Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/a52887d9-19cb-3009-816d-c46419b885b9.roa
File: a52887d9-19cb-3009-816d-c46419b885b9.roa (raw, json)
Hash identifier: B49OljjR4yWw7MnvaS+WB0jDIYULyHolDJPflvoXhGo=
Subject key identifier: 2D:7B:A7:AE:04:18:D3:FD:F9:0C:14:79:F9:6C:EB:C5:64:36:61:84
Certificate issuer: /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Certificate serial: 010D0C9F4328584841E56B06263B1447AB4E3260
Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/a52887d9-19cb-3009-816d-c46419b885b9.roa
Signing time: Thu 19 Dec 2024 10:36:41 +0000
ROA not before: Thu 19 Dec 2024 10:36:41 +0000
ROA not after: Wed 19 Mar 2025 09:36:41 +0000
asID: 3320
IP address blocks: 23.187.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:41:e5:6b:06:26:3b:14:47:ab:4e:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Validity
Not Before: Dec 19 10:36:41 2024 GMT
Not After : Mar 19 09:36:41 2025 GMT
Subject: CN=2a47a100-da58-48de-b614-925da48d07ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:f6:ea:6b:20:f5:3b:5f:a0:ec:10:a4:ac:
de:0c:83:ea:d4:2e:bb:cd:1d:82:b1:85:9a:4f:cd:
48:d0:a5:94:29:ab:82:a0:d9:ef:9f:96:38:50:09:
17:ae:b6:02:35:5e:c6:9c:81:a1:42:30:6e:38:4b:
df:23:81:1e:13:ff:3a:77:be:d3:1d:87:6d:a1:e3:
7f:de:a6:e8:51:0b:9d:cf:00:e3:1b:9f:74:0f:f9:
d4:fe:c9:31:da:f2:e7:48:1c:c9:05:0b:e2:28:7a:
61:c2:66:b2:72:93:02:2d:bb:07:64:3a:65:d6:cc:
a5:29:15:e8:e6:e8:b8:74:30:ac:8e:27:05:b0:85:
cd:0c:d3:bf:22:77:67:ae:1e:17:0a:c1:42:73:51:
92:22:e6:58:39:c8:6f:8b:9b:5c:1c:83:7b:57:53:
85:86:3c:51:6f:6e:f3:0c:d6:e1:20:dd:b7:36:ba:
f7:80:a5:69:2d:13:14:9a:a8:a5:80:18:c7:8e:20:
af:4d:7f:f6:73:a0:f2:ca:3e:3b:e1:3c:70:f0:7f:
79:31:c7:38:a6:e6:f5:c0:68:90:8a:14:53:e2:e8:
50:4f:39:7f:40:c5:5b:ad:32:de:96:5c:13:85:fe:
1f:d1:f4:01:e5:63:ce:46:d6:6a:b2:c0:e6:17:ee:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:A7:AE:04:18:D3:FD:F9:0C:14:79:F9:6C:EB:C5:64:36:61:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/a52887d9-19cb-3009-816d-c46419b885b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl
X509v3 Authority Key Identifier:
keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a2:68:7f:f1:2d:d0:d6:68:ad:7e:ab:19:18:26:52:4c:6a:
cf:cd:16:8a:d9:c9:7e:f3:1d:bf:81:55:1e:f8:3c:91:e9:09:
ef:4d:57:5e:bc:6e:84:5a:c4:e8:1a:75:d8:c3:89:73:e8:7b:
32:10:f2:32:8c:d5:f6:46:0b:71:98:27:16:81:b2:db:74:54:
0c:c0:4c:69:88:31:80:1b:14:46:a3:d8:1a:b2:1e:2c:2c:08:
7a:31:db:d5:b5:cf:23:81:e2:37:4b:96:21:35:b8:b2:43:79:
ba:80:05:a0:01:1b:cb:f0:f6:a4:07:04:3c:fc:a1:82:b1:d9:
8f:88:29:15:b2:18:5e:cf:81:58:2f:9a:10:cb:1a:ae:0f:1e:
1f:e7:cf:b8:ce:b9:aa:8d:6b:41:a6:44:4f:6b:9e:e0:3b:20:
32:c8:cb:50:ac:66:ef:18:b6:59:79:b2:60:87:90:dc:6b:33:
c2:8e:61:9b:31:af:96:57:8c:c7:3f:bd:84:de:f6:32:fb:6d:
d9:e6:5c:4d:5c:5c:62:c8:5f:dc:89:2a:43:cf:fc:95:f1:46:
91:57:3f:90:53:7f:3a:54:86:89:04:c3:c8:de:4d:8b:71:aa:
00:98:9d:19:d9:35:c6:bd:8f:dc:99:d6:31:7b:64:1f:cb:87:
a3:14:c2:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhB5WsGJjsUR6tOMmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3
NGFhMB4XDTI0MTIxOTEwMzY0MVoXDTI1MDMxOTA5MzY0MVowLzEtMCsGA1UEAxMk
MmE0N2ExMDAtZGE1OC00OGRlLWI2MTQtOTI1ZGE0OGQwN2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaL26msg9TtfoOwQpKzeDIPq1C67zR2CsYWa
T81I0KWUKauCoNnvn5Y4UAkXrrYCNV7GnIGhQjBuOEvfI4EeE/86d77THYdtoeN/
3qboUQudzwDjG590D/nU/skx2vLnSBzJBQviKHphwmaycpMCLbsHZDpl1sylKRXo
5ui4dDCsjicFsIXNDNO/Indnrh4XCsFCc1GSIuZYOchvi5tcHIN7V1OFhjxRb27z
DNbhIN23Nrr3gKVpLRMUmqilgBjHjiCvTX/2c6Dyyj474Txw8H95Mcc4pub1wGiQ
ihRT4uhQTzl/QMVbrTLellwThf4f0fQB5WPORtZqssDmF+4DEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC17p64EGNP9+QwUefls68VkNmGEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3
MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvYTUyODg3ZDktMTljYi0z
MDA5LTgxNmQtYzQ2NDE5Yjg4NWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz
MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz
NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw
ZGU0Mzc0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7soMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSiaH/xLdDWaK1+qxkYJlJMas/NForZyX7zHb+BVR74PJHpCe9NV168
boRaxOgaddjDiXPoezIQ8jKM1fZGC3GYJxaBstt0VAzATGmIMYAbFEaj2BqyHiws
CHox29W1zyOB4jdLliE1uLJDebqABaABG8vw9qQHBDz8oYKx2Y+IKRWyGF7PgVgv
mhDLGq4PHh/nz7jOuaqNa0GmRE9rnuA7IDLIy1CsZu8Ytll5smCHkNxrM8KOYZsx
r5ZXjMc/vYTe9jL7bdnmXE1cXGLIX9yJKkPP/JXxRpFXP5BTfzpUhokEw8jeTYtx
qgCYnRnZNca9j9yZ1jF7ZB/Lh6MUwv8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:30:34 2025 by rpki-client