Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9074e3fe-8024-340d-a73c-49ed9d4a4922.roa
File: 9074e3fe-8024-340d-a73c-49ed9d4a4922.roa (raw, json)
Hash identifier: 8Qi5hVHWv3ceZ9H/uA0mNz4YtudKWCZVWFiS7TbndBM=
Subject key identifier: 22:99:0A:DB:70:1D:69:AB:7C:51:20:22:56:97:79:0A:48:1E:C1:EA
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABC2251179C80794912680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9074e3fe-8024-340d-a73c-49ed9d4a4922.roa
Signing time: Wed 16 Oct 2024 14:26:37 +0000
ROA not before: Wed 16 Oct 2024 14:26:37 +0000
ROA not after: Tue 14 Jan 2025 15:26:37 +0000
asID: 36850
IP address blocks: 204.85.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:c2:25:11:79:c8:07:94:91:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:37 2024 GMT
Not After : Jan 14 15:26:37 2025 GMT
Subject: CN=b5650d5e-f033-481f-8bd9-8ce4edd4f3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f9:ca:81:23:0b:e4:6a:2a:81:b6:77:0d:91:
18:38:d1:e3:5c:2d:0a:cf:66:60:9e:d7:52:b1:56:
ab:0c:cf:8f:43:99:2a:b1:80:5a:7c:61:1a:57:27:
5c:87:6f:0a:50:d7:ea:3a:92:cb:ee:0a:c8:e8:cc:
dd:62:de:1b:51:e6:ee:2b:74:e4:94:f2:d6:b8:90:
e8:70:23:78:1d:1c:45:cc:04:bb:9c:16:49:5e:8c:
d4:f7:d9:0e:c8:b2:17:e9:b2:ee:e2:40:48:90:b4:
28:e5:89:fd:87:63:bb:f0:04:e7:57:82:12:a0:b0:
7b:4f:14:40:04:44:fd:57:18:6d:fc:b1:46:3b:48:
0d:d1:9d:cb:13:55:a3:b0:27:66:e0:95:f8:82:b0:
9d:15:c8:8c:45:6e:da:72:2b:49:56:39:c6:b7:f3:
0a:fa:9a:c6:9e:2a:87:62:3d:29:9b:04:c3:2d:70:
e6:06:c8:a1:b9:0a:ea:3c:c7:f5:83:dc:fb:5e:d5:
47:dd:3e:24:8f:51:51:98:df:ad:19:a0:b0:ad:35:
75:d9:97:7f:f6:2c:eb:93:94:54:54:81:f2:48:6f:
54:a7:55:d6:a5:ef:e0:e0:da:76:83:4f:ac:38:3e:
55:cd:c8:16:1f:91:1b:04:ee:a4:03:32:17:55:06:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:0A:DB:70:1D:69:AB:7C:51:20:22:56:97:79:0A:48:1E:C1:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9074e3fe-8024-340d-a73c-49ed9d4a4922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:27:f4:86:87:e9:4c:cd:ab:d7:5e:f3:37:4a:a1:f5:15:26:
e8:30:2b:be:65:1b:42:3a:6a:2e:36:57:da:61:76:9a:47:d4:
92:59:da:76:8f:d9:81:af:76:f5:b6:21:51:70:7a:8c:56:36:
8b:8e:2d:5c:9a:d1:b6:2d:c4:76:6a:f6:61:4d:8d:74:22:4d:
74:2f:54:31:31:5d:88:26:f8:5e:6f:fb:c5:b3:d2:54:ef:92:
bf:0c:eb:60:9a:8a:3f:29:9b:19:75:9d:81:40:57:17:c5:c5:
e6:ba:28:ef:fc:57:fa:aa:3f:ff:dd:dc:ee:4a:c4:04:1f:d0:
22:ee:18:ce:2e:27:05:54:01:bc:38:af:29:30:b7:49:e0:5d:
5b:20:cc:31:c2:54:4c:6d:ad:60:3c:20:28:52:58:4f:83:e4:
12:a2:68:01:5e:d0:68:40:3d:24:cf:b8:48:72:b1:1f:7d:b5:
ef:29:35:d0:17:cc:9b:2e:15:75:f6:d5:44:0f:d3:ee:3b:7f:
5a:9b:21:bc:1b:2c:65:3a:be:65:fa:76:3d:42:cd:c2:53:18:
8e:ac:a3:26:a7:e2:5d:07:4d:6a:41:20:f9:0f:8e:25:ae:9b:
83:d0:39:d5:9f:be:00:3b:39:db:1b:0e:89:57:9d:a3:1c:8c:
0b:fe:b1:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq8IlEXnIB5SRJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzN1oXDTI1MDExNDE1MjYzN1owLzEtMCsGA1UEAxMk
YjU2NTBkNWUtZjAzMy00ODFmLThiZDktOGNlNGVkZDRmM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vnKgSML5GoqgbZ3DZEYONHjXC0Kz2ZgntdS
sVarDM+PQ5kqsYBafGEaVydch28KUNfqOpLL7grI6MzdYt4bUebuK3TklPLWuJDo
cCN4HRxFzAS7nBZJXozU99kOyLIX6bLu4kBIkLQo5Yn9h2O78ATnV4ISoLB7TxRA
BET9Vxht/LFGO0gN0Z3LE1WjsCdm4JX4grCdFciMRW7acitJVjnGt/MK+prGniqH
Yj0pmwTDLXDmBsihuQrqPMf1g9z7XtVH3T4kj1FRmN+tGaCwrTV12Zd/9izrk5RU
VIHySG9Up1XWpe/g4Np2g0+sOD5VzcgWH5EbBO6kAzIXVQaZzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKZCttwHWmrfFEgIlaXeQpIHsHqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTA3NGUzZmUtODAyNC0z
NDBkLWE3M2MtNDllZDlkNGE0OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFW/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0n9IaH6UzNq9de8zdKofUVJugwK75lG0I6ai42V9phdppH1JJZ2naP
2YGvdvW2IVFweoxWNouOLVya0bYtxHZq9mFNjXQiTXQvVDExXYgm+F5v+8Wz0lTv
kr8M62Caij8pmxl1nYFAVxfFxea6KO/8V/qqP//d3O5KxAQf0CLuGM4uJwVUAbw4
rykwt0ngXVsgzDHCVExtrWA8IChSWE+D5BKiaAFe0GhAPSTPuEhysR99te8pNdAX
zJsuFXX21UQP0+47f1qbIbwbLGU6vmX6dj1CzcJTGI6soyan4l0HTWpBIPkPjiWu
m4PQOdWfvgA7OdsbDolXnaMcjAv+sTo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:06 2025 by rpki-client