Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/26ff2829-ce95-32a8-b87e-14c3036051a3.roa
File: 26ff2829-ce95-32a8-b87e-14c3036051a3.roa (raw, json)
Hash identifier: xqVlKFGZv4YuIAPjTd5MyHyAZwR9b+kofjeKOHZbLus=
Subject key identifier: E1:72:EF:F6:1F:95:D9:C2:7C:66:33:95:E4:AD:FF:A7:72:92:A7:C9
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584510502C4257ABF8EB34839DC0
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/26ff2829-ce95-32a8-b87e-14c3036051a3.roa
Signing time: Fri 01 Mar 2024 14:00:30 +0000
ROA not before: Fri 01 Mar 2024 14:00:30 +0000
ROA not after: Thu 30 May 2024 13:00:30 +0000
asID: 22773
IP address blocks: 23.143.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:10:50:2c:42:57:ab:f8:eb:34:83:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Mar 1 14:00:30 2024 GMT
Not After : May 30 13:00:30 2024 GMT
Subject: CN=3be4623b-c702-46db-a966-c869f8b05acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:1e:d0:ea:fb:c8:7c:78:7f:b1:3a:29:4b:
ee:b6:bd:f1:18:6c:78:65:84:29:43:90:85:23:28:
48:5b:bf:4b:20:a4:bb:c2:de:20:92:ea:db:ae:f9:
c3:c4:22:c8:24:c5:11:1e:c6:37:80:5d:3d:b6:2d:
6c:9c:c2:4d:e2:b2:32:0b:36:ce:40:31:9d:82:db:
90:89:f4:ee:94:00:95:2d:95:40:d0:75:92:c5:3b:
54:54:20:d6:29:79:eb:da:c4:e8:3b:91:50:a8:2a:
b1:2e:4e:76:f7:7f:d4:77:d9:88:67:76:44:36:c5:
1a:fd:a8:a6:99:09:bc:cc:6b:87:8b:63:fd:c5:f5:
14:56:b5:a9:46:26:85:32:cd:6e:d2:17:44:67:40:
d7:bd:36:bd:d8:42:cb:8b:68:41:fe:22:df:1d:5d:
b8:80:03:a6:17:88:0c:3d:cb:ef:e8:e9:40:ce:e6:
b7:1d:cc:91:77:b7:87:dd:82:98:02:6c:06:ec:d7:
af:9a:4b:47:a5:09:da:df:72:5e:78:c7:24:6d:84:
06:ed:23:fa:5c:44:72:e3:8a:6a:cf:86:55:19:50:
bb:02:92:ba:19:22:2e:30:25:03:d4:0c:c0:57:5f:
64:43:72:6e:0b:a6:b7:71:6d:6e:f2:68:8e:5d:44:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:EF:F6:1F:95:D9:C2:7C:66:33:95:E4:AD:FF:A7:72:92:A7:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/26ff2829-ce95-32a8-b87e-14c3036051a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:63:0b:4f:a9:06:14:49:fa:12:82:d0:f5:4c:da:2c:75:00:
26:23:c9:82:7e:97:85:42:ef:c5:21:af:2e:85:db:76:3d:55:
dc:ed:a3:6c:d3:61:b0:ca:e7:51:bb:fb:1f:bc:94:58:50:7d:
e1:56:99:93:2a:fc:d3:82:9e:c6:62:76:51:23:fa:07:67:8b:
cd:ae:ab:3e:66:ea:b4:1a:39:b7:d7:43:7e:18:49:0d:93:70:
b3:54:8c:05:54:13:9d:7c:6b:4b:93:4d:af:59:bc:49:cf:b8:
11:d0:7e:7e:46:7d:35:61:f3:da:3c:d5:78:99:16:8f:b1:bd:
37:b3:ab:26:85:e3:3a:cb:6e:a3:4c:9d:a2:fb:17:82:1a:72:
62:3e:f9:07:cc:cc:a0:02:88:ca:c8:ae:63:9b:b1:d7:92:35:
52:21:4b:51:18:36:35:dc:21:d0:53:cd:06:47:7e:58:53:cd:
08:9a:95:d9:91:aa:0d:0f:8d:f1:4b:fa:56:66:fc:1d:92:4c:
db:32:8a:26:28:bf:19:02:8b:bc:64:b1:7a:c0:da:7b:1c:b2:
80:89:d5:1a:6f:ba:d9:02:8c:f2:34:8b:25:22:03:31:05:32:
e7:9c:92:52:18:fe:c2:5f:f6:2b:4b:ec:e3:ed:84:2a:64:99:
ff:2e:77:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUQUCxCV6v46zSDncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0
NDJjMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk
M2JlNDYyM2ItYzcwMi00NmRiLWE5NjYtYzg2OWY4YjA1YWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkUe0Or7yHx4f7E6KUvutr3xGGx4ZYQpQ5CF
IyhIW79LIKS7wt4gkurbrvnDxCLIJMURHsY3gF09ti1snMJN4rIyCzbOQDGdgtuQ
ifTulACVLZVA0HWSxTtUVCDWKXnr2sToO5FQqCqxLk5293/Ud9mIZ3ZENsUa/aim
mQm8zGuHi2P9xfUUVrWpRiaFMs1u0hdEZ0DXvTa92ELLi2hB/iLfHV24gAOmF4gM
Pcvv6OlAzua3HcyRd7eH3YKYAmwG7NevmktHpQna33JeeMckbYQG7SP6XERy44pq
z4ZVGVC7ApK6GSIuMCUD1AzAV19kQ3JuC6a3cW1u8miOXURb5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFy7/YfldnCfGYzleSt/6dykqfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz
YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvMjZmZjI4MjktY2U5NS0z
MmE4LWI4N2UtMTRjMzAzNjA1MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5
MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl
NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw
ZTVmZTQ0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF49oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9jC0+pBhRJ+hKC0PVM2ix1ACYjyYJ+l4VC78Uhry6F23Y9Vdzto2zT
YbDK51G7+x+8lFhQfeFWmZMq/NOCnsZidlEj+gdni82uqz5m6rQaObfXQ34YSQ2T
cLNUjAVUE518a0uTTa9ZvEnPuBHQfn5GfTVh89o81XiZFo+xvTezqyaF4zrLbqNM
naL7F4IacmI++QfMzKACiMrIrmObsdeSNVIhS1EYNjXcIdBTzQZHflhTzQialdmR
qg0PjfFL+lZm/B2STNsyiiYovxkCi7xksXrA2nscsoCJ1RpvutkCjPI0iyUiAzEF
MuecklIY/sJf9itL7OPthCpkmf8ud40=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org