Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd46a76e-7c8d-3eff-b8c0-409bd02d9067.roa
File: fd46a76e-7c8d-3eff-b8c0-409bd02d9067.roa (raw, json)
Hash identifier: 3DxVaC1mHim5UOavq3sMTaKWA765mD6duz2r9Jzq0M4=
Subject key identifier: 32:6B:C1:24:98:F5:96:B4:9C:1C:5B:08:9E:DC:40:F9:5F:B9:52:0E
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584618E882A94745B79E87143A90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd46a76e-7c8d-3eff-b8c0-409bd02d9067.roa
Signing time: Tue 04 Jun 2024 08:40:54 +0000
ROA not before: Tue 04 Jun 2024 08:40:54 +0000
ROA not after: Mon 02 Sep 2024 08:40:54 +0000
asID: 202
IP address blocks: 168.87.4.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:18:e8:82:a9:47:45:b7:9e:87:14:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jun 4 08:40:54 2024 GMT
Not After : Sep 2 08:40:54 2024 GMT
Subject: CN=8ae1a6b6-ed23-45c8-bc6a-ba84945a7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:53:45:a2:fd:64:f8:0c:62:85:ec:97:4c:
c8:ec:f6:39:10:79:6b:ea:40:c5:d3:25:32:b8:2a:
3b:44:09:c6:2c:77:f6:70:f4:8d:c9:d6:06:52:30:
1d:4e:a3:e6:4e:55:da:10:41:4f:4d:97:17:0d:59:
10:3a:b6:f7:7c:b3:03:7c:e4:67:d7:21:cb:e1:91:
59:58:9c:9e:a8:4e:1b:9e:fb:87:02:1d:3c:60:84:
20:35:ff:75:fa:aa:b2:7c:31:53:21:3f:1a:74:bf:
34:3a:88:56:c7:b3:64:b1:35:09:45:ad:75:42:8f:
81:45:e0:a4:ed:64:f6:40:f5:c6:50:d6:dc:53:b4:
cc:05:43:68:5c:9e:40:32:a7:86:35:53:b1:07:1d:
ec:2c:21:2a:ae:19:3d:0b:cc:46:39:3e:53:04:9f:
55:f4:a4:f2:54:9c:8c:79:78:2e:a3:fb:0d:a7:03:
8e:43:20:fd:aa:16:13:47:d8:35:14:61:f8:a2:b3:
ff:c1:de:bf:fa:1b:6c:bf:dc:54:83:f4:1b:9b:5c:
06:41:99:02:b0:b4:73:1e:02:fa:84:b2:9d:b5:33:
3c:e5:c3:3e:76:ff:3e:08:67:0e:5a:27:2d:9f:b9:
e4:87:5a:9d:3b:22:ff:28:b7:18:a5:d0:09:b6:5b:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:C1:24:98:F5:96:B4:9C:1C:5B:08:9E:DC:40:F9:5F:B9:52:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd46a76e-7c8d-3eff-b8c0-409bd02d9067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f8:ca:bd:10:09:46:ef:fd:f6:0d:cc:7b:be:4c:8b:fb:dd:
d1:06:cb:1e:d8:c1:25:a8:1b:82:da:3b:11:e5:33:46:cb:d8:
6d:51:10:49:3e:1e:7a:53:44:fa:19:d1:c2:20:5f:1d:86:a2:
e1:80:04:1d:9e:7b:ba:6f:30:ba:6d:10:be:71:b5:e2:0c:b7:
f8:33:9f:4f:75:1c:1e:4c:c7:93:d5:df:91:d0:48:fd:bb:5a:
cb:ce:ca:f4:ae:58:14:08:e8:de:fd:b9:c6:cc:39:93:0c:46:
03:9d:60:79:ac:27:11:f5:f4:10:56:19:ad:bc:28:b0:17:ae:
a0:2d:d2:24:0f:6d:7b:6c:1e:0a:0a:7f:23:e8:d5:fd:e3:b4:
a0:30:9e:98:46:22:ab:e9:5e:52:2c:66:41:e3:a2:99:ac:72:
b9:87:b3:9c:12:1d:f4:90:6b:07:9e:1e:9f:64:41:2f:06:cf:
ac:0e:54:e5:44:2b:da:70:b3:84:2c:86:43:a6:4d:9f:cc:dc:
6c:f0:fb:c8:84:55:bf:73:43:a9:29:70:53:0e:aa:e5:2e:5b:
e1:81:e7:1e:1c:5a:66:e2:9e:43:13:59:7a:f6:19:c1:52:f3:
fc:97:13:97:79:d1:5d:ff:d6:51:4b:cb:0d:52:c4:4c:bc:ae:
7e:da:57:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYY6IKpR0W3nocUOpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDYwNDA4NDA1NFoXDTI0MDkwMjA4NDA1NFowLzEtMCsGA1UEAxMk
OGFlMWE2YjYtZWQyMy00NWM4LWJjNmEtYmE4NDk0NWE3ZjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj5TRaL9ZPgMYoXsl0zI7PY5EHlr6kDF0yUy
uCo7RAnGLHf2cPSNydYGUjAdTqPmTlXaEEFPTZcXDVkQOrb3fLMDfORn1yHL4ZFZ
WJyeqE4bnvuHAh08YIQgNf91+qqyfDFTIT8adL80OohWx7NksTUJRa11Qo+BReCk
7WT2QPXGUNbcU7TMBUNoXJ5AMqeGNVOxBx3sLCEqrhk9C8xGOT5TBJ9V9KTyVJyM
eXguo/sNpwOOQyD9qhYTR9g1FGH4orP/wd6/+htsv9xUg/Qbm1wGQZkCsLRzHgL6
hLKdtTM85cM+dv8+CGcOWictn7nkh1qdOyL/KLcYpdAJtltnzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJrwSSY9Za0nBxbCJ7cQPlfuVIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmQ0NmE3NmUtN2M4ZC0z
ZWZmLWI4YzAtNDA5YmQwMmQ5MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFf4yr0QCUbv/fYNzHu+TIv73dEGyx7YwSWoG4LaOxHlM0bL2G1REEk+
HnpTRPoZ0cIgXx2GouGABB2ee7pvMLptEL5xteIMt/gzn091HB5Mx5PV35HQSP27
WsvOyvSuWBQI6N79ucbMOZMMRgOdYHmsJxH19BBWGa28KLAXrqAt0iQPbXtsHgoK
fyPo1f3jtKAwnphGIqvpXlIsZkHjopmscrmHs5wSHfSQaweeHp9kQS8Gz6wOVOVE
K9pws4QshkOmTZ/M3Gzw+8iEVb9zQ6kpcFMOquUuW+GB5x4cWmbinkMTWXr2GcFS
8/yXE5d50V3/1lFLyw1SxEy8rn7aV1w=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:46 2025 by rpki-client