Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41766517-4d88-3052-9e6f-09687550e521.roa
File: 41766517-4d88-3052-9e6f-09687550e521.roa (raw, json)
Hash identifier: LbnQQw3xug9M5zjloFVfAZ52Q+zKGZX8Nz64TBY14fw=
Subject key identifier: 58:97:D0:30:E7:EA:B9:90:3F:C8:4F:E3:09:9B:ED:4D:D7:25:BA:65
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285847CFF48F89C5360D5E107FA800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41766517-4d88-3052-9e6f-09687550e521.roa
Signing time: Fri 08 Nov 2024 15:05:02 +0000
ROA not before: Fri 08 Nov 2024 15:05:02 +0000
ROA not after: Thu 06 Feb 2025 15:05:02 +0000
asID: 81
IP address blocks: 198.86.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:cf:f4:8f:89:c5:36:0d:5e:10:7f:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Nov 8 15:05:02 2024 GMT
Not After : Feb 6 15:05:02 2025 GMT
Subject: CN=2c9cf1d6-58e8-496d-bd07-08fcc68ff8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:94:6e:7d:2d:6e:ed:fd:46:e3:e8:43:5a:
b4:70:a1:be:70:3a:ea:69:f6:f4:17:27:bd:37:38:
83:63:2d:7e:5a:62:af:d1:89:c6:86:c0:97:fb:58:
10:5e:e7:1b:3f:1a:39:28:e6:76:9e:59:66:0e:52:
c9:76:02:96:b4:97:10:2a:ae:3f:48:84:b0:a7:42:
53:e6:71:d9:b0:bf:63:2f:97:8d:c6:12:07:76:d5:
b7:82:57:0e:ef:15:52:7e:26:2b:87:9d:65:5a:13:
49:58:25:93:e1:48:c1:38:e0:4c:c1:46:d4:af:03:
8c:18:5d:ea:8a:ca:5e:f5:ab:9e:55:82:71:bb:ee:
87:4f:51:b2:ee:60:f2:38:00:eb:e1:c2:6a:e5:b6:
e7:26:5c:cb:91:6f:6d:89:f1:49:eb:22:3c:05:45:
a1:e6:1b:c7:4c:f0:63:70:20:e8:ae:20:8e:5d:3b:
f4:e5:c7:3d:72:f8:40:a3:8d:17:0b:f6:af:7b:3a:
be:51:43:92:27:d6:81:ba:fa:1b:0e:84:99:d4:ff:
4e:68:fb:a2:34:bb:e6:8b:3f:f1:32:cd:03:11:28:
f5:d3:e0:ce:aa:58:71:9b:8d:06:7a:9d:5e:f4:7c:
6e:dd:77:8a:1d:9c:d3:f0:2d:80:92:ba:77:81:e5:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:D0:30:E7:EA:B9:90:3F:C8:4F:E3:09:9B:ED:4D:D7:25:BA:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/41766517-4d88-3052-9e6f-09687550e521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.86.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:f8:a3:6c:12:6b:df:e5:bd:fe:26:f9:16:af:51:ac:ed:fd:
60:1d:af:72:f1:5a:48:e7:30:dd:b6:15:b6:ad:90:6d:38:39:
6b:32:9c:91:37:b1:b1:27:d4:64:8d:4c:27:39:35:5e:6e:00:
c2:de:b5:4c:7e:e4:80:ef:d9:8c:6f:4a:da:fa:97:26:00:da:
1f:f0:ba:ad:97:a6:45:37:6e:7a:a2:2a:dc:63:0a:9f:14:e1:
f2:cc:78:de:89:0c:bf:fc:3f:d5:8f:b4:c9:ab:38:61:8a:7a:
42:54:0f:8d:da:c5:e7:e6:43:55:62:db:c9:e7:fd:78:09:28:
fb:d3:21:f7:a1:77:74:35:01:aa:98:e3:33:62:23:f9:e4:7a:
98:83:c6:6f:6e:84:6b:10:58:72:49:ec:50:9a:2d:1d:73:46:
c8:43:ec:8c:06:c8:13:ea:92:ab:a4:0c:af:42:02:50:88:56:
d7:ca:f7:d5:66:9b:3f:07:ec:9f:a9:eb:25:cd:53:ec:45:7e:
3c:81:9f:6e:71:26:f3:0a:aa:c5:cf:2f:08:1e:44:1e:da:b1:
eb:70:a1:2d:56:70:37:92:cc:66:45:0a:05:ff:c0:5a:44:4a:
60:f0:e1:3d:d3:c3:b8:ae:9e:1c:3b:41:00:e0:db:55:77:dc:
23:b1:65:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9I+JxTYNXhB/qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDUwMloXDTI1MDIwNjE1MDUwMlowLzEtMCsGA1UEAxMk
MmM5Y2YxZDYtNThlOC00OTZkLWJkMDctMDhmY2M2OGZmOGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreGUbn0tbu39RuPoQ1q0cKG+cDrqafb0Fye9
NziDYy1+WmKv0YnGhsCX+1gQXucbPxo5KOZ2nllmDlLJdgKWtJcQKq4/SISwp0JT
5nHZsL9jL5eNxhIHdtW3glcO7xVSfiYrh51lWhNJWCWT4UjBOOBMwUbUrwOMGF3q
ispe9aueVYJxu+6HT1Gy7mDyOADr4cJq5bbnJlzLkW9tifFJ6yI8BUWh5hvHTPBj
cCDoriCOXTv05cc9cvhAo40XC/avezq+UUOSJ9aBuvobDoSZ1P9OaPuiNLvmiz/x
Ms0DESj10+DOqlhxm40Gep1e9Hxu3XeKHZzT8C2Akrp3geVh7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiX0DDn6rmQP8hP4wmb7U3XJbplMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDE3NjY1MTctNGQ4OC0z
MDUyLTllNmYtMDk2ODc1NTBlNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADL4o2wSa9/lvf4m+RavUazt/WAdr3LxWkjnMN22FbatkG04OWsynJE3
sbEn1GSNTCc5NV5uAMLetUx+5IDv2YxvStr6lyYA2h/wuq2XpkU3bnqiKtxjCp8U
4fLMeN6JDL/8P9WPtMmrOGGKekJUD43axefmQ1Vi28nn/XgJKPvTIfehd3Q1AaqY
4zNiI/nkepiDxm9uhGsQWHJJ7FCaLR1zRshD7IwGyBPqkqukDK9CAlCIVtfK99Vm
mz8H7J+p6yXNU+xFfjyBn25xJvMKqsXPLwgeRB7asetwoS1WcDeSzGZFCgX/wFpE
SmDw4T3Tw7iunhw7QQDg21V33COxZXM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:51:53 2025 by rpki-client