Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/312dbe04-0e6a-37c3-86d2-6a40ac24f788.roa
File: 312dbe04-0e6a-37c3-86d2-6a40ac24f788.roa (raw, json)
Hash identifier: qPVSZcfDlOTi8HlEUpRR/tx+E2q2fcGu8vKIk6XzBYM=
Subject key identifier: 2B:58:F4:F7:28:3F:D3:E5:BE:BF:DB:68:39:17:CF:7A:E9:59:30:01
Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial: 010D0C9F43285843422A2B8972B6DDF70F1ED600
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/312dbe04-0e6a-37c3-86d2-6a40ac24f788.roa
Signing time: Mon 18 Sep 2023 01:00:23 +0000
ROA not before: Mon 18 Sep 2023 01:00:23 +0000
ROA not after: Sun 17 Dec 2023 02:00:23 +0000
asID: 398143
IP address blocks: 208.103.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:42:2a:2b:89:72:b6:dd:f7:0f:1e:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
Validity
Not Before: Sep 18 01:00:23 2023 GMT
Not After : Dec 17 02:00:23 2023 GMT
Subject: CN=366a3aeb-bc65-40c6-bbed-b886a3730739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:88:8b:b9:17:04:3e:84:c3:9b:a4:b2:78:
7f:49:42:67:7a:f4:c4:29:7c:43:04:f7:91:96:04:
cd:16:7c:6a:df:89:15:22:ba:70:52:81:17:f7:0c:
9b:76:26:31:16:6c:2e:9d:0e:2b:02:5a:98:6a:af:
24:98:85:53:ae:7f:74:7e:04:98:42:44:dd:c1:ff:
5a:15:55:1f:e6:59:91:06:64:31:4a:7c:be:df:4b:
d4:dd:53:27:de:cb:f1:95:77:20:60:52:11:c1:86:
75:87:ab:59:2e:0e:28:17:c4:7f:5a:85:73:53:04:
cc:ab:82:52:83:e7:2d:0f:6a:8c:98:6d:88:80:a1:
9b:de:ac:9b:93:06:0b:d4:fd:a1:7d:46:e1:d7:0a:
09:df:28:c3:c1:54:47:63:1d:ba:12:24:f5:04:7e:
f0:d0:31:99:ed:02:05:ee:03:88:1f:bd:8b:c9:11:
55:0d:62:9a:d2:47:dc:c9:04:b4:5f:e4:9a:29:22:
3b:31:54:28:62:92:e5:fa:fe:75:2a:a4:4e:1d:c4:
07:98:63:7a:23:be:0b:6d:20:01:32:9b:56:09:20:
c0:a5:0b:a4:67:f0:4b:88:e1:f3:6e:65:df:01:9d:
7f:b4:5d:b4:ba:d5:da:13:83:85:a3:ca:08:dd:7e:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:F4:F7:28:3F:D3:E5:BE:BF:DB:68:39:17:CF:7A:E9:59:30:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/312dbe04-0e6a-37c3-86d2-6a40ac24f788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
X509v3 Authority Key Identifier:
keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:5f:5a:73:7d:89:86:7c:39:73:50:9f:86:5a:6a:62:7d:b1:
d2:bc:8c:94:bf:b8:0a:4e:53:bd:0d:f7:73:0e:bb:02:32:67:
aa:0d:63:68:b4:93:d5:64:18:e4:70:09:de:35:c9:b1:7d:f6:
1c:25:28:f9:35:d5:86:e2:a8:5d:5f:ec:95:36:27:21:99:e0:
7a:ce:0d:79:cf:fe:13:dd:b5:e1:29:d0:aa:b6:b4:35:f4:26:
56:8e:f1:7b:09:fd:e5:4c:bd:f4:04:22:38:65:ad:17:0c:72:
1b:6c:89:78:fb:10:46:f4:e7:54:37:4e:f2:d9:9e:65:09:ba:
94:6c:07:25:17:6a:f4:54:02:6b:f3:99:44:93:58:2c:c9:32:
ca:43:ee:66:64:83:4e:a2:66:84:2f:2e:38:73:25:d7:d2:9c:
f6:47:b9:1c:9b:53:b9:73:b8:69:3d:f5:39:e5:38:7a:b5:2e:
b0:d6:8f:c2:a8:ff:2b:42:a1:9e:e0:39:ce:ba:ad:75:5a:56:
bc:03:ed:80:c2:4b:d1:25:52:35:bc:4b:ed:78:11:bb:dc:49:
98:55:20:e1:86:af:6b:9f:87:19:35:35:62:86:22:78:83:51:
f4:23:6f:04:72:f1:54:47:b9:3e:8e:be:99:ba:ad:66:a1:4a:
be:05:25:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENCKiuJcrbd9w8e1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh
YWQ5MB4XDTIzMDkxODAxMDAyM1oXDTIzMTIxNzAyMDAyM1owLzEtMCsGA1UEAxMk
MzY2YTNhZWItYmM2NS00MGM2LWJiZWQtYjg4NmEzNzMwNzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyOIi7kXBD6Ew5uksnh/SUJnevTEKXxDBPeR
lgTNFnxq34kVIrpwUoEX9wybdiYxFmwunQ4rAlqYaq8kmIVTrn90fgSYQkTdwf9a
FVUf5lmRBmQxSny+30vU3VMn3svxlXcgYFIRwYZ1h6tZLg4oF8R/WoVzUwTMq4JS
g+ctD2qMmG2IgKGb3qybkwYL1P2hfUbh1woJ3yjDwVRHYx26EiT1BH7w0DGZ7QIF
7gOIH72LyRFVDWKa0kfcyQS0X+SaKSI7MVQoYpLl+v51KqROHcQHmGN6I74LbSAB
MptWCSDApQukZ/BLiOHzbmXfAZ1/tF20utXaE4OFo8oI3X6U9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtY9PcoP9Plvr/baDkXz3rpWTABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy
MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvMzEyZGJlMDQtMGU2YS0z
N2MzLTg2ZDItNmE0MGFjMjRmNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy
NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl
YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0
OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdfWnN9iYZ8OXNQn4ZaamJ9sdK8jJS/uApOU70N93MOuwIyZ6oNY2i0
k9VkGORwCd41ybF99hwlKPk11YbiqF1f7JU2JyGZ4HrODXnP/hPdteEp0Kq2tDX0
JlaO8XsJ/eVMvfQEIjhlrRcMchtsiXj7EEb051Q3TvLZnmUJupRsByUXavRUAmvz
mUSTWCzJMspD7mZkg06iZoQvLjhzJdfSnPZHuRybU7lzuGk99TnlOHq1LrDWj8Ko
/ytCoZ7gOc66rXVaVrwD7YDCS9ElUjW8S+14EbvcSZhVIOGGr2ufhxk1NWKGIniD
UfQjbwRy8VRHuT6Ovpm6rWahSr4FJdA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:57 2024 by rpki-client on console-fra.rpki-client.org