Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4dba49d5-5416-3986-a16a-c9c63b2c313f.roa
File: 4dba49d5-5416-3986-a16a-c9c63b2c313f.roa (raw, json)
Hash identifier: oPAzJquFvhUMIwnDGUxkDu/w0MyPaiNjfIWTGghRpKo=
Subject key identifier: B5:4B:3C:DE:FD:71:DD:15:91:93:9F:58:7A:E0:2F:7B:52:BD:43:8A
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F43285844ABFD7078CF00C350F65A6580
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4dba49d5-5416-3986-a16a-c9c63b2c313f.roa
Signing time: Thu 25 Jan 2024 15:33:01 +0000
ROA not before: Thu 25 Jan 2024 15:33:01 +0000
ROA not after: Wed 24 Apr 2024 14:33:01 +0000
asID: 47069
IP address blocks: 23.167.8.0/24 maxlen: 24
2602:f9df:300::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ab:fd:70:78:cf:00:c3:50:f6:5a:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Jan 25 15:33:01 2024 GMT
Not After : Apr 24 14:33:01 2024 GMT
Subject: CN=82492512-0ebf-473c-8bef-82e27d74f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:d5:42:6c:43:e9:be:2e:e3:e6:de:e5:42:
32:86:96:b3:a0:7d:1b:32:33:5a:c3:70:a7:d8:da:
d4:14:99:50:39:29:c0:43:c6:98:31:4f:e2:97:9c:
ab:4b:c3:89:f8:12:dd:a9:1f:ea:d8:f6:95:2a:3c:
9c:3a:96:83:f5:9e:07:35:d8:7f:d2:5e:64:fd:ea:
8d:13:95:23:17:a0:cf:8a:b1:fb:90:74:e1:13:37:
ab:b1:c0:60:f7:52:b8:ad:2b:ef:57:3f:bd:9c:0f:
ea:3a:29:32:95:05:02:d1:13:36:43:a1:37:8f:48:
22:4a:f3:6b:7e:f0:dd:f4:b8:0e:30:62:e4:b8:5f:
b5:df:6e:cb:70:d3:01:ac:12:4e:7a:39:c6:a6:73:
c7:62:8e:a4:9d:e3:73:90:e4:60:d9:d3:41:58:69:
b5:a8:8d:16:70:d5:51:bd:2a:3e:87:8e:fc:64:3f:
d0:3e:bd:35:f9:54:ca:57:20:90:c3:37:ba:3b:c2:
31:59:b7:bc:6e:3a:94:b8:56:db:63:73:07:86:5e:
34:f1:8f:6c:57:79:aa:62:22:ed:bb:d6:93:cd:bb:
f6:0c:9d:b9:47:be:92:78:3c:e5:2c:86:85:a6:64:
db:19:4d:b6:bb:6a:1e:7a:8a:cb:3b:69:a4:55:64:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:3C:DE:FD:71:DD:15:91:93:9F:58:7A:E0:2F:7B:52:BD:43:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/4dba49d5-5416-3986-a16a-c9c63b2c313f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.8.0/24
IPv6:
2602:f9df:300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:22:3e:6e:fe:bc:3a:fa:9a:a6:ba:f5:fa:85:6d:ea:05:6d:
be:bf:ac:1a:e6:55:b2:44:08:e3:e8:fd:98:63:50:59:37:ed:
c6:eb:04:45:39:97:05:52:e7:75:5b:c6:06:9c:8f:55:33:2f:
3b:cf:36:90:8d:1d:8b:4b:e6:f6:7e:c3:b0:ba:47:44:48:20:
1b:05:3c:57:3f:2a:ed:43:8c:b4:87:cd:3c:54:42:89:55:71:
61:0c:90:46:6d:21:df:90:21:05:cc:a6:fc:b6:06:16:d9:70:
1e:13:cc:e9:c4:b1:a1:30:68:34:32:4e:e1:67:8c:b7:7a:b4:
26:49:f3:00:4f:d4:1e:f9:ae:cd:d4:a9:26:43:de:8b:58:53:
44:e2:69:4b:ed:aa:ec:dc:57:34:2a:45:c2:97:df:88:e3:a3:
3e:8f:a1:4f:fa:8e:1b:6c:5d:5a:83:38:bb:4a:4c:9f:9b:a1:
49:c3:0c:d7:74:3a:3e:eb:c9:0d:7c:cd:f8:85:f6:80:3c:2e:
50:88:3c:b9:56:c4:34:ec:8f:b8:61:d9:7d:aa:bf:0f:5a:3c:
0c:ef:3d:18:6f:07:ce:24:8e:44:b3:f7:6c:c0:66:a4:60:a2:
4d:ca:39:2b:18:6f:2c:cc:22:f3:7b:b4:94:cc:24:24:15:19:
24:c4:82:ff
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWESr/XB4zwDDUPZaZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTI0MDEyNTE1MzMwMVoXDTI0MDQyNDE0MzMwMVowLzEtMCsGA1UEAxMk
ODI0OTI1MTItMGViZi00NzNjLThiZWYtODJlMjdkNzRmMjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGTVQmxD6b4u4+be5UIyhpazoH0bMjNaw3Cn
2NrUFJlQOSnAQ8aYMU/il5yrS8OJ+BLdqR/q2PaVKjycOpaD9Z4HNdh/0l5k/eqN
E5UjF6DPirH7kHThEzerscBg91K4rSvvVz+9nA/qOikylQUC0RM2Q6E3j0giSvNr
fvDd9LgOMGLkuF+1327LcNMBrBJOejnGpnPHYo6kneNzkORg2dNBWGm1qI0WcNVR
vSo+h478ZD/QPr01+VTKVyCQwze6O8IxWbe8bjqUuFbbY3MHhl408Y9sV3mqYiLt
u9aTzbv2DJ25R76SeDzlLIaFpmTbGU22u2oeeorLO2mkVWSAxQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFLVLPN79cd0VkZOfWHrgL3tSvUOKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvNGRiYTQ5ZDUtNTQxNi0z
OTg2LWExNmEtYzljNjNiMmMzMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6cIMA4E
AgACMAgDBgAmAvnfAzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwIj5u/rw6+pqmuvX6hW3qBW2+v6wa5lWy
RAjj6P2YY1BZN+3G6wRFOZcFUud1W8YGnI9VMy87zzaQjR2LS+b2fsOwukdESCAb
BTxXPyrtQ4y0h808VEKJVXFhDJBGbSHfkCEFzKb8tgYW2XAeE8zpxLGhMGg0Mk7h
Z4y3erQmSfMAT9Qe+a7N1KkmQ96LWFNE4mlL7ars3Fc0KkXCl9+I46M+j6FP+o4b
bF1agzi7Skyfm6FJwwzXdDo+68kNfM34hfaAPC5QiDy5VsQ07I+4Ydl9qr8PWjwM
7z0YbwfOJI5Es/dswGakYKJNyjkrGG8szCLze7SUzCQkFRkkxIL/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org