Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e9db09d3-5313-3951-a6dd-2ae44cb463ab.roa
File: e9db09d3-5313-3951-a6dd-2ae44cb463ab.roa (raw, json)
Hash identifier: 1dl6epMwVDjhnRG3ecs7MZ+HKgKJgWpKv4UQfYNlEwg=
Subject key identifier: 4D:F8:13:39:13:EB:C7:21:CC:A0:50:F2:95:C7:19:C4:41:94:4C:9F
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285846434A7ACE7B4E2A50509F4BA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e9db09d3-5313-3951-a6dd-2ae44cb463ab.roa
Signing time: Wed 19 Jun 2024 13:00:34 +0000
ROA not before: Wed 19 Jun 2024 13:00:34 +0000
ROA not after: Tue 17 Sep 2024 13:00:34 +0000
asID: 12271
IP address blocks: 24.164.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:43:4a:7a:ce:7b:4e:2a:50:50:9f:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Jun 19 13:00:34 2024 GMT
Not After : Sep 17 13:00:34 2024 GMT
Subject: CN=1263af4f-de9f-479e-bbce-ecafe7e3e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:a4:f7:43:01:78:ca:2b:9f:53:8b:25:bd:
53:2e:11:58:fc:cd:36:41:78:ad:c9:b2:f7:4f:d1:
98:97:52:05:72:1e:e9:3e:d7:e1:bd:49:76:dc:2f:
e9:13:0c:af:a0:a3:8b:02:7d:bd:43:fb:57:9b:e3:
84:63:ed:69:79:9a:67:c4:59:0b:9c:fb:e9:1c:fd:
2f:31:7b:67:32:f2:d1:38:67:cc:ca:98:fc:bf:ff:
79:67:51:4c:76:73:9e:1e:36:98:a1:c3:d7:e0:d2:
a2:12:83:5a:52:69:21:c1:37:99:36:0d:e9:08:01:
52:70:43:ac:95:25:d3:fc:13:0b:4b:64:87:fd:f3:
28:42:12:c3:a5:e5:f1:a7:bd:39:a3:51:21:a9:ff:
e9:0d:42:8e:f1:e4:17:e9:c6:01:6a:b5:05:82:9c:
a7:36:2c:8e:01:60:06:d8:e7:57:53:35:cd:98:c9:
8a:9a:92:26:34:b8:9e:76:f8:05:cc:13:72:af:2f:
d2:10:e7:33:be:7b:8b:7e:80:55:87:b8:15:02:9c:
39:e3:ed:cc:93:02:47:ca:3b:3a:60:af:f7:0e:54:
f5:08:b6:c6:fb:27:fd:81:2c:e8:36:f0:08:a9:05:
ee:49:16:1c:29:26:21:d8:20:f9:55:78:9b:c4:16:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:13:39:13:EB:C7:21:CC:A0:50:F2:95:C7:19:C4:41:94:4C:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e9db09d3-5313-3951-a6dd-2ae44cb463ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.164.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e0:c8:68:fc:be:ca:f0:e4:6c:67:cc:ad:98:13:00:02:9c:
4d:a4:17:16:25:7b:a3:ee:81:81:65:4a:eb:1e:2e:3f:e5:ae:
04:a3:32:00:e8:af:76:7d:82:b5:0c:c2:a8:ae:b5:28:87:7b:
83:69:7a:b6:ff:e2:ca:87:36:89:e7:9d:fd:ff:70:53:e6:ef:
f1:8b:31:78:f3:cf:97:48:f9:fd:51:4e:3d:1b:2c:c2:3a:22:
24:84:08:88:6a:77:71:3c:63:cb:f1:1f:fd:25:c4:21:b9:9d:
a3:41:b8:80:20:81:b5:7b:a6:f7:4a:fc:43:db:88:02:68:b9:
a2:af:0e:41:33:50:d8:5d:66:13:8f:4c:65:84:77:11:1a:ab:
1c:8f:fc:fa:15:5b:a5:52:36:08:22:a7:dc:25:76:1b:f3:c6:
68:e8:d4:f7:5a:2f:40:c7:ca:29:e4:90:a6:bb:ef:9e:e4:cd:
f5:d0:6c:41:5c:90:60:8a:3d:f7:ee:b2:96:ee:a6:c7:67:84:
22:0f:74:11:8c:1e:64:a4:58:48:8e:5d:75:5c:c8:0f:88:a2:
49:fc:d9:ca:6a:5f:84:1a:f8:38:1b:ec:7e:08:84:30:42:83:
cb:7d:5c:20:c8:7b:0a:7b:08:7e:21:26:14:b0:6b:22:08:5b:
e7:a4:a3:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZDSnrOe04qUFCfS6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDYxOTEzMDAzNFoXDTI0MDkxNzEzMDAzNFowLzEtMCsGA1UEAxMk
MTI2M2FmNGYtZGU5Zi00NzllLWJiY2UtZWNhZmU3ZTNlNzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw6k90MBeMorn1OLJb1TLhFY/M02QXitybL3
T9GYl1IFch7pPtfhvUl23C/pEwyvoKOLAn29Q/tXm+OEY+1peZpnxFkLnPvpHP0v
MXtnMvLROGfMypj8v/95Z1FMdnOeHjaYocPX4NKiEoNaUmkhwTeZNg3pCAFScEOs
lSXT/BMLS2SH/fMoQhLDpeXxp705o1Ehqf/pDUKO8eQX6cYBarUFgpynNiyOAWAG
2OdXUzXNmMmKmpImNLiedvgFzBNyry/SEOczvnuLfoBVh7gVApw54+3MkwJHyjs6
YK/3DlT1CLbG+yf9gSzoNvAIqQXuSRYcKSYh2CD5VXibxBZgAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE34EzkT68chzKBQ8pXHGcRBlEyfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZTlkYjA5ZDMtNTMxMy0z
OTUxLWE2ZGQtMmFlNDRjYjQ2M2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbgyGj8vsrw5GxnzK2YEwACnE2kFxYle6PugYFlSuseLj/lrgSjMgDo
r3Z9grUMwqiutSiHe4Nperb/4sqHNonnnf3/cFPm7/GLMXjzz5dI+f1RTj0bLMI6
IiSECIhqd3E8Y8vxH/0lxCG5naNBuIAggbV7pvdK/EPbiAJouaKvDkEzUNhdZhOP
TGWEdxEaqxyP/PoVW6VSNggip9wldhvzxmjo1PdaL0DHyinkkKa7757kzfXQbEFc
kGCKPffuspbupsdnhCIPdBGMHmSkWEiOXXVcyA+Iokn82cpqX4Qa+Dgb7H4IhDBC
g8t9XCDIewp7CH4hJhSwayIIW+ekoyg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:47:37 2025 by rpki-client