Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa
File: 14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa (raw, json)
Hash identifier: pnyJBRBPm/K3hTea659E41+Bk2vH8bL38gInUCw1lGY=
Subject key identifier: 24:16:FE:00:02:33:13:A3:A0:9A:6E:7E:68:96:42:53:DB:22:12:76
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F43285843F923BC7E93016908733CF230
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa
Signing time: Wed 22 Nov 2023 14:00:21 +0000
ROA not before: Wed 22 Nov 2023 14:00:21 +0000
ROA not after: Tue 20 Feb 2024 14:00:21 +0000
asID: 14353
IP address blocks: 65.38.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f9:23:bc:7e:93:01:69:08:73:3c:f2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Nov 22 14:00:21 2023 GMT
Not After : Feb 20 14:00:21 2024 GMT
Subject: CN=adef85dc-d2a5-4dfd-b7fa-829625c67742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:33:84:51:b9:ae:ef:10:40:f0:4f:07:70:
3b:c1:94:b2:e1:e1:cb:38:99:a2:b6:80:e1:f9:77:
cc:8b:28:55:b5:6d:b3:9d:d6:45:15:95:5c:22:0b:
4f:4a:4e:41:40:3b:e1:bc:7c:ce:1f:46:8d:1f:e9:
8f:7d:fd:b0:ff:d8:15:e4:aa:ef:11:9f:b6:e4:f3:
34:ca:ec:59:a7:26:4a:db:57:e6:bb:b6:5c:17:92:
d4:b7:e3:5c:15:69:d3:d0:bb:d2:3c:d9:2b:9b:f5:
8d:68:77:71:fb:46:6a:ff:6f:88:32:f4:e3:b2:6e:
ec:01:09:79:4f:0a:24:f1:74:03:55:54:cf:98:77:
53:7f:a7:60:17:c4:64:54:c1:43:ab:60:28:1c:1e:
42:93:80:4b:5f:1f:e0:81:eb:91:b7:ff:a7:0c:c5:
69:45:91:08:28:98:5a:11:07:34:d5:2d:45:d3:b2:
44:67:8a:b0:d8:09:0c:b9:d6:99:da:0a:95:49:4d:
99:43:f9:a9:f4:94:51:87:cc:77:76:ac:0a:13:54:
2a:c6:89:a2:2a:26:6d:0b:19:4a:95:ea:1b:77:12:
dc:20:3f:ea:32:eb:93:fd:59:20:52:72:01:8d:79:
ea:fe:6a:a1:34:73:6d:92:ee:bc:d4:8b:b5:e0:9f:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:FE:00:02:33:13:A3:A0:9A:6E:7E:68:96:42:53:DB:22:12:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/14fb3fa8-aa0c-3aae-8d8d-5df0f6219ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
65.38.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:64:31:ac:b6:8d:c5:83:e7:ea:9b:78:f2:96:78:86:ae:a7:
a3:18:5d:0b:3b:a9:ef:93:11:d6:82:a8:f9:c6:da:17:9a:9a:
38:8a:7e:bb:3a:97:42:43:c1:44:49:fc:d8:e1:4e:6f:1a:02:
e5:58:4e:56:71:0e:b2:1b:36:a9:e5:9a:ea:b5:09:e1:0c:36:
ee:12:49:95:8a:ee:a5:87:ff:d1:78:86:08:29:d4:66:89:bc:
41:05:d1:b3:5e:6a:56:27:fb:78:e0:bd:81:f3:3b:e4:32:95:
e0:48:54:1b:f1:af:79:bd:ba:d3:0b:3f:91:89:28:33:2b:69:
99:3f:fd:18:20:02:b8:09:0c:10:a9:9a:38:58:04:5a:cc:c1:
be:29:12:47:65:00:4d:75:ce:f5:7f:f7:77:54:79:5b:17:21:
6d:b3:66:24:21:4f:b4:7a:18:69:2f:81:67:4e:7d:0e:ac:1a:
75:e3:98:6d:86:95:17:be:e6:a7:73:8f:61:d6:17:8a:11:0f:
ca:25:3f:fe:ab:15:53:50:53:74:61:75:70:db:0f:d0:8c:c6:
f8:27:ea:37:af:02:68:83:47:ca:2f:8a:21:73:65:d8:66:86:
86:96:7d:7a:a5:36:7d:2b:36:94:f8:e4:b4:cc:1e:1f:9e:e3:
ea:ff:04:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEP5I7x+kwFpCHM88jAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl
NWVjMB4XDTIzMTEyMjE0MDAyMVoXDTI0MDIyMDE0MDAyMVowLzEtMCsGA1UEAxMk
YWRlZjg1ZGMtZDJhNS00ZGZkLWI3ZmEtODI5NjI1YzY3NzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsREzhFG5ru8QQPBPB3A7wZSy4eHLOJmitoDh
+XfMiyhVtW2zndZFFZVcIgtPSk5BQDvhvHzOH0aNH+mPff2w/9gV5KrvEZ+25PM0
yuxZpyZK21fmu7ZcF5LUt+NcFWnT0LvSPNkrm/WNaHdx+0Zq/2+IMvTjsm7sAQl5
Twok8XQDVVTPmHdTf6dgF8RkVMFDq2AoHB5Ck4BLXx/ggeuRt/+nDMVpRZEIKJha
EQc01S1F07JEZ4qw2AkMudaZ2gqVSU2ZQ/mp9JRRh8x3dqwKE1QqxomiKiZtCxlK
leobdxLcID/qMuuT/VkgUnIBjXnq/mqhNHNtku681Iu14J/h/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQW/gACMxOjoJpufmiWQlPbIhJ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4
ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvMTRmYjNmYTgtYWEwYy0z
YWFlLThkOGQtNWRmMGY2MjE5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk
NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4
ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj
MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtkMay2jcWD5+qbePKWeIaup6MYXQs7qe+TEdaCqPnG2heamjiKfrs6
l0JDwURJ/NjhTm8aAuVYTlZxDrIbNqnlmuq1CeEMNu4SSZWK7qWH/9F4hggp1GaJ
vEEF0bNealYn+3jgvYHzO+QyleBIVBvxr3m9utMLP5GJKDMraZk//RggArgJDBCp
mjhYBFrMwb4pEkdlAE11zvV/93dUeVsXIW2zZiQhT7R6GGkvgWdOfQ6sGnXjmG2G
lRe+5qdzj2HWF4oRD8olP/6rFVNQU3RhdXDbD9CMxvgn6jevAmiDR8oviiFzZdhm
hoaWfXqlNn0rNpT45LTMHh+e4+r/BMo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org