Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3e3acf4e-829a-35ec-8a93-a309ce2e282f.roa
File: 3e3acf4e-829a-35ec-8a93-a309ce2e282f.roa (raw, json)
Hash identifier: FBdOWrULXqbk3dybT0JDR8ZIgM5EOllYQhFeQ2CbUTM=
Subject key identifier: EE:7A:75:3C:1C:0A:D3:3A:49:34:90:C4:BA:1E:D4:52:6F:0E:F0:56
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B624302EDF1DE40DC2F4380
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3e3acf4e-829a-35ec-8a93-a309ce2e282f.roa
Signing time: Thu 05 Dec 2024 15:31:42 +0000
ROA not before: Thu 05 Dec 2024 15:31:42 +0000
ROA not after: Wed 05 Mar 2025 15:31:42 +0000
asID: 376
IP address blocks: 132.213.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:62:43:02:ed:f1:de:40:dc:2f:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:31:42 2024 GMT
Not After : Mar 5 15:31:42 2025 GMT
Subject: CN=3e68b1b8-ab41-4d07-ad40-be600d8d91c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:14:fb:68:5d:fc:29:11:5b:ef:e9:4c:ba:
f4:73:ee:50:03:45:58:3f:a0:a9:7d:03:73:da:b9:
48:a1:5a:02:d3:fb:80:b7:84:b0:4f:1d:05:aa:ee:
b8:83:e8:e2:bd:d9:44:6b:d1:65:71:ac:27:c0:c0:
69:5a:3b:3a:83:a0:17:bf:e9:02:50:42:a3:9e:31:
89:85:5c:61:cd:6d:2b:f6:72:b5:fc:eb:80:d5:f8:
fd:0a:53:3c:fa:42:7c:67:7e:ab:e0:99:ac:90:f4:
9f:ed:95:10:93:ab:28:ed:65:83:7b:74:04:54:8c:
ee:cc:02:ed:8b:af:03:35:63:13:2e:84:37:70:4b:
ce:20:d7:36:91:92:28:58:45:5d:b0:46:1c:e8:7c:
fe:80:12:a5:ed:62:ea:ec:ad:26:bf:d3:36:b7:dd:
99:80:a6:94:41:9e:6a:7c:98:0d:10:5e:dd:37:ad:
aa:eb:ae:7d:c8:99:60:48:c0:35:6f:1b:dc:4b:79:
24:73:1b:86:45:96:d8:a0:5b:4a:d7:e9:df:f3:3f:
58:43:ab:c5:01:2a:fc:e8:17:02:bd:64:d8:e7:97:
6b:a2:4f:bb:d7:09:4a:2e:ba:29:f4:dd:d5:07:f7:
58:f5:3d:0a:64:df:e6:fd:6c:4d:2c:67:31:67:c5:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:75:3C:1C:0A:D3:3A:49:34:90:C4:BA:1E:D4:52:6F:0E:F0:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/3e3acf4e-829a-35ec-8a93-a309ce2e282f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:15:56:bd:29:87:31:af:a6:54:98:a3:32:5b:cb:76:65:ac:
d1:2e:2a:98:ee:dc:19:a2:c2:66:ed:94:be:d9:aa:2f:03:c8:
5b:ea:2a:e8:39:61:8c:d8:1f:85:cb:d1:54:5f:85:c6:6d:45:
77:bb:8c:52:e1:29:63:8c:61:f8:30:a3:e5:98:9b:13:9a:8c:
22:fa:3d:27:a5:bc:f0:3f:a1:ea:32:db:ac:eb:70:0d:b9:ce:
34:c9:c9:4a:1c:8e:7a:b0:68:69:0c:3c:0b:12:c6:f3:ae:cc:
23:48:ef:c0:43:03:2d:f4:97:e0:c3:c5:c0:d2:e6:cc:89:fa:
80:57:1e:5b:4c:fd:ec:e5:d1:54:e4:ee:a3:76:b5:50:cf:97:
1c:c7:3b:20:47:da:c2:18:f2:5b:c7:78:47:67:37:9c:c1:7e:
d9:26:8a:5f:4f:be:d3:80:56:31:50:ef:7c:1a:16:72:56:59:
d1:c1:40:e0:d8:d2:d8:c9:c7:1f:b7:4e:20:dc:66:0c:f4:a8:
95:b1:55:d4:45:cb:75:03:2b:cf:dc:33:88:40:68:71:ee:83:
14:f8:a0:84:2c:a3:4e:09:88:a8:d7:62:21:88:a6:6e:89:31:
75:6e:63:60:b1:08:8a:7d:0d:45:5e:3d:a2:28:30:89:80:af:
1f:fb:b5:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbYkMC7fHeQNwvQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1MzE0MloXDTI1MDMwNTE1MzE0MlowLzEtMCsGA1UEAxMk
M2U2OGIxYjgtYWI0MS00ZDA3LWFkNDAtYmU2MDBkOGQ5MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTwU+2hd/CkRW+/pTLr0c+5QA0VYP6CpfQNz
2rlIoVoC0/uAt4SwTx0Fqu64g+jivdlEa9FlcawnwMBpWjs6g6AXv+kCUEKjnjGJ
hVxhzW0r9nK1/OuA1fj9ClM8+kJ8Z36r4JmskPSf7ZUQk6so7WWDe3QEVIzuzALt
i68DNWMTLoQ3cEvOINc2kZIoWEVdsEYc6Hz+gBKl7WLq7K0mv9M2t92ZgKaUQZ5q
fJgNEF7dN62q6659yJlgSMA1bxvcS3kkcxuGRZbYoFtK1+nf8z9YQ6vFASr86BcC
vWTY55drok+71wlKLrop9N3VB/dY9T0KZN/m/WxNLGcxZ8WvkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO56dTwcCtM6STSQxLoe1FJvDvBWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvM2UzYWNmNGUtODI5YS0z
NWVjLThhOTMtYTMwOWNlMmUyODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNVUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEVVr0phzGvplSYozJby3ZlrNEuKpju3BmiwmbtlL7Zqi8DyFvqKug5
YYzYH4XL0VRfhcZtRXe7jFLhKWOMYfgwo+WYmxOajCL6PSelvPA/oeoy26zrcA25
zjTJyUocjnqwaGkMPAsSxvOuzCNI78BDAy30l+DDxcDS5syJ+oBXHltM/ezl0VTk
7qN2tVDPlxzHOyBH2sIY8lvHeEdnN5zBftkmil9PvtOAVjFQ73waFnJWWdHBQODY
0tjJxx+3TiDcZgz0qJWxVdRFy3UDK8/cM4hAaHHugxT4oIQso04JiKjXYiGIpm6J
MXVuY2CxCIp9DUVePaIoMImArx/7tc4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:43 2025 by rpki-client