Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6c00817e-b0fc-32ec-ac81-644bf0fe3d8d.roa
File: 6c00817e-b0fc-32ec-ac81-644bf0fe3d8d.roa (raw, json)
Hash identifier: Tv+tJ+Y4KS2aFfCHhR8u3gM9W5Gk/KggGq5oraxF8gI=
Subject key identifier: AC:F2:95:D2:67:7B:08:13:FC:56:4D:CE:2B:DD:37:BB:00:5A:79:BD
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858478E1BCD0BA8A0BD4F8BCD82E0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6c00817e-b0fc-32ec-ac81-644bf0fe3d8d.roa
Signing time: Wed 16 Oct 2024 01:00:31 +0000
ROA not before: Wed 16 Oct 2024 01:00:31 +0000
ROA not after: Tue 14 Jan 2025 02:00:31 +0000
asID: 29802
IP address blocks: 144.168.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8e:1b:cd:0b:a8:a0:bd:4f:8b:cd:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Oct 16 01:00:31 2024 GMT
Not After : Jan 14 02:00:31 2025 GMT
Subject: CN=99673156-f050-4903-9eb8-f389e204bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:5d:70:af:23:6a:63:16:71:c2:ac:9f:ab:
7c:49:73:1d:e9:a4:c6:df:bb:80:80:e5:fd:5e:b4:
67:bf:0f:fe:6d:37:97:34:c8:f8:f6:df:5e:93:f7:
5f:22:f7:7c:d3:c6:14:3d:c3:b2:40:58:2e:bc:cf:
bb:82:e4:5f:8c:9b:e1:0b:d4:ff:21:5b:ef:40:80:
48:02:c6:05:bf:cb:24:87:25:9d:21:9f:5d:80:2e:
25:69:f0:40:ba:43:64:7f:f1:3b:60:44:71:b3:7e:
13:ac:65:ed:64:b9:32:6d:dd:66:9c:17:36:0c:5d:
00:41:56:9b:7d:81:9a:e0:90:03:b2:32:8c:23:f9:
30:db:ba:c6:16:c8:87:fe:5b:1f:e1:59:c9:f9:6c:
7f:e4:7d:16:c0:9e:67:98:1c:3b:3d:ac:a2:93:2a:
9a:d5:39:d9:ad:89:ea:f4:ca:c7:7d:30:3b:2f:0f:
39:c3:5f:cc:d6:8e:4b:4c:32:db:a9:74:21:2a:a3:
97:b4:a1:35:24:97:7d:a6:6a:53:1a:b9:df:37:63:
d8:8c:55:d1:73:88:e7:d7:6b:89:23:ce:0b:0c:62:
57:66:af:15:19:f2:7c:87:df:2f:d8:3a:77:f7:8f:
c8:62:5c:9e:cc:49:f2:9d:7f:35:7d:ec:b7:55:04:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:95:D2:67:7B:08:13:FC:56:4D:CE:2B:DD:37:BB:00:5A:79:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6c00817e-b0fc-32ec-ac81-644bf0fe3d8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:96:27:0b:68:4c:af:86:7d:7f:64:1a:03:76:e9:bb:53:57:
a1:65:3c:6e:64:ad:36:7d:11:54:a3:8b:36:7c:fa:30:f3:d6:
2b:66:8c:53:fb:4e:98:57:53:ab:65:89:54:8d:27:82:35:70:
9b:8c:5d:a7:c1:6f:6a:55:7b:8b:da:09:45:1c:d2:2e:6a:22:
96:53:da:c5:df:2d:93:17:d6:cc:a3:0c:98:a9:dc:78:a0:da:
51:08:04:cb:a0:22:a7:44:a1:d7:45:4d:96:7f:25:c6:5c:92:
dc:43:bc:de:2f:ba:44:91:18:ac:12:80:c5:7b:6c:42:d6:f2:
ca:8f:70:e8:cf:0b:66:e2:07:e1:02:df:37:4f:45:4b:c8:3a:
f4:d2:38:71:b4:05:ea:44:54:00:9c:b5:d7:21:28:0c:b0:f1:
62:c0:a4:e0:c8:e3:2a:c6:b9:54:3c:df:e7:0c:c7:85:97:cf:
b3:39:05:50:c3:5e:95:fe:53:27:6f:39:cd:d3:8d:92:bf:e5:
28:22:2f:75:ec:04:6e:09:ed:84:27:30:83:1d:9f:24:17:58:
84:ae:87:26:51:4e:53:b1:f3:59:56:0a:6f:bc:1b:44:65:af:
17:f7:ab:8e:67:96:df:32:a1:6d:02:4e:50:43:a1:5b:e4:04:
92:24:27:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG80LqKC9T4vNguAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
OTk2NzMxNTYtZjA1MC00OTAzLTllYjgtZjM4OWUyMDRiYjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwipdcK8jamMWccKsn6t8SXMd6aTG37uAgOX9
XrRnvw/+bTeXNMj49t9ek/dfIvd808YUPcOyQFguvM+7guRfjJvhC9T/IVvvQIBI
AsYFv8skhyWdIZ9dgC4lafBAukNkf/E7YERxs34TrGXtZLkybd1mnBc2DF0AQVab
fYGa4JADsjKMI/kw27rGFsiH/lsf4VnJ+Wx/5H0WwJ5nmBw7Payikyqa1TnZrYnq
9MrHfTA7Lw85w1/M1o5LTDLbqXQhKqOXtKE1JJd9pmpTGrnfN2PYjFXRc4jn12uJ
I84LDGJXZq8VGfJ8h98v2Dp394/IYlyezEnynX81fey3VQSDfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzyldJnewgT/FZNzivdN7sAWnm9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvNmMwMDgxN2UtYjBmYy0z
MmVjLWFjODEtNjQ0YmYwZmUzZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCWJwtoTK+GfX9kGgN26btTV6FlPG5krTZ9EVSjizZ8+jDz1itmjFP7
TphXU6tliVSNJ4I1cJuMXafBb2pVe4vaCUUc0i5qIpZT2sXfLZMX1syjDJip3Hig
2lEIBMugIqdEoddFTZZ/JcZcktxDvN4vukSRGKwSgMV7bELW8sqPcOjPC2biB+EC
3zdPRUvIOvTSOHG0BepEVACctdchKAyw8WLApODI4yrGuVQ83+cMx4WXz7M5BVDD
XpX+UydvOc3TjZK/5SgiL3XsBG4J7YQnMIMdnyQXWISuhyZRTlOx81lWCm+8G0Rl
rxf3q45nlt8yoW0CTlBDoVvkBJIkJ2o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:37 2025 by rpki-client