
Signing time: Sat 30 Dec 2023 14:00:21 +0000
ROA not before: Sat 30 Dec 2023 14:00:21 +0000
ROA not after: Fri 29 Mar 2024 13:00:21 +0000
asID: 11232
IP address blocks: 67.217.18.0/23 maxlen: 23
209.169.218.0/23 maxlen: 23
64.17.74.0/23 maxlen: 23
209.169.198.0/23 maxlen: 23
209.169.200.0/23 maxlen: 23
24.52.12.0/22 maxlen: 22
24.52.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:63:39:b1:7c:3e:85:64:b4:92:0c:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Dec 30 14:00:21 2023 GMT
Not After : Mar 29 13:00:21 2024 GMT
Subject: CN=86709d04-b08d-4136-b951-c293a55665fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:25:52:50:32:e3:8c:2c:91:c5:15:7a:2e:
8f:4f:27:89:43:81:31:f9:de:6c:eb:a5:23:e2:60:
3b:77:b2:87:98:4b:8b:6f:5d:4a:91:58:c3:28:ef:
38:8c:4d:90:f7:5d:f9:7a:92:7c:23:93:8f:0d:b9:
d0:18:54:d9:c2:80:29:e4:bd:22:ad:05:8a:52:d3:
53:76:e4:94:08:07:7f:28:57:9a:ba:f6:c9:09:7e:
a3:62:90:e0:12:6e:7a:f5:1b:3c:f3:6a:f9:1a:f1:
c7:d4:03:7b:44:1c:be:5e:cd:ae:ac:00:8f:f6:05:
b3:24:0d:cf:85:67:56:58:24:f6:ec:db:ba:24:0a:
5c:b2:45:b1:08:3a:24:f6:e7:4d:e1:a2:b3:d5:1d:
83:29:af:89:52:50:9d:0d:16:ea:af:68:e6:28:8f:
2c:36:0c:14:5f:9c:40:20:85:83:67:a5:84:6b:b0:
c4:14:55:6f:62:52:f6:44:96:c2:82:64:da:62:94:
22:b2:f7:ec:db:e0:56:b9:b1:b7:c9:30:a2:1b:df:
ba:90:c5:cd:6a:6e:20:a6:f6:15:32:06:75:9a:c8:
1e:ea:a6:4f:c4:a9:db:b7:09:cc:0d:9b:1b:98:1b:
a6:db:81:1a:00:dc:1c:3b:94:21:f4:ef:77:1f:70:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:43:EC:E5:79:07:FB:F8:22:ED:4E:98:37:30:B3:DC:4F:F2:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f9f359c6-ad0b-39ff-8490-0be7b963f3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.52.12.0-24.52.17.255
64.17.74.0/23
67.217.18.0/23
209.169.198.0-209.169.201.255
209.169.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:90:f2:01:33:6c:ed:51:78:9c:a5:d1:32:f8:94:81:35:b0:
1c:55:5d:8e:d6:38:73:4f:21:f3:d0:32:4c:ec:a6:82:d7:54:
0d:cc:c6:e4:bf:76:88:f4:4d:a5:bc:fe:83:d6:63:3a:41:23:
6f:bb:55:1e:73:89:fe:3a:10:01:56:4e:a4:f7:d0:36:18:4b:
af:34:23:83:53:06:6a:d4:27:54:ba:05:0f:08:20:3d:bf:66:
9b:07:80:c1:a6:d6:be:f8:ee:f5:60:30:6c:d9:ee:d9:4e:3e:
39:7d:48:5e:3e:ba:c1:9d:58:d4:12:f2:01:03:9b:44:01:37:
d0:dd:8b:9b:72:b6:50:2a:e7:a7:26:ed:7d:b8:74:64:93:84:
2f:a9:23:b9:e6:bc:3d:fd:34:15:83:c1:c4:07:4d:a0:28:6f:
89:10:5f:06:a7:b5:31:f4:00:fc:ea:20:24:31:15:bb:cb:b7:
d1:80:46:a6:78:1b:43:fe:2c:36:16:22:45:f6:58:51:0c:76:
b9:f9:57:50:0a:44:c0:f8:a7:c6:b1:fa:d6:c9:ea:2a:79:69:
d0:9c:77:5b:13:71:82:e7:70:07:45:bf:2e:83:f6:c5:3c:4e:
e7:98:66:8f:a4:ac:e9:e5:25:22:1c:98:e9:b9:7c:65:94:25:
ee:ad:72:87
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWERjObF8PoVktJIMJGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTIzMTIzMDE0MDAyMVoXDTI0MDMyOTEzMDAyMVowLzEtMCsGA1UEAxMk
ODY3MDlkMDQtYjA4ZC00MTM2LWI5NTEtYzI5M2E1NTY2NWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVklUlAy44wskcUVei6PTyeJQ4Ex+d5s66Uj
4mA7d7KHmEuLb11KkVjDKO84jE2Q9135epJ8I5OPDbnQGFTZwoAp5L0irQWKUtNT
duSUCAd/KFeauvbJCX6jYpDgEm569Rs882r5GvHH1AN7RBy+Xs2urACP9gWzJA3P
hWdWWCT27Nu6JApcskWxCDok9udN4aKz1R2DKa+JUlCdDRbqr2jmKI8sNgwUX5xA
IIWDZ6WEa7DEFFVvYlL2RJbCgmTaYpQisvfs2+BWubG3yTCiG9+6kMXNam4gpvYV
MgZ1msge6qZPxKnbtwnMDZsbmBum24EaANwcO5Qh9O93H3DsDwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFKwOQ+zleQf7+CLtTpg3MLPcT/LeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjlmMzU5YzYtYWQwYi0z
OWZmLTg0OTAtMGJlN2I5NjNmM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAIYNAwD
BAEYNBADBAFAEUoDBAFD2RIwDAMEAdGpxgMEAdGpyAMEAdGp2jBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8
kPIBM2ztUXicpdEy+JSBNbAcVV2O1jhzTyHz0DJM7KaC11QNzMbkv3aI9E2lvP6D
1mM6QSNvu1Uec4n+OhABVk6k99A2GEuvNCODUwZq1CdUugUPCCA9v2abB4DBpta+
+O71YDBs2e7ZTj45fUhePrrBnVjUEvIBA5tEATfQ3YubcrZQKuenJu19uHRkk4Qv
qSO55rw9/TQVg8HEB02gKG+JEF8Gp7Ux9AD86iAkMRW7y7fRgEameBtD/iw2FiJF
9lhRDHa5+VdQCkTA+KfGsfrWyeoqeWnQnHdbE3GC53AHRb8ug/bFPE7nmGaPpKzp
5SUiHJjpuXxllCXurXKH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:49 2024 by rpki-client on console-ams.rpki-client.org