Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8f47cf52-2cda-3f7b-a7b9-084da4baedc9.roa
File: 8f47cf52-2cda-3f7b-a7b9-084da4baedc9.roa (raw, json)
Hash identifier: wH8Ix74vL941ClOmp8Wizz71MG02/cqTAkxIcoEelAI=
Subject key identifier: 37:F3:3D:67:3D:0F:08:93:8A:96:9A:FA:EF:5B:CD:49:0C:4F:D7:86
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847D87B6B8FC0E334D1AAEA8680
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8f47cf52-2cda-3f7b-a7b9-084da4baedc9.roa
Signing time: Mon 11 Nov 2024 16:23:14 +0000
ROA not before: Mon 11 Nov 2024 16:23:14 +0000
ROA not after: Sun 09 Feb 2025 16:23:14 +0000
asID: 394437
IP address blocks: 66.249.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d8:7b:6b:8f:c0:e3:34:d1:aa:ea:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 11 16:23:14 2024 GMT
Not After : Feb 9 16:23:14 2025 GMT
Subject: CN=8c69bca9-fd34-4621-9cae-32b3ffab559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:0f:49:57:b2:de:08:e1:54:81:f4:2a:29:
9f:a5:34:95:e6:28:c3:fb:b2:c9:42:17:a9:61:4c:
78:bd:dc:dc:9f:ba:d2:5c:55:25:3b:70:d8:11:1e:
ba:d9:39:a7:08:7d:00:5a:39:bd:bd:03:56:8c:e5:
8a:ed:8b:07:98:78:a0:08:d6:2b:32:7b:91:be:06:
7b:81:29:7d:8a:d7:83:3e:59:04:58:21:f1:09:94:
27:0b:e3:10:5e:ab:a5:69:3a:5e:97:ea:ce:59:72:
92:34:60:a5:09:b0:14:be:86:bb:4b:de:3e:7b:55:
9b:50:ad:f5:ac:a8:cd:a9:79:6f:2f:e9:83:c5:f4:
96:3d:5c:10:0f:77:53:f9:1d:82:1d:b4:5a:bb:bf:
7e:78:16:ae:b8:ee:4c:a8:b5:69:ac:0e:57:39:ac:
b3:2a:a4:9f:44:fb:76:32:94:6b:77:0e:50:16:26:
34:c6:2f:ce:d5:1a:30:cc:af:42:30:bc:fd:61:37:
67:58:27:aa:ae:6d:8d:00:65:26:32:88:39:58:2a:
20:90:58:07:e1:9a:ac:bb:22:b6:ee:af:9a:fc:03:
f1:1c:02:09:9e:a7:a7:ac:0b:0d:69:a2:04:8b:8b:
83:aa:19:d7:db:51:eb:c7:89:4b:f6:d3:69:6e:e0:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:3D:67:3D:0F:08:93:8A:96:9A:FA:EF:5B:CD:49:0C:4F:D7:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8f47cf52-2cda-3f7b-a7b9-084da4baedc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:3d:ad:12:42:b3:c7:36:69:aa:ef:09:7a:cb:a1:ff:07:6b:
5f:cd:d1:3f:e1:eb:d1:f3:24:ba:f1:df:b2:b3:5a:d1:c8:3e:
01:06:df:59:b2:58:94:08:17:c9:ae:d9:81:40:04:65:2f:89:
42:ea:1d:98:84:70:27:90:c5:ff:6b:aa:fe:4c:80:63:b0:02:
26:b4:ec:8c:32:90:df:55:97:62:d4:94:56:e0:10:8c:ff:65:
b1:d4:cd:84:58:a7:09:f3:2b:b0:df:47:ec:da:46:39:da:df:
95:85:6c:39:56:45:81:a0:ee:6e:2e:17:e8:7e:91:aa:3c:ec:
b0:76:32:f8:cd:64:10:66:1c:9e:ce:59:56:06:05:7e:7e:37:
e7:2d:8a:a9:44:89:a1:2f:52:b1:fd:10:57:fc:a3:40:eb:9f:
bb:89:6a:d7:8d:ec:0a:87:1e:bf:25:5e:24:b8:77:3f:d2:0d:
46:1c:42:50:39:46:db:37:20:5d:fe:16:21:fa:33:1c:ec:f6:
fc:17:d9:87:a2:55:0d:96:7d:62:16:9f:57:24:94:c0:16:fc:
b5:fb:21:43:b2:f4:c8:e4:ee:fc:77:e1:88:ca:30:b0:ee:9a:
ef:60:cc:18:98:2d:6e:3d:04:51:20:7a:f4:84:c7:cd:6b:c2:
51:eb:b3:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYe2uPwOM00arqhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI0MTExMTE2MjMxNFoXDTI1MDIwOTE2MjMxNFowLzEtMCsGA1UEAxMk
OGM2OWJjYTktZmQzNC00NjIxLTljYWUtMzJiM2ZmYWI1NTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nAPSVey3gjhVIH0KimfpTSV5ijD+7LJQhep
YUx4vdzcn7rSXFUlO3DYER662TmnCH0AWjm9vQNWjOWK7YsHmHigCNYrMnuRvgZ7
gSl9iteDPlkEWCHxCZQnC+MQXqulaTpel+rOWXKSNGClCbAUvoa7S94+e1WbUK31
rKjNqXlvL+mDxfSWPVwQD3dT+R2CHbRau79+eBauuO5MqLVprA5XOayzKqSfRPt2
MpRrdw5QFiY0xi/O1RowzK9CMLz9YTdnWCeqrm2NAGUmMog5WCogkFgH4ZqsuyK2
7q+a/APxHAIJnqenrAsNaaIEi4uDqhnX21Hrx4lL9tNpbuC6BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfzPWc9DwiTipaa+u9bzUkMT9eGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOGY0N2NmNTItMmNkYS0z
ZjdiLWE3YjktMDg0ZGE0YmFlZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI09rRJCs8c2aarvCXrLof8Ha1/N0T/h69HzJLrx37KzWtHIPgEG31my
WJQIF8mu2YFABGUviULqHZiEcCeQxf9rqv5MgGOwAia07IwykN9Vl2LUlFbgEIz/
ZbHUzYRYpwnzK7DfR+zaRjna35WFbDlWRYGg7m4uF+h+kao87LB2MvjNZBBmHJ7O
WVYGBX5+N+ctiqlEiaEvUrH9EFf8o0Drn7uJateN7AqHHr8lXiS4dz/SDUYcQlA5
Rts3IF3+FiH6Mxzs9vwX2YeiVQ2WfWIWn1cklMAW/LX7IUOy9Mjk7vx34YjKMLDu
mu9gzBiYLW49BFEgevSEx81rwlHrs/8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:18:48 2025 by rpki-client