Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/d50892fb-0236-3fb9-9773-1a59b2c6b1fc.roa
File: d50892fb-0236-3fb9-9773-1a59b2c6b1fc.roa (raw, json)
Hash identifier: O/J6Gqia7YolP3kXB7bpKJ6QwPKKzQAjCfnfpsfQS6U=
Subject key identifier: 48:CD:4B:09:00:3D:B3:91:3F:9F:AD:EE:4C:70:91:34:76:E8:6A:B4
Certificate issuer: /CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
Certificate serial: 010D0C9F4328584841E338C522465F0CE0D65900
Authority key identifier: 38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/d50892fb-0236-3fb9-9773-1a59b2c6b1fc.roa
Signing time: Thu 19 Dec 2024 10:32:15 +0000
ROA not before: Thu 19 Dec 2024 10:32:15 +0000
ROA not after: Wed 19 Mar 2025 09:32:15 +0000
asID: 6079
IP address blocks: 23.189.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:41:e3:38:c5:22:46:5f:0c:e0:d6:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
Validity
Not Before: Dec 19 10:32:15 2024 GMT
Not After : Mar 19 09:32:15 2025 GMT
Subject: CN=50144fda-2dfd-49da-bf6b-f46ed67c0187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:53:92:e0:d6:9a:c3:a3:3f:2e:ac:80:27:
26:b0:b7:74:37:ae:21:a1:16:83:b9:4c:a7:16:52:
2e:a7:b2:60:b1:d0:ce:31:42:0c:dd:d4:f5:6d:98:
26:59:5c:ed:1a:d5:65:61:17:9e:f4:6b:f4:07:c3:
b1:1a:75:c9:e1:ee:dc:52:4c:ef:dc:fa:c4:96:0b:
24:9a:39:1f:05:eb:80:2b:cf:e7:05:ec:9c:5a:1f:
bf:8c:62:cf:20:36:c0:76:8a:c6:1e:04:b8:1f:69:
4c:10:ee:1f:f9:07:1c:20:f1:86:6b:39:da:b2:ba:
f8:31:38:0b:93:5f:87:77:9d:30:4c:ab:b9:7f:67:
bc:6e:8a:d9:18:c5:a7:9d:4a:f1:6b:84:eb:5b:a1:
7d:45:87:ed:45:80:04:89:c0:c6:18:82:5e:1b:c5:
54:65:35:e1:c6:72:d0:e8:92:27:4d:7d:fa:0d:f4:
56:20:0c:f9:76:3b:cb:ae:16:b8:3e:e1:86:c0:6e:
fa:8f:88:1b:34:2b:2b:c9:66:6b:cb:91:05:fc:74:
9b:33:5c:0f:b5:02:cc:71:8a:7c:98:6b:ed:cc:c7:
57:48:02:95:c1:0c:97:6c:ab:4d:34:16:fa:25:f0:
3c:09:ec:d7:2f:b1:01:87:48:1e:ad:3b:0b:78:4e:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:4B:09:00:3D:B3:91:3F:9F:AD:EE:4C:70:91:34:76:E8:6A:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/d50892fb-0236-3fb9-9773-1a59b2c6b1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl
X509v3 Authority Key Identifier:
keyid:38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:9d:06:39:e2:2d:0b:7e:84:ff:8c:d5:60:af:33:c6:98:bf:
bf:53:27:84:67:4a:30:16:47:dc:0d:70:f0:a1:bd:a9:95:ec:
61:6a:76:5b:ba:7f:a4:00:ee:79:65:32:05:12:7a:d1:5e:ab:
0e:62:94:09:f2:13:44:e9:9c:ae:ab:d3:38:3e:22:22:c5:9f:
7a:1b:b0:9f:fd:f1:40:48:89:7d:94:cc:77:2f:2d:17:70:74:
98:b5:9c:c1:f6:4f:85:e0:b5:14:d0:da:bf:35:f7:e9:7e:f9:
16:a5:5f:e0:76:7c:b6:38:68:86:f5:01:a8:b2:3f:7a:30:45:
a9:5e:bd:f4:66:20:31:fa:07:34:81:88:1d:c2:8c:ef:85:07:
31:b9:30:43:70:fa:7b:7f:3e:d4:3f:2a:d5:79:32:e2:8f:e9:
cf:49:d2:46:16:fb:91:89:1e:3a:b8:94:df:16:9b:40:c2:cc:
17:13:6c:85:53:52:b4:26:a6:da:0b:77:f7:44:6d:e8:fe:26:
ff:28:a3:33:31:bd:a9:d1:ec:3b:50:f5:8f:ed:60:18:83:5c:
73:2b:a5:1e:fa:af:6b:22:37:42:49:53:80:80:ec:32:07:fe:
00:95:c4:06:78:07:07:71:68:19:34:75:64:83:d1:28:db:4b:
b3:d0:80:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhB4zjFIkZfDODWWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQxMWE2YjMtODA1OC00ZTk1LTllOWMtMjBjMGE0NDJm
YjQ3MB4XDTI0MTIxOTEwMzIxNVoXDTI1MDMxOTA5MzIxNVowLzEtMCsGA1UEAxMk
NTAxNDRmZGEtMmRmZC00OWRhLWJmNmItZjQ2ZWQ2N2MwMTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHxTkuDWmsOjPy6sgCcmsLd0N64hoRaDuUyn
FlIup7JgsdDOMUIM3dT1bZgmWVztGtVlYRee9Gv0B8OxGnXJ4e7cUkzv3PrElgsk
mjkfBeuAK8/nBeycWh+/jGLPIDbAdorGHgS4H2lMEO4f+QccIPGGaznasrr4MTgL
k1+Hd50wTKu5f2e8borZGMWnnUrxa4TrW6F9RYftRYAEicDGGIJeG8VUZTXhxnLQ
6JInTX36DfRWIAz5djvLrha4PuGGwG76j4gbNCsryWZry5EF/HSbM1wPtQLMcYp8
mGvtzMdXSAKVwQyXbKtNNBb6JfA8CezXL7EBh0gerTsLeE6qPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjNSwkAPbORP5+t7kxwkTR26Gq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZDEx
YTZiMy04MDU4LTRlOTUtOWU5Yy0yMGMwYTQ0MmZiNDcvZDUwODkyZmItMDIzNi0z
ZmI5LTk3NzMtMWE1OWIyYzZiMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmQxMWE2YjMtODA1OC00ZTk1LTll
OWMtMjBjMGE0NDJmYjQ3LzZkMTFhNmIzLTgwNTgtNGU5NS05ZTljLTIwYzBhNDQy
ZmI0Ny5jcmwwHwYDVR0jBBgwFoAUONOWjlwX2dXIepXu6wRUn3HAxl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82ZDExYTZiMy04MDU4LTRlOTUtOWU5Yy0yMGMw
YTQ0MmZiNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHidBjniLQt+hP+M1WCvM8aYv79TJ4RnSjAWR9wNcPChvamV7GFqdlu6
f6QA7nllMgUSetFeqw5ilAnyE0TpnK6r0zg+IiLFn3obsJ/98UBIiX2UzHcvLRdw
dJi1nMH2T4XgtRTQ2r819+l++RalX+B2fLY4aIb1AaiyP3owRalevfRmIDH6BzSB
iB3CjO+FBzG5MENw+nt/PtQ/KtV5MuKP6c9J0kYW+5GJHjq4lN8Wm0DCzBcTbIVT
UrQmptoLd/dEbej+Jv8oozMxvanR7DtQ9Y/tYBiDXHMrpR76r2siN0JJU4CA7DIH
/gCVxAZ4BwdxaBk0dWSD0SjbS7PQgBI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:22:44 2025 by rpki-client