Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c51e3a25-a2c6-332d-a80f-9b278bf01fb9.roa
File: c51e3a25-a2c6-332d-a80f-9b278bf01fb9.roa (raw, json)
Hash identifier: u4Z4ZPqpIwHC5/ijocphpptm0KbXJy/4+q54CyFW4zA=
Subject key identifier: 3B:49:E5:24:03:C5:D3:3F:99:B9:07:73:B5:81:EF:6E:01:C2:F1:E1
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858470441593C67A06D44DD4A2400
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c51e3a25-a2c6-332d-a80f-9b278bf01fb9.roa
Signing time: Tue 27 Aug 2024 15:54:51 +0000
ROA not before: Tue 27 Aug 2024 15:54:51 +0000
ROA not after: Mon 25 Nov 2024 16:54:51 +0000
asID: 6079
IP address blocks: 72.25.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:04:41:59:3c:67:a0:6d:44:dd:4a:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Aug 27 15:54:51 2024 GMT
Not After : Nov 25 16:54:51 2024 GMT
Subject: CN=4b668bc3-f8f1-47da-9113-5226e91219c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7a:14:6c:c4:69:61:4f:f1:68:40:f9:57:d0:
77:58:44:b5:1b:a0:10:aa:1f:44:18:6c:03:8b:db:
c4:f7:ba:d5:98:4a:f5:cf:61:25:d2:bd:23:e0:fe:
ce:d2:c5:22:41:8c:79:2e:76:08:d2:a9:98:39:39:
31:16:50:d1:35:f9:35:1c:d6:2e:22:fa:bf:fd:05:
c5:03:f8:3b:fd:0b:ec:8c:43:bf:ed:fe:65:99:a2:
72:e9:ac:a3:5a:a2:4d:b7:81:6e:10:68:46:d3:63:
3c:13:55:e6:d1:7f:9f:8b:5d:5f:53:dd:cb:50:0f:
ff:2b:16:8a:95:6d:61:1d:7f:db:b1:75:00:ca:47:
19:34:a1:4b:c1:ae:43:bd:34:26:d7:3e:f6:4d:1e:
a3:59:30:e8:88:bb:0b:31:ed:fe:8d:08:9e:fd:87:
ee:9e:26:88:4e:45:51:2d:00:bb:a7:e0:94:98:a6:
64:35:7e:f4:a6:83:1b:df:d7:b0:7c:7b:d1:ce:66:
44:b7:a8:76:59:29:b4:b0:ad:b7:89:a5:b1:b9:38:
a1:b5:59:aa:d7:3b:29:72:bb:72:80:68:9c:4f:1c:
b6:18:43:72:4a:17:e7:83:06:4d:f9:f5:83:4d:ae:
b1:a5:cd:ef:30:d4:e5:2d:4a:bf:04:11:6d:0a:19:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:E5:24:03:C5:D3:3F:99:B9:07:73:B5:81:EF:6E:01:C2:F1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c51e3a25-a2c6-332d-a80f-9b278bf01fb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
72.25.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:17:68:35:5e:0e:bd:98:84:88:64:22:e2:bd:86:7f:6b:29:
6c:0b:2b:aa:bb:d9:30:3e:55:b2:7f:57:ae:36:a8:2a:b6:4b:
ba:14:50:86:b2:a5:ec:8c:2c:6b:0c:24:64:93:70:74:04:cb:
15:d7:3a:3c:8e:53:4d:a4:39:96:13:8c:2e:f0:0b:74:00:2e:
1e:c4:5a:fe:1b:3f:bb:de:b1:62:1b:c8:3e:69:2e:98:a9:04:
06:1e:84:0c:89:b1:bc:43:39:2b:13:cb:8e:b9:bb:f6:b0:ae:
5e:98:31:87:e7:f0:c7:52:15:c1:66:d3:bd:ae:7f:43:a8:f2:
13:45:6e:a3:57:70:6a:c8:d7:59:a2:db:c9:d7:ea:74:5b:55:
29:e5:24:45:6d:a6:0a:73:9d:e1:54:ce:2f:ea:5a:60:2a:1f:
9d:31:03:76:e0:72:76:21:81:f6:76:79:7a:b1:7b:2f:de:1a:
7c:6f:69:ab:e4:ec:70:3b:04:07:4f:9e:07:7e:a7:e3:99:31:
9c:3e:ba:6b:57:1a:fa:ca:73:d8:97:dc:be:1f:6f:21:ea:d3:
ae:62:ee:16:f3:ca:65:bd:0b:54:05:e9:42:85:55:08:c4:bd:
3c:50:e1:44:2a:83:f9:0d:13:84:0e:0d:52:0d:42:a2:98:44:
d7:5f:f6:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcEQVk8Z6BtRN1KJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDgyNzE1NTQ1MVoXDTI0MTEyNTE2NTQ1MVowLzEtMCsGA1UEAxMk
NGI2NjhiYzMtZjhmMS00N2RhLTkxMTMtNTIyNmU5MTIxOWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XoUbMRpYU/xaED5V9B3WES1G6AQqh9EGGwD
i9vE97rVmEr1z2El0r0j4P7O0sUiQYx5LnYI0qmYOTkxFlDRNfk1HNYuIvq//QXF
A/g7/QvsjEO/7f5lmaJy6ayjWqJNt4FuEGhG02M8E1Xm0X+fi11fU93LUA//KxaK
lW1hHX/bsXUAykcZNKFLwa5DvTQm1z72TR6jWTDoiLsLMe3+jQie/YfuniaITkVR
LQC7p+CUmKZkNX70poMb39ewfHvRzmZEt6h2WSm0sK23iaWxuTihtVmq1zspcrty
gGicTxy2GENyShfngwZN+fWDTa6xpc3vMNTlLUq/BBFtChmiWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtJ5SQDxdM/mbkHc7WB724BwvHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzUxZTNhMjUtYTJjNi0z
MzJkLWE4MGYtOWIyNzhiZjAxZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBnoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwXaDVeDr2YhIhkIuK9hn9rKWwLK6q72TA+VbJ/V642qCq2S7oUUIay
peyMLGsMJGSTcHQEyxXXOjyOU02kOZYTjC7wC3QALh7EWv4bP7vesWIbyD5pLpip
BAYehAyJsbxDOSsTy465u/awrl6YMYfn8MdSFcFm072uf0Oo8hNFbqNXcGrI11mi
28nX6nRbVSnlJEVtpgpzneFUzi/qWmAqH50xA3bgcnYhgfZ2eXqxey/eGnxvaavk
7HA7BAdPngd+p+OZMZw+umtXGvrKc9iX3L4fbyHq065i7hbzymW9C1QF6UKFVQjE
vTxQ4UQqg/kNE4QODVINQqKYRNdf9nA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:04:18 2025 by rpki-client