Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/ea134ae4-eae2-3133-a454-e9bb4fd14b19.roa
File: ea134ae4-eae2-3133-a454-e9bb4fd14b19.roa (raw, json)
Hash identifier: ydsN4+CUqaEZHFFbRqKOv32ymNpDhs6mak0873sAXOg=
Subject key identifier: 43:10:87:83:83:8F:66:F2:80:C7:A6:30:BB:E7:6C:98:A2:F0:BF:5A
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6CA5B7FD97F708695E2E80
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/ea134ae4-eae2-3133-a454-e9bb4fd14b19.roa
Signing time: Thu 05 Dec 2024 15:52:37 +0000
ROA not before: Thu 05 Dec 2024 15:52:37 +0000
ROA not after: Wed 05 Mar 2025 15:52:37 +0000
asID: 376
IP address blocks: 132.213.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6c:a5:b7:fd:97:f7:08:69:5e:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:52:37 2024 GMT
Not After : Mar 5 15:52:37 2025 GMT
Subject: CN=fc1a7a00-c63f-4b4e-91b7-5164029c1e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:84:d0:5b:83:45:95:71:79:25:09:94:cd:
0f:14:5b:b4:e8:ac:fb:5b:76:8c:37:53:aa:f6:f0:
83:81:4e:0b:a3:a2:98:1c:54:ea:ca:fb:e8:10:18:
93:dc:0c:67:1e:79:36:64:5b:4a:7c:c7:3e:83:03:
3f:59:b4:a7:91:39:cd:4c:d0:59:db:e5:f6:fb:f7:
1c:d4:6d:e3:da:ed:9f:56:e1:77:39:29:24:0b:b4:
b6:cd:aa:d0:c0:c9:11:8f:10:24:8d:b0:b9:5f:c2:
33:fe:b9:b3:2a:d7:3b:73:02:3d:df:3c:52:76:21:
30:42:58:78:25:b4:1d:ae:ea:5e:ba:a0:3a:bc:f7:
38:a3:55:ed:17:37:f4:95:40:db:ec:5d:3e:1d:05:
ad:5f:70:44:f0:66:37:99:6b:85:3c:ee:7b:74:65:
7e:fd:1e:5d:a5:78:de:3b:62:b8:53:fb:b6:dd:98:
d5:db:7c:9d:64:9f:50:ee:47:5e:0e:de:6b:ac:d1:
8d:73:dd:fa:3d:8d:72:f0:15:1a:c8:a0:11:aa:74:
a0:9d:c2:49:72:7e:3c:c1:8f:5c:3a:b4:f0:d0:73:
bf:f3:a0:49:f7:0f:91:89:45:80:a6:09:a1:91:3f:
8b:6e:e7:01:57:d9:91:6b:14:06:22:17:71:f7:01:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:87:83:83:8F:66:F2:80:C7:A6:30:BB:E7:6C:98:A2:F0:BF:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/ea134ae4-eae2-3133-a454-e9bb4fd14b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:49:05:38:b3:2e:2f:06:7d:be:d4:98:15:8e:98:33:d0:17:
1e:32:a7:bd:c3:70:76:fc:e8:e7:38:73:a1:bb:81:ce:93:06:
8e:99:ad:21:94:de:73:67:85:fb:0a:d3:ab:69:3f:8e:d2:1f:
b3:bb:f2:61:f7:87:56:19:32:87:a8:68:ba:86:e1:04:43:30:
a6:d4:54:a0:ec:88:1b:9a:ff:c0:b2:3c:8c:02:a8:74:12:0a:
46:f3:b9:0c:f6:82:ac:e3:d4:dc:f3:7d:cd:ca:bf:af:73:f8:
e3:d2:83:c5:97:9e:41:e8:ef:47:fa:a6:1e:d0:96:6f:3b:3e:
92:dd:1b:01:67:ed:8f:14:1d:3c:1a:52:8c:af:62:31:ec:d7:
ce:ee:87:cd:44:e9:67:71:b6:76:5d:4e:8b:8d:15:b8:01:d7:
4e:bd:b1:30:a9:75:45:07:89:45:8a:ab:c0:42:fc:1e:4c:c0:
c9:a8:18:8e:82:8c:01:8d:38:b5:f3:30:0a:11:b7:38:0f:9c:
63:2e:6a:41:2a:c2:1c:d4:da:a1:2f:aa:79:94:f8:98:27:6b:
e7:78:e1:61:54:ba:29:41:d0:70:d2:20:4c:e4:48:c3:ca:24:
8c:12:3b:df:2b:ba:1e:2f:19:ee:52:14:33:15:4c:a3:42:60:
4f:d8:c9:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbbKW3/Zf3CGleLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1NTIzN1oXDTI1MDMwNTE1NTIzN1owLzEtMCsGA1UEAxMk
ZmMxYTdhMDAtYzYzZi00YjRlLTkxYjctNTE2NDAyOWMxZTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo++E0FuDRZVxeSUJlM0PFFu06Kz7W3aMN1Oq
9vCDgU4Lo6KYHFTqyvvoEBiT3AxnHnk2ZFtKfMc+gwM/WbSnkTnNTNBZ2+X2+/cc
1G3j2u2fVuF3OSkkC7S2zarQwMkRjxAkjbC5X8Iz/rmzKtc7cwI93zxSdiEwQlh4
JbQdrupeuqA6vPc4o1XtFzf0lUDb7F0+HQWtX3BE8GY3mWuFPO57dGV+/R5dpXje
O2K4U/u23ZjV23ydZJ9Q7kdeDt5rrNGNc936PY1y8BUayKARqnSgncJJcn48wY9c
OrTw0HO/86BJ9w+RiUWApgmhkT+LbucBV9mRaxQGIhdx9wFMJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMQh4ODj2bygMemMLvnbJii8L9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvZWExMzRhZTQtZWFlMi0z
MTMzLWE0NTQtZTliYjRmZDE0YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFJBTizLi8Gfb7UmBWOmDPQFx4yp73DcHb86Oc4c6G7gc6TBo6ZrSGU
3nNnhfsK06tpP47SH7O78mH3h1YZMoeoaLqG4QRDMKbUVKDsiBua/8CyPIwCqHQS
CkbzuQz2gqzj1Nzzfc3Kv69z+OPSg8WXnkHo70f6ph7Qlm87PpLdGwFn7Y8UHTwa
UoyvYjHs187uh81E6WdxtnZdTouNFbgB1069sTCpdUUHiUWKq8BC/B5MwMmoGI6C
jAGNOLXzMAoRtzgPnGMuakEqwhzU2qEvqnmU+Jgna+d44WFUuilB0HDSIEzkSMPK
JIwSO98ruh4vGe5SFDMVTKNCYE/YydY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:55 2025 by rpki-client