Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7c3ea0dc-bea7-3240-852d-488e3868906a.roa
File: 7c3ea0dc-bea7-3240-852d-488e3868906a.roa (raw, json)
Hash identifier: VLknOr7gWSzulXv/h6N687gMRD9UDRajXDY2BCM7fOM=
Subject key identifier: 68:6D:59:3B:E0:D9:EF:E4:DE:08:8C:F5:F2:FE:73:DD:B1:9D:13:09
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F4328584851A576A7B3A202C55DB9EB80
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7c3ea0dc-bea7-3240-852d-488e3868906a.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 8100
IP address blocks: 66.248.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:76:a7:b3:a2:02:c5:5d:b9:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=0ed24631-3063-4248-809b-c4007cf6aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:6f:86:c6:30:59:d4:d4:ba:c9:39:47:3c:
0f:63:10:6a:f6:26:67:d1:bb:7b:a3:4e:45:36:f5:
84:45:8e:52:01:55:7c:d4:26:70:9d:1d:fa:2d:a5:
5f:04:1b:ff:12:59:2b:20:db:a1:d2:71:3f:2f:51:
7c:da:f5:06:64:8b:17:09:88:03:b3:ce:fb:fd:21:
35:2c:62:49:ea:9d:dd:b0:78:2b:67:ea:73:79:f2:
ab:e1:f0:16:4b:fc:e8:f4:78:19:ab:0d:46:8b:25:
2a:a3:55:3f:90:71:ed:5c:d2:38:ce:97:dd:87:58:
75:dc:d9:10:85:8f:bd:55:d6:74:a5:90:75:1c:b1:
25:8b:f2:dc:29:45:46:a7:40:44:ad:db:5a:3c:12:
0e:b7:cd:5f:a2:f5:b7:16:00:ab:87:04:46:e3:4f:
dd:ae:60:10:c8:42:d1:a3:97:c1:24:b4:54:ff:33:
98:7a:67:1e:b2:cf:23:74:e6:d9:51:4d:26:1d:c4:
a9:eb:48:bb:71:5c:26:f2:4c:d3:0f:50:07:6b:c1:
12:9c:fc:80:5a:e9:09:57:67:ca:39:ca:6a:16:86:
b3:4f:df:ad:fe:db:69:78:e9:a4:9a:6b:42:c0:e2:
b0:8c:4d:e7:0f:f2:3e:af:3c:55:db:b1:fd:f3:64:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:59:3B:E0:D9:EF:E4:DE:08:8C:F5:F2:FE:73:DD:B1:9D:13:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7c3ea0dc-bea7-3240-852d-488e3868906a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:58:ea:2c:89:4d:5f:8f:52:f3:03:3d:fb:74:9e:07:69:4a:
d7:fb:40:43:91:f4:0f:06:e8:ae:52:9b:2e:78:39:57:4c:3c:
63:15:93:b8:c6:f2:49:f0:de:b0:f1:f1:21:2e:83:53:5e:70:
51:48:48:15:5a:2e:a3:6e:23:15:17:d7:f7:35:1c:9b:d7:7c:
60:5f:45:c3:3e:0b:2b:ce:b2:1d:c3:f4:51:c0:1c:05:91:5b:
21:50:5d:64:c9:39:62:17:f3:0c:59:5c:75:c0:a5:ab:12:75:
92:54:35:e6:53:80:c6:9f:9b:56:3f:ee:5f:69:37:54:61:1c:
eb:2e:d3:48:f6:ba:5b:97:95:d3:14:a5:d6:f5:a0:e0:b2:d9:
b5:3b:8a:9c:c5:ff:6b:82:85:ac:13:c5:27:81:87:a4:dc:51:
2f:19:4e:0a:ac:86:de:22:7c:5e:85:7a:ee:82:e9:dc:26:14:
08:10:a3:05:fc:b3:09:a1:1a:e8:61:37:86:b3:38:fd:df:c5:
0b:9d:8c:9f:8f:37:e2:05:65:d5:99:65:b2:29:bf:70:d1:d1:
06:7f:d6:0b:bb:79:20:6a:f4:79:19:77:8f:a3:c8:0b:17:56:
1b:b1:f4:45:e9:1e:e4:db:c9:d5:53:47:80:cf:34:dc:2b:a0:
03:08:6d:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXans6ICxV2564AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk
M2RmMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
MGVkMjQ2MzEtMzA2My00MjQ4LTgwOWItYzQwMDdjZjZhYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRNvhsYwWdTUusk5RzwPYxBq9iZn0bt7o05F
NvWERY5SAVV81CZwnR36LaVfBBv/ElkrINuh0nE/L1F82vUGZIsXCYgDs877/SE1
LGJJ6p3dsHgrZ+pzefKr4fAWS/zo9HgZqw1GiyUqo1U/kHHtXNI4zpfdh1h13NkQ
hY+9VdZ0pZB1HLEli/LcKUVGp0BErdtaPBIOt81fovW3FgCrhwRG40/drmAQyELR
o5fBJLRU/zOYemcess8jdObZUU0mHcSp60i7cVwm8kzTD1AHa8ESnPyAWukJV2fK
OcpqFoazT9+t/ttpeOmkmmtCwOKwjE3nD/I+rzxV27H982TEGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhtWTvg2e/k3giM9fL+c92xnRMJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm
YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvN2MzZWEwZGMtYmVhNy0z
MjQwLTg1MmQtNDg4ZTM4Njg5MDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5
MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1
ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx
MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxY6iyJTV+PUvMDPft0ngdpStf7QEOR9A8G6K5Smy54OVdMPGMVk7jG
8knw3rDx8SEug1NecFFISBVaLqNuIxUX1/c1HJvXfGBfRcM+CyvOsh3D9FHAHAWR
WyFQXWTJOWIX8wxZXHXApasSdZJUNeZTgMafm1Y/7l9pN1RhHOsu00j2uluXldMU
pdb1oOCy2bU7ipzF/2uChawTxSeBh6TcUS8ZTgqsht4ifF6Feu6C6dwmFAgQowX8
swmhGuhhN4azOP3fxQudjJ+PN+IFZdWZZbIpv3DR0QZ/1gu7eSBq9HkZd4+jyAsX
Vhux9EXpHuTbydVTR4DPNNwroAMIbf4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:32 2025 by rpki-client