Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/59b721bf-fd96-3ff0-9ae0-9772765f4fc8.roa
File: 59b721bf-fd96-3ff0-9ae0-9772765f4fc8.roa (raw, json)
Hash identifier: JgGqnM68Cj+fiXvegULbA63hJxqpm52wvO3JMVMrRPk=
Subject key identifier: A0:FF:AB:A1:11:11:7F:B4:DF:3F:25:77:04:B0:85:10:61:A0:EB:8C
Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial: 010D0C9F43285838BB89DC0F4372F0BB4A8FB940
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/59b721bf-fd96-3ff0-9ae0-9772765f4fc8.roa
Signing time: Mon 25 Jan 2021 05:00:00 +0000
ROA not before: Mon 25 Jan 2021 05:00:00 +0000
ROA not after: Sun 30 Apr 2023 04:00:00 +0000
asID: 36445
IP address blocks: 162.218.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:bb:89:dc:0f:43:72:f0:bb:4a:8f:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Validity
Not Before: Jan 25 05:00:00 2021 GMT
Not After : Apr 30 04:00:00 2023 GMT
Subject: CN=2a824356-97c8-418d-b283-291e38df6179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:fd:bf:08:b0:6a:c9:25:ee:ef:57:44:5a:
2d:d9:5d:d5:cb:23:34:0a:51:df:0d:4b:91:0b:29:
e9:aa:84:de:ab:b8:35:8e:81:c2:2e:5f:5e:42:b3:
8e:25:9b:ea:91:59:b7:00:59:9b:99:92:cc:84:db:
df:78:13:7f:d3:67:ff:86:eb:ca:1a:c0:91:12:89:
e4:12:25:6f:5f:4f:f2:10:c5:cb:c9:19:5c:e9:bf:
60:12:f4:37:21:93:a9:d9:bc:13:02:4b:3f:bc:25:
b0:8d:6a:94:8a:be:80:0e:2a:f1:24:67:37:6c:6c:
96:ae:15:53:f3:d7:28:74:9d:59:89:25:fc:af:ac:
df:4a:75:33:a8:80:af:51:71:f6:da:de:25:9c:c3:
50:ea:7e:74:a6:8d:da:e9:3b:9c:3b:3c:69:56:f8:
68:2b:d6:dd:3d:e8:a3:f1:cf:c1:a3:9f:69:e1:22:
8c:cd:d0:cc:a1:6c:b5:69:6e:fd:b3:b2:09:9e:ed:
bd:e3:36:0e:86:fd:ac:ed:31:98:29:f8:ae:7c:92:
30:19:ed:62:df:4c:fe:99:8a:8f:5c:0b:18:55:6d:
da:db:e7:63:a1:e0:b7:ee:91:26:7a:0b:d2:04:76:
2d:1c:71:c0:77:3b:21:eb:ac:c4:30:03:4d:d7:06:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:AB:A1:11:11:7F:B4:DF:3F:25:77:04:B0:85:10:61:A0:EB:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/59b721bf-fd96-3ff0-9ae0-9772765f4fc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
X509v3 Authority Key Identifier:
keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
sbgp-ipAddrBlock: critical
IPv4:
162.218.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:85:67:50:f5:b4:e4:7a:c7:ce:b7:7c:8c:5a:71:d6:ea:91:
58:7c:4a:9d:da:4e:85:8e:03:c1:48:89:60:73:82:24:15:f4:
54:33:1b:e9:7f:dd:0b:26:ee:56:e1:ca:28:76:f2:b6:f6:c9:
78:fe:5d:b8:95:8b:47:0f:33:af:3e:bb:0a:a5:de:24:c7:ac:
ef:8b:da:67:ed:5b:00:f8:57:f1:92:f3:ec:01:f2:f6:7d:f9:
24:23:63:98:8b:d2:30:5e:20:26:56:30:0e:c5:e2:c4:d8:05:
0b:d5:61:04:63:90:63:44:5d:a2:64:c4:2c:5d:e4:21:7b:a9:
5a:85:6c:65:fc:4f:cd:13:da:29:f3:91:86:6a:f9:5d:06:25:
24:10:d5:dc:fb:58:9d:35:df:de:f1:89:e5:c7:3f:59:2d:60:
37:b2:44:8a:bd:18:9a:71:1f:40:33:49:64:f3:cc:d2:7e:02:
92:e4:72:49:12:26:74:fc:da:77:08:89:90:f5:e1:ab:ad:29:
b5:16:28:01:e3:b8:92:79:56:d2:fb:08:08:ff:38:53:ee:3c:
9c:d7:e3:1a:68:7d:52:a0:7c:16:fb:5e:88:3f:b9:58:f4:d9:
4a:ba:92:62:d4:dc:dd:96:f5:30:a7:db:b2:a5:b6:2c:82:1a:
45:8f:e3:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDi7idwPQ3Lwu0qPuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0
Zjg0MB4XDTIxMDEyNTA1MDAwMFoXDTIzMDQzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MmE4MjQzNTYtOTdjOC00MThkLWIyODMtMjkxZTM4ZGY2MTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwf9vwiwaskl7u9XRFot2V3VyyM0ClHfDUuR
CynpqoTeq7g1joHCLl9eQrOOJZvqkVm3AFmbmZLMhNvfeBN/02f/huvKGsCREonk
EiVvX0/yEMXLyRlc6b9gEvQ3IZOp2bwTAks/vCWwjWqUir6ADirxJGc3bGyWrhVT
89codJ1ZiSX8r6zfSnUzqICvUXH22t4lnMNQ6n50po3a6TucOzxpVvhoK9bdPeij
8c/Bo59p4SKMzdDMoWy1aW79s7IJnu294zYOhv2s7TGYKfiufJIwGe1i30z+mYqP
XAsYVW3a2+djoeC37pEmegvSBHYtHHHAdzsh66zEMANN1wbldQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKD/q6EREX+03z8ldwSwhRBhoOuMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz
ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNTliNzIxYmYtZmQ5Ni0z
ZmYwLTlhZTAtOTc3Mjc2NWY0ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx
MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj
NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0
ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOFZ1D1tOR6x863fIxacdbqkVh8Sp3aToWOA8FIiWBzgiQV9FQzG+l/
3Qsm7lbhyih28rb2yXj+XbiVi0cPM68+uwql3iTHrO+L2mftWwD4V/GS8+wB8vZ9
+SQjY5iL0jBeICZWMA7F4sTYBQvVYQRjkGNEXaJkxCxd5CF7qVqFbGX8T80T2inz
kYZq+V0GJSQQ1dz7WJ01397xieXHP1ktYDeyRIq9GJpxH0AzSWTzzNJ+ApLkckkS
JnT82ncIiZD14autKbUWKAHjuJJ5VtL7CAj/OFPuPJzX4xpofVKgfBb7Xog/uVj0
2Uq6kmLU3N2W9TCn27KltiyCGkWP460=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:26 2025 by rpki-client