Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a97f935a-beae-3c1c-8e6c-90b1195408ff.roa
File: a97f935a-beae-3c1c-8e6c-90b1195408ff.roa (raw, json)
Hash identifier: TAshHEEWc4wcdafZ4noMmKcn8dOcwFTPnp8kmmZc2Mc=
Subject key identifier: A1:DD:B4:0A:5A:21:7A:85:85:20:F1:69:B2:BA:3C:2C:58:55:0E:D4
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285844D5AFCB2B98FE1636924511C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a97f935a-beae-3c1c-8e6c-90b1195408ff.roa
Signing time: Fri 09 Feb 2024 14:00:30 +0000
ROA not before: Fri 09 Feb 2024 14:00:30 +0000
ROA not after: Thu 09 May 2024 13:00:30 +0000
asID: 54600
IP address blocks: 69.165.76.0/23 maxlen: 24
107.151.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d5:af:cb:2b:98:fe:16:36:92:45:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 9 14:00:30 2024 GMT
Not After : May 9 13:00:30 2024 GMT
Subject: CN=66372b07-bed3-458e-9a37-824f72a3197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:db:09:9b:a9:1d:87:e3:50:a6:12:eb:52:55:
87:c8:70:a5:93:bc:b5:a9:5d:26:7c:65:ae:4c:50:
b4:d7:b5:f9:da:4a:f2:0f:e9:4a:81:bb:aa:ec:a7:
e2:05:7a:13:a3:8c:9e:9a:31:2b:39:6c:74:c3:bb:
c0:69:24:af:6c:07:9a:81:f5:18:9a:86:48:0c:f2:
c2:19:94:4f:56:03:f2:48:a4:19:d4:55:97:a5:3d:
b2:86:f1:ad:6c:3d:6a:a1:db:99:f1:29:97:b8:bb:
42:96:dc:bf:ef:97:56:5e:d4:d6:a2:4f:5e:1c:bf:
08:41:30:6e:3c:f0:f5:43:f3:b7:76:b9:03:3e:78:
be:29:d6:6d:7a:04:34:c8:1d:74:0e:20:04:1e:f9:
72:b5:90:ee:e5:6d:26:ca:56:84:6f:7c:7a:91:94:
95:27:d5:81:ff:fa:70:35:a5:0c:d9:bd:b3:41:40:
91:ec:c0:f9:cb:d4:66:9a:37:d6:f3:0d:9b:79:74:
54:5e:86:7e:7c:bc:16:f3:3c:7c:75:8b:ec:c0:77:
3b:c6:31:dc:74:e8:b0:bb:ed:eb:1d:63:46:19:19:
08:ec:2b:a9:da:42:b9:bf:49:43:05:f4:2e:9f:ed:
17:a5:f1:5f:40:73:69:70:80:e2:ee:fb:0f:99:50:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DD:B4:0A:5A:21:7A:85:85:20:F1:69:B2:BA:3C:2C:58:55:0E:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a97f935a-beae-3c1c-8e6c-90b1195408ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
69.165.76.0/23
107.151.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:52:69:e5:6d:2d:56:2f:48:a1:0d:7a:e1:e7:de:07:51:d9:
8c:12:e9:98:6e:22:d2:bb:2d:f1:df:26:87:26:ea:58:bd:0a:
34:17:5e:4b:b3:c6:44:03:2c:8f:6b:a2:a9:81:41:87:8d:b3:
94:9b:f6:22:93:2e:8f:0d:fa:12:1f:1b:fe:fa:51:3d:89:61:
3d:77:b2:7b:80:ca:72:f9:e5:56:0c:fe:f5:da:fe:b9:7e:e4:
d1:6d:9f:ff:2f:a1:a9:7d:c3:13:19:b1:05:de:9d:ea:9d:b9:
7b:c2:d1:ab:ff:bc:72:33:bd:52:bb:99:1e:89:d3:91:70:d9:
e0:8f:80:1e:17:90:be:9c:fa:d1:f2:19:d2:f9:4d:fd:a4:62:
20:68:a9:ef:f4:51:8e:5b:0e:23:cf:ff:e0:49:2a:7e:60:2e:
b7:d7:24:2b:84:e6:f3:ea:11:bc:ab:88:63:ee:75:3b:51:5d:
19:f7:a5:0e:0f:43:b6:01:90:2a:42:2b:62:6a:e2:7e:4c:8e:
4b:45:01:0f:4c:b4:a7:0d:fd:2e:c3:d8:fe:62:96:83:81:85:
d9:4f:90:0d:01:02:94:5e:d9:a0:87:bd:06:4d:3b:4a:d8:73:
35:3c:be:ea:ae:c0:bf:b4:08:ba:69:17:3a:63:f0:da:b5:03:
eb:f1:9b:5e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWETVr8srmP4WNpJFEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MDIwOTE0MDAzMFoXDTI0MDUwOTEzMDAzMFowLzEtMCsGA1UEAxMk
NjYzNzJiMDctYmVkMy00NThlLTlhMzctODI0ZjcyYTMxOTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdsJm6kdh+NQphLrUlWHyHClk7y1qV0mfGWu
TFC017X52kryD+lKgbuq7KfiBXoTo4yemjErOWx0w7vAaSSvbAeagfUYmoZIDPLC
GZRPVgPySKQZ1FWXpT2yhvGtbD1qoduZ8SmXuLtClty/75dWXtTWok9eHL8IQTBu
PPD1Q/O3drkDPni+KdZtegQ0yB10DiAEHvlytZDu5W0mylaEb3x6kZSVJ9WB//pw
NaUM2b2zQUCR7MD5y9RmmjfW8w2beXRUXoZ+fLwW8zx8dYvswHc7xjHcdOiwu+3r
HWNGGRkI7Cup2kK5v0lDBfQun+0XpfFfQHNpcIDi7vsPmVBwUQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKHdtApaIXqFhSDxabK6PCxYVQ7UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYTk3ZjkzNWEtYmVhZS0z
YzFjLThlNmMtOTBiMTE5NTQwOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBRaVMAwQA
a5f7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADZSaeVtLVYvSKENeuHn3gdR2YwS6ZhuItK7LfHfJocm6li9
CjQXXkuzxkQDLI9roqmBQYeNs5Sb9iKTLo8N+hIfG/76UT2JYT13snuAynL55VYM
/vXa/rl+5NFtn/8voal9wxMZsQXeneqduXvC0av/vHIzvVK7mR6J05Fw2eCPgB4X
kL6c+tHyGdL5Tf2kYiBoqe/0UY5bDiPP/+BJKn5gLrfXJCuE5vPqEbyriGPudTtR
XRn3pQ4PQ7YBkCpCK2Jq4n5MjktFAQ9MtKcN/S7D2P5iloOBhdlPkA0BApRe2aCH
vQZNO0rYczU8vuquwL+0CLppFzpj8Nq1A+vxm14=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:05 2024 by rpki-client on console-fra.rpki-client.org