Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0a78c87-3560-30e7-9ac4-a326babcb887.roa
File: d0a78c87-3560-30e7-9ac4-a326babcb887.roa (raw, json)
Hash identifier: ixyZeIRsQx85eiEjj8aiW62gAJRy2Q7QhrKfCMdF7q4=
Subject key identifier: 9F:30:2D:82:31:85:09:E3:16:B1:42:9E:49:21:58:45:68:3F:14:85
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584807AA7D8E41936BD1949E9240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0a78c87-3560-30e7-9ac4-a326babcb887.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 6167
IP address blocks: 174.232.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:7d:8e:41:93:6b:d1:94:9e:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=d8566e30-5a2b-4ab7-be8b-4952e39717af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:9f:ae:64:83:86:bc:80:46:77:c2:16:33:
46:d2:1e:05:96:d1:79:9e:92:be:06:fc:9f:90:72:
d6:15:4a:a2:c5:9f:bf:c7:e0:fd:46:c1:9e:5d:08:
89:7b:c1:18:03:d7:aa:78:2e:51:16:51:14:ad:e6:
7c:c8:ab:7f:7b:b1:05:53:62:94:61:bd:cf:fc:e3:
7c:ac:20:dd:9c:2d:b2:c2:d4:23:9f:de:10:d1:51:
d7:0d:0a:de:82:74:c8:2e:92:f1:cc:f7:3d:63:10:
67:68:9b:48:3a:17:51:b0:eb:74:cf:9b:74:1c:ba:
fb:17:a7:c6:8b:c0:13:b4:69:5d:e4:95:db:3e:f7:
f6:29:0a:fd:66:c2:07:f3:61:af:2d:04:03:c4:b2:
64:3e:97:2f:30:09:6d:ee:7d:69:f6:e7:d2:40:a8:
cc:e0:1a:ea:4a:5e:12:3f:72:f6:04:e1:b7:5c:a8:
76:9b:ef:b4:9d:2d:ae:12:30:25:b2:f9:cd:75:3d:
78:01:de:44:ee:4e:af:3e:35:5f:3b:d9:2b:88:bc:
69:49:79:f6:77:72:aa:59:73:90:aa:32:a8:0f:6b:
dd:4e:57:2d:00:bc:9e:96:d3:c2:12:27:29:62:c5:
cb:bf:c5:ba:97:fb:5f:25:36:72:a7:4d:dc:93:81:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:2D:82:31:85:09:E3:16:B1:42:9E:49:21:58:45:68:3F:14:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0a78c87-3560-30e7-9ac4-a326babcb887.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
174.232.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:62:9d:15:f3:77:df:51:43:0b:36:3c:61:1b:a7:b4:7d:f6:
18:45:85:f1:b7:b5:e8:5c:71:d3:72:7b:27:98:1a:e9:8a:27:
a7:23:56:75:2f:35:dc:d0:50:5c:5e:59:c5:c1:c6:5c:b9:71:
40:4f:2a:8e:d9:de:87:b0:f3:51:83:48:0d:77:9b:97:c6:0c:
87:93:5d:60:a0:02:b1:6a:27:c8:f9:35:a3:32:4b:67:78:aa:
81:d8:eb:d6:75:e7:7d:1c:0d:88:b3:e8:bf:1f:c7:89:05:de:
28:4b:07:9f:28:d0:5c:04:83:be:c6:1e:fc:bb:b4:d8:9c:6c:
6d:a5:b5:d9:23:37:4e:ec:15:6b:f1:f0:d9:94:32:a6:2b:6c:
f4:ef:17:65:6d:87:1e:27:74:f5:b4:42:99:a9:24:ff:ea:fa:
b5:18:2e:84:13:31:e1:a1:97:e3:88:29:49:ed:30:77:f2:16:
64:a7:f5:a3:78:88:bc:2b:0f:98:6c:49:94:54:8e:78:f0:d9:
d0:49:65:e3:81:64:eb:4f:4a:68:90:af:a4:c1:cc:02:d9:8a:
b5:74:9e:76:50:8d:ca:4f:cc:98:21:06:5b:5d:92:fd:ec:54:
7c:99:57:c4:0c:57:88:75:c1:77:58:24:ac:5f:cf:df:21:95:
8c:85:87:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgHqn2OQZNr0ZSekkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEyODE0MDA1MloXDTI1MDIyNjE0MDA1MlowLzEtMCsGA1UEAxMk
ZDg1NjZlMzAtNWEyYi00YWI3LWJlOGItNDk1MmUzOTcxN2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FyfrmSDhryARnfCFjNG0h4FltF5npK+Bvyf
kHLWFUqixZ+/x+D9RsGeXQiJe8EYA9eqeC5RFlEUreZ8yKt/e7EFU2KUYb3P/ON8
rCDdnC2ywtQjn94Q0VHXDQregnTILpLxzPc9YxBnaJtIOhdRsOt0z5t0HLr7F6fG
i8ATtGld5JXbPvf2KQr9ZsIH82GvLQQDxLJkPpcvMAlt7n1p9ufSQKjM4BrqSl4S
P3L2BOG3XKh2m++0nS2uEjAlsvnNdT14Ad5E7k6vPjVfO9kriLxpSXn2d3KqWXOQ
qjKoD2vdTlctALyeltPCEicpYsXLv8W6l/tfJTZyp03ck4EhdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8wLYIxhQnjFrFCnkkhWEVoPxSFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDBhNzhjODctMzU2MC0z
MGU3LTlhYzQtYTMyNmJhYmNiODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrujCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJinRXzd99RQws2PGEbp7R99hhFhfG3tehccdNyeyeYGumKJ6cjVnUv
NdzQUFxeWcXBxly5cUBPKo7Z3oew81GDSA13m5fGDIeTXWCgArFqJ8j5NaMyS2d4
qoHY69Z1530cDYiz6L8fx4kF3ihLB58o0FwEg77GHvy7tNicbG2ltdkjN07sFWvx
8NmUMqYrbPTvF2Vthx4ndPW0QpmpJP/q+rUYLoQTMeGhl+OIKUntMHfyFmSn9aN4
iLwrD5hsSZRUjnjw2dBJZeOBZOtPSmiQr6TBzALZirV0nnZQjcpPzJghBltdkv3s
VHyZV8QMV4h1wXdYJKxfz98hlYyFh+M=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:10:50 2025 by rpki-client