Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8f5984bd-b182-3d29-9766-285b0731d298.roa
File: 8f5984bd-b182-3d29-9766-285b0731d298.roa (raw, json)
Hash identifier: gdfVTyq5HUo/hqdt/M+kjiwRh7gWdAFBOeISxNtpS9Q=
Subject key identifier: 4B:58:3A:27:D6:B3:66:10:0A:F8:18:2A:99:20:BB:5F:FB:42:E6:D3
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858466B36CC5DBD08EA1A2289B380
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8f5984bd-b182-3d29-9766-285b0731d298.roa
Signing time: Wed 03 Jul 2024 20:14:55 +0000
ROA not before: Wed 03 Jul 2024 20:14:55 +0000
ROA not after: Tue 01 Oct 2024 20:14:55 +0000
asID: 397770
IP address blocks: 72.46.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:36:cc:5d:bd:08:ea:1a:22:89:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jul 3 20:14:55 2024 GMT
Not After : Oct 1 20:14:55 2024 GMT
Subject: CN=9accd1c9-f3a7-4628-9905-e193fe335b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:60:a5:62:3e:3f:66:ef:57:d1:39:7a:5f:
3f:64:13:b6:67:bf:69:db:e1:c5:d2:d9:b9:88:ca:
ac:07:f3:d4:38:cd:54:ab:8b:37:92:07:f6:88:96:
c9:46:8f:0a:2e:a1:c9:b6:04:db:24:6b:d0:e0:1a:
ad:03:25:ca:72:37:54:37:69:63:eb:c4:20:95:2b:
38:b9:fa:f9:c0:ef:37:58:03:a4:c2:17:60:d7:ad:
ad:3c:46:a4:58:92:4a:f0:fc:10:67:ba:7a:6a:20:
85:ea:c9:3a:65:58:09:1b:38:bd:a1:86:68:b8:6d:
38:83:51:81:ff:a4:81:b1:93:10:a7:05:2e:33:a0:
87:c4:68:92:8e:e6:d4:c6:0d:42:5f:2c:ae:1e:cf:
7b:24:dc:e9:a6:ba:87:21:b1:96:ce:ed:c7:6a:e6:
ba:07:c9:fd:29:fc:31:66:39:ad:6e:ca:6a:93:ca:
b0:8d:8e:1c:50:5c:1b:7d:a8:e9:6e:ca:e3:88:bf:
9c:e4:3c:82:ac:44:2a:95:b8:15:76:bb:57:4c:92:
d8:96:f0:11:bf:25:2e:f2:fe:43:89:1e:06:00:7c:
d7:f9:fc:e8:c8:ca:0c:1e:fb:dd:2a:ea:5b:33:2f:
2d:dd:40:d6:06:5b:93:9c:4c:fd:fc:11:ac:b0:06:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:3A:27:D6:B3:66:10:0A:F8:18:2A:99:20:BB:5F:FB:42:E6:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8f5984bd-b182-3d29-9766-285b0731d298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.46.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:03:88:4b:3e:01:76:88:bf:0b:cc:3d:82:94:00:bb:40:8b:
04:64:0d:c0:b2:e5:98:13:fd:6f:22:ea:54:0d:2b:f6:06:02:
24:0c:dd:bd:9b:5e:56:78:a1:22:56:11:f2:2c:63:b8:6f:1f:
de:b2:28:1c:f2:29:ee:89:0c:71:87:9c:e4:3f:06:ca:71:92:
df:37:59:da:24:f5:56:70:e2:d1:a7:66:fb:7a:be:82:ba:47:
50:8a:30:cc:b7:54:2b:ec:7e:c7:d5:74:43:7f:7a:c0:99:ca:
5a:89:23:8c:c0:e7:96:4b:34:79:27:d2:62:10:7d:8e:1b:3c:
3a:e9:10:02:53:df:47:2b:bf:19:c2:8b:75:72:88:8a:47:36:
b3:02:b6:90:d6:f0:c8:ac:ef:86:80:b7:70:ce:1a:d3:8e:ee:
ad:0f:6b:f6:42:68:c9:2f:1f:b1:ae:8c:98:38:cc:c1:1a:2f:
ea:12:7e:5a:fb:72:15:ae:83:f0:7f:91:e5:40:3d:17:2a:6d:
5c:f9:f5:3f:27:a7:33:65:9d:c8:77:6a:de:2e:ce:fd:e8:74:
1d:63:67:9b:01:e9:6e:43:ce:4d:ee:99:bd:c0:cb:a3:45:c6:
4c:06:5f:7a:0e:af:52:37:52:c3:8d:54:6c:40:75:4b:58:5a:
7d:b7:88:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZrNsxdvQjqGiKJs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI0MDcwMzIwMTQ1NVoXDTI0MTAwMTIwMTQ1NVowLzEtMCsGA1UEAxMk
OWFjY2QxYzktZjNhNy00NjI4LTk5MDUtZTE5M2ZlMzM1YjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifBgpWI+P2bvV9E5el8/ZBO2Z79p2+HF0tm5
iMqsB/PUOM1Uq4s3kgf2iJbJRo8KLqHJtgTbJGvQ4BqtAyXKcjdUN2lj68QglSs4
ufr5wO83WAOkwhdg162tPEakWJJK8PwQZ7p6aiCF6sk6ZVgJGzi9oYZouG04g1GB
/6SBsZMQpwUuM6CHxGiSjubUxg1CXyyuHs97JNzpprqHIbGWzu3Haua6B8n9Kfwx
Zjmtbspqk8qwjY4cUFwbfajpbsrjiL+c5DyCrEQqlbgVdrtXTJLYlvARvyUu8v5D
iR4GAHzX+fzoyMoMHvvdKupbMy8t3UDWBluTnEz9/BGssAYQDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtYOifWs2YQCvgYKpkgu1/7QubTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOGY1OTg0YmQtYjE4Mi0z
ZDI5LTk3NjYtMjg1YjA3MzFkMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC5jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8DiEs+AXaIvwvMPYKUALtAiwRkDcCy5ZgT/W8i6lQNK/YGAiQM3b2b
XlZ4oSJWEfIsY7hvH96yKBzyKe6JDHGHnOQ/Bspxkt83Wdok9VZw4tGnZvt6voK6
R1CKMMy3VCvsfsfVdEN/esCZylqJI4zA55ZLNHkn0mIQfY4bPDrpEAJT30crvxnC
i3VyiIpHNrMCtpDW8Mis74aAt3DOGtOO7q0Pa/ZCaMkvH7GujJg4zMEaL+oSflr7
chWug/B/keVAPRcqbVz59T8npzNlnch3at4uzv3odB1jZ5sB6W5Dzk3umb3Ay6NF
xkwGX3oOr1I3UsONVGxAdUtYWn23iEM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:41 2025 by rpki-client