Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6cc1b208-40d7-3188-894f-3ef0288a0065.roa
File: 6cc1b208-40d7-3188-894f-3ef0288a0065.roa (raw, json)
Hash identifier: 7887RFVIIK2YsT+IsXYYS/JejXqxg7EgmtNtU4AAJds=
Subject key identifier: AC:1B:3E:BB:E2:21:C3:AC:BD:D4:FB:20:DC:12:7D:17:D8:C0:CD:20
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285846C51A705A4383FCA94177E130
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6cc1b208-40d7-3188-894f-3ef0288a0065.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 20060
IP address blocks: 170.30.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:70:5a:43:83:fc:a9:41:77:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=34621c5b-2a08-465e-88ec-fb4a9bb07417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:f5:13:2b:0a:ba:bd:09:63:f9:da:28:24:
ac:c0:c6:2e:33:da:fc:1a:e5:cd:f5:c7:f2:6f:14:
ec:1f:8d:df:00:0a:a2:76:70:85:8c:be:86:a3:e2:
ba:5c:48:46:8f:c7:b6:37:3c:1f:5b:74:a2:aa:7c:
41:d7:d0:48:27:84:ec:29:e6:51:b2:52:22:1c:c5:
8c:d4:23:1f:6c:89:a7:86:d6:e3:ff:61:19:c3:fd:
a1:bf:1a:d3:4f:5f:b0:cb:9c:1c:cd:13:bc:c5:54:
f3:11:1a:02:3a:b7:39:d8:c6:5f:af:ac:5a:1d:32:
d9:da:1d:0f:9b:9d:2f:73:8a:3f:90:fb:53:45:9f:
b1:d3:01:d1:2d:80:c2:5a:5d:02:79:24:e3:e8:16:
82:49:62:bc:be:21:32:bc:08:83:1a:bc:a0:7b:12:
00:7f:79:fd:22:cf:ad:1e:94:c3:4c:8f:86:87:2d:
22:28:99:5a:cb:2e:75:c4:fb:ec:ae:18:4e:49:7a:
eb:30:bf:f0:d3:ca:af:46:7c:c0:14:1a:e7:e5:ec:
54:e0:86:bd:07:03:41:e2:eb:07:f3:87:38:ae:f7:
41:9c:17:0e:c0:22:4e:5e:63:66:48:36:fe:99:a4:
63:45:e6:3e:ea:19:40:a8:0a:5c:30:31:fd:10:1e:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:3E:BB:E2:21:C3:AC:BD:D4:FB:20:DC:12:7D:17:D8:C0:CD:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6cc1b208-40d7-3188-894f-3ef0288a0065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
170.30.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:f2:b7:6f:a1:71:70:4d:ca:54:0d:e0:42:f4:0b:b2:87:e8:
20:35:d6:f3:47:3a:5f:75:b7:67:ae:88:eb:01:98:37:c4:ff:
e2:b4:08:58:d0:42:b5:e5:e2:f8:67:8b:2a:09:d0:ee:c8:a2:
1c:cf:d5:6e:8a:1f:f8:ca:73:52:75:c6:aa:2f:49:53:ba:be:
80:50:76:7c:ed:ab:0a:06:eb:c2:ff:ff:23:ad:1d:8f:43:9f:
9f:2b:50:b1:26:02:a7:24:60:7e:a2:da:86:dd:c3:f4:22:99:
a5:88:35:95:1f:d3:8c:f5:06:46:19:be:76:1e:69:ca:c1:af:
9a:7d:cb:74:37:3f:64:cf:5e:0d:2c:f3:77:58:76:35:75:eb:
32:49:dc:7d:1a:a4:79:62:1c:f1:af:29:72:ba:c8:b1:ea:4d:
97:4f:2f:ea:f0:e0:72:e8:7e:ef:95:85:b8:a6:da:98:21:72:
d1:a4:21:7b:5e:97:ce:ed:b6:df:8e:80:04:5c:96:54:63:22:
0e:c5:72:19:5b:4c:78:89:73:14:ad:15:6d:1f:98:df:14:69:
bd:32:33:13:d5:8d:05:21:f0:31:f2:cb:19:39:73:fd:b5:29:
80:33:5f:e8:e4:01:c4:85:9f:01:63:79:7d:13:1a:10:37:b0:
c9:b3:11:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbFGnBaQ4P8qUF34TAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDgwNTAxMDAyOVoXDTI0MTEwMzAxMDAyOVowLzEtMCsGA1UEAxMk
MzQ2MjFjNWItMmEwOC00NjVlLTg4ZWMtZmI0YTliYjA3NDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVj1EysKur0JY/naKCSswMYuM9r8GuXN9cfy
bxTsH43fAAqidnCFjL6Go+K6XEhGj8e2NzwfW3SiqnxB19BIJ4TsKeZRslIiHMWM
1CMfbImnhtbj/2EZw/2hvxrTT1+wy5wczRO8xVTzERoCOrc52MZfr6xaHTLZ2h0P
m50vc4o/kPtTRZ+x0wHRLYDCWl0CeSTj6BaCSWK8viEyvAiDGrygexIAf3n9Is+t
HpTDTI+Ghy0iKJlayy51xPvsrhhOSXrrML/w08qvRnzAFBrn5exU4Ia9BwNB4usH
84c4rvdBnBcOwCJOXmNmSDb+maRjReY+6hlAqApcMDH9EB5U2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwbPrviIcOsvdT7INwSfRfYwM0gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmNjMWIyMDgtNDBkNy0z
MTg4LTg5NGYtM2VmMDI4OGEwMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbyt2+hcXBNylQN4EL0C7KH6CA11vNHOl91t2euiOsBmDfE/+K0CFjQ
QrXl4vhniyoJ0O7IohzP1W6KH/jKc1J1xqovSVO6voBQdnztqwoG68L//yOtHY9D
n58rULEmAqckYH6i2obdw/QimaWINZUf04z1BkYZvnYeacrBr5p9y3Q3P2TPXg0s
83dYdjV16zJJ3H0apHliHPGvKXK6yLHqTZdPL+rw4HLofu+Vhbim2pghctGkIXte
l87ttt+OgARcllRjIg7FchlbTHiJcxStFW0fmN8Uab0yMxPVjQUh8DHyyxk5c/21
KYAzX+jkAcSFnwFjeX0TGhA3sMmzEdY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:23 2025 by rpki-client