Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/8f795e2b-7db0-3111-9336-34e23abfb75e.roa
File: 8f795e2b-7db0-3111-9336-34e23abfb75e.roa (raw, json)
Hash identifier: oXPStaC0D7uBxL8HO34K6J61No2poEUZ7IDm2U2GD7U=
Subject key identifier: 56:AB:DB:D9:62:7A:07:B9:A4:68:6C:EC:55:2B:4B:7E:78:D1:CB:03
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F4328584487FEE1DC8C8A8BCAAF579300
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/8f795e2b-7db0-3111-9336-34e23abfb75e.roa
Signing time: Fri 12 Jan 2024 18:06:49 +0000
ROA not before: Fri 12 Jan 2024 18:06:49 +0000
ROA not after: Thu 11 Apr 2024 17:06:49 +0000
asID: 55154
IP address blocks: 104.223.66.0/24 maxlen: 24
66.212.21.0/24 maxlen: 24
204.152.205.0/24 maxlen: 24
104.223.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:87:fe:e1:dc:8c:8a:8b:ca:af:57:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jan 12 18:06:49 2024 GMT
Not After : Apr 11 17:06:49 2024 GMT
Subject: CN=0116aaaa-1224-435a-af78-91e9186c8b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:58:37:5c:b0:73:4d:4f:d0:87:34:be:f1:
b2:1f:f7:b5:8b:f3:3d:2f:90:fa:a8:52:1b:38:06:
6e:84:74:09:e4:df:7c:f3:2e:a5:58:d8:c2:9c:97:
84:9b:09:12:ff:7b:02:4e:46:7b:33:83:b8:51:48:
57:2c:28:5d:af:af:21:e5:12:93:f2:da:ed:ea:e5:
c1:4b:1d:7e:e6:e2:8a:4d:b6:2a:02:c5:80:2a:e7:
3d:28:eb:40:29:e4:e4:f9:63:0b:c3:ca:df:90:90:
b9:bd:0f:6d:2c:21:c2:e3:fa:6a:a9:64:10:81:1f:
ec:f1:21:9d:b2:80:40:35:ec:1c:3a:ea:ee:d0:07:
ce:89:46:73:37:51:56:3d:08:59:a7:c5:91:b1:71:
42:ca:c8:62:9a:64:46:f7:a9:3d:82:bc:34:bc:82:
21:21:6f:7b:f5:f1:c1:81:db:70:6a:b9:90:eb:3d:
0e:6c:34:da:3d:82:ae:83:f0:3e:1e:12:0a:bd:e7:
f4:f0:27:0c:47:7d:5f:d5:01:bd:f5:30:b9:d9:b0:
33:b4:73:03:a0:3c:ef:39:cc:94:0a:4b:66:34:ae:
9d:ba:20:29:35:a7:f9:46:53:d5:86:81:69:6e:25:
a0:fd:40:9e:84:9e:41:12:cb:78:6e:0a:28:29:4e:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AB:DB:D9:62:7A:07:B9:A4:68:6C:EC:55:2B:4B:7E:78:D1:CB:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/8f795e2b-7db0-3111-9336-34e23abfb75e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.212.21.0/24
104.223.3.0/24
104.223.66.0/24
204.152.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:fa:88:25:12:d7:4d:d4:31:5f:29:33:f7:5b:52:b5:8f:85:
b4:e6:9f:66:f3:9c:f3:8f:c9:e6:58:90:5b:fb:4a:14:ce:c4:
ee:ab:93:e4:37:fa:db:2f:16:a2:99:36:9e:bd:53:67:cf:cd:
3f:9a:7b:a9:05:2a:cd:67:f5:05:c7:d6:5e:05:cd:d2:2d:6a:
cd:8b:60:14:54:cc:a5:5d:de:d9:30:6f:00:91:4e:70:9f:27:
2a:e2:8e:58:26:5e:75:1f:63:2c:67:d3:0a:d9:20:d6:49:03:
68:06:d8:ad:e2:72:77:1f:72:2b:1e:57:b8:9b:58:b8:1a:4d:
66:de:96:4a:87:79:25:0e:d5:54:50:2e:08:1a:7e:ba:2a:22:
1a:b1:93:94:4a:a8:c5:96:b6:f1:4c:df:70:ee:73:16:46:b6:
3b:f1:77:05:64:e2:72:5c:2a:4d:d1:72:41:21:3b:4a:3f:d1:
f0:de:84:9a:dd:01:98:de:8e:27:4e:52:36:6a:81:c0:3e:b8:
4f:2c:32:5e:0b:d1:fe:08:b6:01:95:e2:94:64:5f:2b:6d:94:
b7:bb:fc:9c:66:ae:18:2a:5b:d0:bb:44:a1:75:6f:67:3e:e1:
ef:e4:2a:32:69:19:c3:c2:8c:8e:f6:dd:d8:c9:42:6c:08:d0:
d0:fa:55:83
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWESH/uHcjIqLyq9XkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MDExMjE4MDY0OVoXDTI0MDQxMTE3MDY0OVowLzEtMCsGA1UEAxMk
MDExNmFhYWEtMTIyNC00MzVhLWFmNzgtOTFlOTE4NmM4YjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaFYN1ywc01P0Ic0vvGyH/e1i/M9L5D6qFIb
OAZuhHQJ5N988y6lWNjCnJeEmwkS/3sCTkZ7M4O4UUhXLChdr68h5RKT8trt6uXB
Sx1+5uKKTbYqAsWAKuc9KOtAKeTk+WMLw8rfkJC5vQ9tLCHC4/pqqWQQgR/s8SGd
soBANewcOuru0AfOiUZzN1FWPQhZp8WRsXFCyshimmRG96k9grw0vIIhIW979fHB
gdtwarmQ6z0ObDTaPYKug/A+HhIKvef08CcMR31f1QG99TC52bAztHMDoDzvOcyU
CktmNK6duiApNaf5RlPVhoFpbiWg/UCehJ5BEst4bgooKU5EXQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFFar29liege5pGhs7FUrS3540csDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvOGY3OTVlMmItN2RiMC0z
MTExLTkzMzYtMzRlMjNhYmZiNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQtQVAwQA
aN8DAwQAaN9CAwQAzJjNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIL6iCUS103UMV8pM/dbUrWPhbTmn2bz
nPOPyeZYkFv7ShTOxO6rk+Q3+tsvFqKZNp69U2fPzT+ae6kFKs1n9QXH1l4FzdIt
as2LYBRUzKVd3tkwbwCRTnCfJyrijlgmXnUfYyxn0wrZINZJA2gG2K3icncfcise
V7ibWLgaTWbelkqHeSUO1VRQLggafroqIhqxk5RKqMWWtvFM33DucxZGtjvxdwVk
4nJcKk3RckEhO0o/0fDehJrdAZjejidOUjZqgcA+uE8sMl4L0f4ItgGV4pRkXytt
lLe7/JxmrhgqW9C7RKF1b2c+4e/kKjJpGcPCjI723djJQmwI0ND6VYM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org