Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cae39eaa-c133-301c-ad25-aa88a063307b.roa
File: cae39eaa-c133-301c-ad25-aa88a063307b.roa (raw, json)
Hash identifier: 3F/StUJVrbyA8WxKc6IGJoipsZNGwoZJ+ria/eT8aQY=
Subject key identifier: 3E:20:E3:EF:E5:D4:12:C1:B1:9B:87:E6:A9:15:48:8D:57:5F:EC:B8
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858451FAAE3456830F5E6856BF900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cae39eaa-c133-301c-ad25-aa88a063307b.roa
Signing time: Thu 07 Mar 2024 02:00:25 +0000
ROA not before: Thu 07 Mar 2024 02:00:25 +0000
ROA not after: Wed 05 Jun 2024 01:00:25 +0000
asID: 149440
IP address blocks: 172.120.240.0/24 maxlen: 24
104.165.137.0/24 maxlen: 24
172.252.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1f:aa:e3:45:68:30:f5:e6:85:6b:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 7 02:00:25 2024 GMT
Not After : Jun 5 01:00:25 2024 GMT
Subject: CN=f7ee66ea-1a73-4c79-8c00-edf67fb594a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:93:2c:6d:31:f6:65:4a:1d:68:5d:26:eb:
32:09:bd:60:dc:ff:91:bd:ad:f4:a7:f9:87:1e:0d:
15:e5:2e:ee:13:b2:3a:62:57:46:da:09:77:b7:92:
c3:1d:73:2d:7b:cd:b4:d5:b0:8f:c1:31:9a:f2:07:
af:d3:d4:24:9a:e6:19:81:c1:26:46:54:07:58:c3:
cb:2e:06:28:50:d0:f6:e9:0d:06:b1:fa:b5:dd:f1:
9e:d2:f8:71:57:3f:04:4a:3e:b1:16:c2:72:cd:0e:
b8:c8:ce:6e:a5:33:ec:a7:ad:13:b4:ec:87:07:e8:
01:0b:c0:3f:93:61:59:36:a0:59:9b:76:ae:11:fd:
ae:4a:30:fa:12:8a:b6:c8:f2:70:7c:c1:18:e2:d9:
50:7b:b0:3f:f0:97:e6:d9:7d:5d:cc:ff:d4:b6:c9:
53:e5:ac:02:b6:c6:9d:5b:75:bb:b9:eb:2b:3a:50:
b5:aa:cc:95:d6:f0:36:e9:c0:c3:e6:95:79:76:3d:
aa:b5:ec:ba:e8:1c:d9:0d:99:2b:e8:f5:e2:c4:04:
27:4f:03:78:12:e5:cd:50:35:c0:20:24:ff:f3:1f:
39:9b:c8:58:5c:40:23:14:99:9a:19:83:1b:7a:c4:
b1:35:75:66:bf:b6:d6:2d:4d:3b:09:e7:f6:e5:93:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:E3:EF:E5:D4:12:C1:B1:9B:87:E6:A9:15:48:8D:57:5F:EC:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cae39eaa-c133-301c-ad25-aa88a063307b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.165.137.0/24
172.120.240.0/24
172.252.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:5a:fa:5b:e9:4f:8d:8b:99:42:d8:9e:ff:b9:e6:12:40:b4:
21:91:d7:c7:9d:b1:35:c3:a3:fc:81:88:2b:16:89:7e:7a:af:
a0:8c:57:f9:03:20:49:37:e0:f4:a5:02:8a:4b:6f:d2:0a:64:
21:c8:f3:1f:31:0b:2c:56:4e:f7:26:e9:f4:eb:38:f5:78:65:
05:1e:84:cb:f8:6b:79:a2:3f:8a:eb:30:d5:7c:77:e9:5c:d4:
e6:be:c2:e3:5d:26:80:71:8b:f6:fa:af:6b:c8:ce:55:11:00:
d7:be:0b:92:b8:18:13:1a:92:05:ff:b9:d0:85:a3:86:fc:41:
94:9b:7c:90:83:1d:1d:7b:be:8b:bb:07:76:54:7d:c9:f6:4b:
2e:d4:5f:02:e6:f0:c8:39:42:00:33:62:c0:a0:d1:e0:34:82:
ec:83:dd:47:6f:95:f8:ec:56:f2:73:75:fd:2d:88:51:6e:ee:
7f:c2:41:e8:27:25:f2:25:7a:d1:35:77:0f:57:27:02:49:84:
5f:d1:84:56:ad:3a:cd:1b:7a:e2:9c:04:b8:8c:14:e8:e1:25:
7a:6a:50:b4:eb:b4:83:1a:72:d5:b4:26:87:e7:a1:97:56:9c:
6c:16:4c:24:ea:02:fa:a6:d5:ad:52:66:9d:c6:41:33:76:67:
62:10:ae:9a
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEUfquNFaDD15oVr+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZjdlZTY2ZWEtMWE3My00Yzc5LThjMDAtZWRmNjdmYjU5NGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9mTLG0x9mVKHWhdJusyCb1g3P+Rva30p/mH
Hg0V5S7uE7I6YldG2gl3t5LDHXMte8201bCPwTGa8gev09QkmuYZgcEmRlQHWMPL
LgYoUND26Q0Gsfq13fGe0vhxVz8ESj6xFsJyzQ64yM5upTPsp60TtOyHB+gBC8A/
k2FZNqBZm3auEf2uSjD6Eoq2yPJwfMEY4tlQe7A/8Jfm2X1dzP/UtslT5awCtsad
W3W7uesrOlC1qsyV1vA26cDD5pV5dj2qtey66BzZDZkr6PXixAQnTwN4EuXNUDXA
ICT/8x85m8hYXEAjFJmaGYMbesSxNXVmv7bWLU07Cef25ZMM2wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFD4g4+/l1BLBsZuH5qkVSI1XX+y4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2FlMzllYWEtYzEzMy0z
MDFjLWFkMjUtYWE4OGEwNjMzMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaKWJAwQA
rHjwAwQArPySMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAH9a+lvpT42LmULYnv+55hJAtCGR18edsTXDo/yB
iCsWiX56r6CMV/kDIEk34PSlAopLb9IKZCHI8x8xCyxWTvcm6fTrOPV4ZQUehMv4
a3miP4rrMNV8d+lc1Oa+wuNdJoBxi/b6r2vIzlURANe+C5K4GBMakgX/udCFo4b8
QZSbfJCDHR17vou7B3ZUfcn2Sy7UXwLm8Mg5QgAzYsCg0eA0guyD3UdvlfjsVvJz
df0tiFFu7n/CQegnJfIletE1dw9XJwJJhF/RhFatOs0beuKcBLiMFOjhJXpqULTr
tIMactW0JofnoZdWnGwWTCTqAvqm1a1SZp3GQTN2Z2IQrpo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:12 2024 by rpki-client on console-ams.rpki-client.org