Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5a9a3fed-ba59-313a-a46a-00620ae3aa2b.roa
File: 5a9a3fed-ba59-313a-a46a-00620ae3aa2b.roa (raw, json)
Hash identifier: wZA2nhdfBn9aFK3vmewkWAj3tfUEX1I1lSqqQQx+/as=
Subject key identifier: 80:12:8D:FC:AA:BB:CA:C0:52:7C:5C:4C:4C:FE:FB:17:5A:0B:E8:F4
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F43285841E471C03125A8A2B54F885D40
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5a9a3fed-ba59-313a-a46a-00620ae3aa2b.roa
Signing time: Mon 15 May 2023 18:31:13 +0000
ROA not before: Mon 15 May 2023 18:31:13 +0000
ROA not after: Wed 09 Aug 2023 12:33:20 +0000
asID: 1239
IP address blocks: 67.43.32.0/23 maxlen: 24
67.43.34.0/23 maxlen: 24
67.43.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:71:c0:31:25:a8:a2:b5:4f:88:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: May 15 18:31:13 2023 GMT
Not After : Aug 9 12:33:20 2023 GMT
Subject: CN=d2c8813e-882f-462d-95ef-0220115c0c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:5b:ed:e7:5c:a4:aa:d2:c2:e9:69:c5:71:
1b:4e:cd:e6:60:46:d8:36:53:ad:81:a8:22:80:f2:
f6:5a:fe:ef:e6:04:40:1b:a6:5e:13:ae:24:b0:69:
75:fc:ca:1d:25:7e:68:ba:7d:a7:a0:20:13:09:d2:
58:36:2d:12:83:6a:ba:c4:46:44:df:a3:52:ef:96:
db:08:e4:e9:a4:cb:bd:32:71:0b:61:8a:93:aa:d3:
f7:1d:2b:04:e4:82:6c:53:38:4a:0f:80:ab:69:69:
16:11:17:32:b5:fd:99:ac:6b:6d:5e:31:d1:b8:e6:
ae:24:96:b7:54:97:1f:47:6b:47:f9:22:f5:17:74:
2b:95:5e:d3:d2:d0:fb:2d:8e:4d:22:e9:67:d4:36:
1f:97:33:d4:05:28:05:f9:53:95:a4:30:f2:5c:6e:
db:c2:ef:59:0b:ca:d8:f4:97:bb:10:c3:bb:22:18:
61:b9:0d:29:fb:14:bb:bb:9c:75:20:ad:54:53:ee:
74:c2:30:a7:b8:1e:d5:e8:d4:b6:f5:a4:d7:68:e9:
35:b7:8f:d8:c8:8a:79:aa:eb:39:9f:1b:c8:43:44:
01:82:ac:9c:f6:3a:2f:0d:37:bd:88:9a:3c:ee:1e:
e7:0d:a0:79:41:44:d9:50:d9:29:de:13:d4:7a:95:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:12:8D:FC:AA:BB:CA:C0:52:7C:5C:4C:4C:FE:FB:17:5A:0B:E8:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5a9a3fed-ba59-313a-a46a-00620ae3aa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.32.0/22
67.43.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:76:0a:1e:9e:b5:b7:ca:9e:ce:dd:f8:bc:c1:ac:53:e6:5c:
e2:d0:87:c3:11:00:eb:1c:3e:c0:f3:20:3f:a4:44:e3:15:a5:
1d:53:4d:1a:bb:43:97:6f:db:f5:94:72:fe:a3:65:da:52:33:
1d:4f:d3:f9:e4:5a:fc:57:e8:c8:94:37:e7:a7:27:da:b7:ed:
11:88:e6:9f:1b:26:fe:52:fd:95:1d:8c:6c:4d:02:f1:ba:75:
58:0f:fd:42:c9:9e:1e:f4:5a:eb:93:b4:93:66:c5:08:7c:88:
c1:99:b6:7c:19:a1:aa:53:0d:b0:7d:48:e4:ac:16:b5:1d:be:
f5:a6:8c:f9:53:b6:f6:6e:09:bc:18:4f:68:eb:2c:c1:3b:d6:
f4:7c:eb:3c:a8:35:c8:dc:e1:c2:b2:e0:40:0d:95:f7:55:84:
d7:5f:06:25:9f:55:02:47:c6:4b:74:2c:57:1b:30:18:4e:f2:
ac:74:1d:27:2a:12:96:4a:2e:62:bd:0a:8d:25:39:e2:15:55:
26:80:90:48:06:ee:44:f0:d7:c5:5a:4c:c7:b6:41:12:07:07:
8b:ea:eb:7d:9a:ac:62:23:2b:fb:6e:11:10:d8:0c:3a:f0:c6:
19:15:e4:0e:d0:b6:d0:7c:89:82:e4:14:8b:70:e6:6e:a7:17:
ee:de:50:77
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEHkccAxJaiitU+IXUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTIzMDUxNTE4MzExM1oXDTIzMDgwOTEyMzMyMFowLzEtMCsGA1UEAxMk
ZDJjODgxM2UtODgyZi00NjJkLTk1ZWYtMDIyMDExNWMwYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Nb7edcpKrSwulpxXEbTs3mYEbYNlOtgagi
gPL2Wv7v5gRAG6ZeE64ksGl1/ModJX5oun2noCATCdJYNi0Sg2q6xEZE36NS75bb
COTppMu9MnELYYqTqtP3HSsE5IJsUzhKD4CraWkWERcytf2ZrGttXjHRuOauJJa3
VJcfR2tH+SL1F3QrlV7T0tD7LY5NIuln1DYflzPUBSgF+VOVpDDyXG7bwu9ZC8rY
9Je7EMO7IhhhuQ0p+xS7u5x1IK1UU+50wjCnuB7V6NS29aTXaOk1t4/YyIp5qus5
nxvIQ0QBgqyc9jovDTe9iJo87h7nDaB5QUTZUNkp3hPUepV3WwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIASjfyqu8rAUnxcTEz++xdaC+j0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNWE5YTNmZWQtYmE1OS0z
MTNhLWE0NmEtMDA2MjBhZTNhYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQysgAwQB
QysoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAKl2Ch6etbfKns7d+LzBrFPmXOLQh8MRAOscPsDzID+kROMV
pR1TTRq7Q5dv2/WUcv6jZdpSMx1P0/nkWvxX6MiUN+enJ9q37RGI5p8bJv5S/ZUd
jGxNAvG6dVgP/ULJnh70WuuTtJNmxQh8iMGZtnwZoapTDbB9SOSsFrUdvvWmjPlT
tvZuCbwYT2jrLME71vR86zyoNcjc4cKy4EANlfdVhNdfBiWfVQJHxkt0LFcbMBhO
8qx0HScqEpZKLmK9Co0lOeIVVSaAkEgG7kTw18VaTMe2QRIHB4vq632arGIjK/tu
ERDYDDrwxhkV5A7QttB8iYLkFItw5m6nF+7eUHc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org