Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/7e5899e2-486a-37ff-a408-c02d26513357.roa
File: 7e5899e2-486a-37ff-a408-c02d26513357.roa (raw, json)
Hash identifier: hI6K7JCcgDdqNjc8dikHECnzGlyb4qd6o/JHCkPZs6c=
Subject key identifier: 8E:39:3A:3B:93:24:8B:DD:8F:68:C1:60:3D:EB:F6:B9:6C:97:0B:26
Certificate issuer: /CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf
Certificate serial: 010D0C9F432858447D04BE0FF4BA1B3CF45BED00
Authority key identifier: B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/7e5899e2-486a-37ff-a408-c02d26513357.roa
Signing time: Mon 08 Jan 2024 19:44:44 +0000
ROA not before: Mon 08 Jan 2024 19:44:44 +0000
ROA not after: Sun 07 Apr 2024 18:44:44 +0000
asID: 39521
IP address blocks: 23.147.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7d:04:be:0f:f4:ba:1b:3c:f4:5b:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf
Validity
Not Before: Jan 8 19:44:44 2024 GMT
Not After : Apr 7 18:44:44 2024 GMT
Subject: CN=da252216-c09f-4b99-9040-8787fce57df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:a5:13:67:d0:dd:09:84:dd:9c:36:7f:20:
a0:ef:43:14:52:9f:ac:98:bd:e4:e9:e4:d0:35:e3:
c7:9d:c7:3a:bd:8d:9d:75:71:f9:44:fb:0f:86:a5:
83:ac:c0:20:7f:98:08:23:c8:e1:f0:dd:db:33:38:
08:f0:bb:72:e1:83:4d:13:77:ee:6a:ae:35:c8:22:
00:ff:e7:4c:90:3d:2d:a2:e5:3b:f5:d0:bd:45:4a:
04:1d:53:53:73:4a:95:73:5b:ae:e7:e8:35:e9:a2:
68:73:6b:e2:6b:96:82:02:6d:90:f1:98:50:66:af:
b3:0c:eb:b8:36:f3:55:12:38:0f:1d:e0:ba:61:2b:
c6:fb:6d:03:3e:5d:a1:d1:ac:23:4a:79:2a:d8:86:
eb:3a:01:5d:cc:5e:51:ea:53:3b:50:2d:1e:3d:38:
50:6d:65:ad:54:ab:40:04:88:3f:75:dd:37:37:88:
1d:a0:0a:20:1b:6e:29:fd:c2:fa:08:02:d9:10:27:
2d:3d:7b:3a:1f:07:dc:5f:78:42:f0:77:f9:e2:9d:
1b:f6:66:e8:07:29:e7:a7:3b:db:91:86:7a:fa:f7:
7c:d1:c2:e6:20:fb:98:a8:5a:37:cc:e5:fe:80:5c:
cf:ce:4f:13:f1:70:ac:71:58:e5:0f:09:2c:70:04:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:3A:3B:93:24:8B:DD:8F:68:C1:60:3D:EB:F6:B9:6C:97:0B:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/7e5899e2-486a-37ff-a408-c02d26513357.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl
X509v3 Authority Key Identifier:
keyid:B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:75:07:08:0a:39:4d:35:d8:ce:01:0e:3a:85:94:ea:e5:1b:
01:27:ba:12:b1:75:45:d3:7e:4d:2c:70:ed:44:80:6a:ad:3a:
06:de:c4:c8:07:93:5c:bc:0b:a4:7b:93:31:55:23:86:cc:f9:
ee:79:b2:b5:e7:64:14:2d:a3:54:e4:be:8f:2a:69:09:17:20:
20:d5:18:b1:4c:21:8c:d8:e9:a7:e7:21:26:76:c5:92:ea:75:
77:61:ae:a9:93:52:c5:89:95:8d:79:5d:33:ba:1a:92:de:53:
8c:22:be:f5:de:e7:93:72:e0:a5:e4:d3:ee:7b:4c:8d:51:29:
be:00:bf:94:4c:a5:fc:e3:98:36:74:42:7b:a9:9e:19:78:a3:
dc:39:fa:d1:14:11:ee:46:2a:b2:47:0a:3f:41:3d:ed:fa:a9:
61:b7:b1:1f:35:66:b1:be:f4:96:f4:6f:b7:58:bc:5c:98:e9:
e0:2c:2b:a2:6a:4b:c1:85:2a:4b:18:09:f5:0e:02:28:87:9d:
8e:a5:e3:eb:23:f1:0c:a9:3e:ca:c8:6c:68:00:f1:ff:bb:95:
40:af:ba:1e:59:75:02:7b:ea:10:d0:4f:21:8d:22:09:43:7a:
77:cc:d0:a2:22:c5:56:7e:44:4a:75:79:75:f0:22:59:29:10:
1a:94:a2:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWER9BL4P9LobPPRb7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZkOTQwYjYtNmMzZC00ZTk2LTk5MWMtYTdlNjRiOGIw
OWNmMB4XDTI0MDEwODE5NDQ0NFoXDTI0MDQwNzE4NDQ0NFowLzEtMCsGA1UEAxMk
ZGEyNTIyMTYtYzA5Zi00Yjk5LTkwNDAtODc4N2ZjZTU3ZGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxKlE2fQ3QmE3Zw2fyCg70MUUp+smL3k6eTQ
NePHncc6vY2ddXH5RPsPhqWDrMAgf5gII8jh8N3bMzgI8Lty4YNNE3fuaq41yCIA
/+dMkD0touU79dC9RUoEHVNTc0qVc1uu5+g16aJoc2via5aCAm2Q8ZhQZq+zDOu4
NvNVEjgPHeC6YSvG+20DPl2h0awjSnkq2IbrOgFdzF5R6lM7UC0ePThQbWWtVKtA
BIg/dd03N4gdoAogG24p/cL6CALZECctPXs6HwfcX3hC8Hf54p0b9mboBynnpzvb
kYZ6+vd80cLmIPuYqFo3zOX+gFzPzk8T8XCscVjlDwkscARiWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI45OjuTJIvdj2jBYD3r9rlslwsmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNmQ5
NDBiNi02YzNkLTRlOTYtOTkxYy1hN2U2NGI4YjA5Y2YvN2U1ODk5ZTItNDg2YS0z
N2ZmLWE0MDgtYzAyZDI2NTEzMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDZkOTQwYjYtNmMzZC00ZTk2LTk5
MWMtYTdlNjRiOGIwOWNmLzA2ZDk0MGI2LTZjM2QtNGU5Ni05OTFjLWE3ZTY0Yjhi
MDljZi5jcmwwHwYDVR0jBBgwFoAUt8UnUjmg0CR89tzQTIsmLszmJLkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wNmQ5NDBiNi02YzNkLTRlOTYtOTkxYy1hN2U2
NGI4YjA5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5M4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGN1BwgKOU012M4BDjqFlOrlGwEnuhKxdUXTfk0scO1EgGqtOgbexMgH
k1y8C6R7kzFVI4bM+e55srXnZBQto1Tkvo8qaQkXICDVGLFMIYzY6afnISZ2xZLq
dXdhrqmTUsWJlY15XTO6GpLeU4wivvXe55Ny4KXk0+57TI1RKb4Av5RMpfzjmDZ0
Qnupnhl4o9w5+tEUEe5GKrJHCj9BPe36qWG3sR81ZrG+9Jb0b7dYvFyY6eAsK6Jq
S8GFKksYCfUOAiiHnY6l4+sj8QypPsrIbGgA8f+7lUCvuh5ZdQJ76hDQTyGNIglD
enfM0KIixVZ+REp1eXXwIlkpEBqUovQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org