Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f38084ff-d545-3173-a1eb-2dc92e34baac.roa
File: f38084ff-d545-3173-a1eb-2dc92e34baac.roa (raw, json)
Hash identifier: xwK15LntBkdbZ9zHkIbWtvdf+6upc7hsmhYRodb8c7A=
Subject key identifier: CC:EC:20:CB:96:12:DE:F9:9B:76:C0:42:10:DC:D5:98:96:B3:DD:CC
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F43285847AB6C0E4A53BCC397700E8AC0
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f38084ff-d545-3173-a1eb-2dc92e34baac.roa
Signing time: Sat 26 Oct 2024 13:00:42 +0000
ROA not before: Sat 26 Oct 2024 13:00:42 +0000
ROA not after: Fri 24 Jan 2025 14:00:42 +0000
asID: 212582
IP address blocks: 216.126.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ab:6c:0e:4a:53:bc:c3:97:70:0e:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Oct 26 13:00:42 2024 GMT
Not After : Jan 24 14:00:42 2025 GMT
Subject: CN=2c65ea4b-ec25-4ce7-97bb-7cac288702b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:cd:9f:20:fe:16:37:d3:2e:3c:ff:ae:ae:
83:ab:98:0e:bd:4c:15:4e:51:51:c6:9a:77:1b:d5:
cf:fd:de:3c:ca:22:63:f6:ec:72:14:58:d5:11:5a:
40:5f:02:cc:8d:d0:6f:f8:4b:53:00:fa:39:91:b6:
f8:30:58:3f:a2:91:05:00:8e:b7:86:b3:6e:ca:b2:
a9:47:fb:f7:17:20:32:78:b6:dd:d0:51:80:65:e1:
3f:4f:ce:96:09:2f:75:cf:68:7b:17:b5:dd:99:d6:
56:09:b6:c3:28:99:04:97:fd:c2:7e:b4:f3:96:30:
72:43:43:67:ba:6a:de:b3:55:26:83:39:34:a5:bf:
2c:7f:e6:88:64:50:16:69:e5:ca:44:f0:0d:5e:97:
70:e4:36:23:4f:f4:6d:06:96:ce:b4:92:cd:68:ef:
d7:be:51:75:89:9e:db:61:10:ac:fc:70:c7:9c:d3:
69:d3:18:56:2d:e7:7f:ce:33:0c:f3:b9:52:da:2a:
42:1b:3d:7d:a4:c2:8a:b4:2e:97:74:d5:05:90:64:
5a:3f:d1:b1:b1:85:32:04:5d:95:d0:eb:41:13:5d:
69:2c:23:c1:99:8f:5e:d5:56:6c:4a:1f:67:c5:ea:
c1:b0:1d:65:df:ab:5c:bd:c5:fb:11:bd:ec:35:20:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:20:CB:96:12:DE:F9:9B:76:C0:42:10:DC:D5:98:96:B3:DD:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f38084ff-d545-3173-a1eb-2dc92e34baac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.126.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:b1:3d:ab:3c:57:4a:41:cf:ce:93:8e:2b:bc:c2:b9:e5:7b:
ab:eb:0d:73:0f:d4:30:7f:03:33:2b:53:da:af:87:a6:cb:77:
03:e9:54:7d:3f:8f:34:ae:db:72:d4:2b:cf:bb:d3:5c:3d:7d:
ce:8a:25:e9:73:51:99:12:84:18:1d:d9:eb:fc:9c:bf:f4:b9:
73:56:79:22:2a:02:e4:b1:ac:49:0e:36:0c:6f:11:04:09:61:
58:de:27:89:57:49:91:20:5e:eb:c3:7e:aa:3a:f5:a3:34:ad:
85:67:62:c2:db:1b:a2:66:b0:76:43:af:e3:fc:87:c0:0f:20:
73:eb:4c:5f:82:9b:db:99:19:70:a7:ff:f9:4e:a1:7e:3b:f6:
8f:70:71:5e:5e:86:52:70:4a:d0:29:1d:4e:42:b7:d4:25:bf:
38:8e:0e:48:f9:c5:9e:7c:01:d9:f3:f6:57:12:22:c0:e7:fa:
9c:19:2a:1d:fd:90:76:99:9c:6f:67:3a:f5:b7:7f:7e:41:2a:
11:8c:b1:9f:e0:bc:44:a8:6f:da:8b:2f:f9:ab:8a:03:66:ee:
54:cf:68:aa:04:c8:2e:b5:7d:4e:5c:b9:20:d2:e6:a8:eb:a4:
02:02:92:3b:3a:da:fa:db:02:08:3e:ca:61:1d:fb:f5:0e:52:
e8:03:00:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbA5KU7zDl3AOisAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk
MmM2NWVhNGItZWMyNS00Y2U3LTk3YmItN2NhYzI4ODcwMmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHNnyD+FjfTLjz/rq6Dq5gOvUwVTlFRxpp3
G9XP/d48yiJj9uxyFFjVEVpAXwLMjdBv+EtTAPo5kbb4MFg/opEFAI63hrNuyrKp
R/v3FyAyeLbd0FGAZeE/T86WCS91z2h7F7XdmdZWCbbDKJkEl/3CfrTzljByQ0Nn
umres1Umgzk0pb8sf+aIZFAWaeXKRPANXpdw5DYjT/RtBpbOtJLNaO/XvlF1iZ7b
YRCs/HDHnNNp0xhWLed/zjMM87lS2ipCGz19pMKKtC6XdNUFkGRaP9GxsYUyBF2V
0OtBE11pLCPBmY9e1VZsSh9nxerBsB1l36tcvcX7Eb3sNSAipwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMzsIMuWEt75m3bAQhDc1ZiWs93MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZjM4MDg0ZmYtZDU0NS0z
MTczLWExZWItMmRjOTJlMzRiYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H7tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKaxPas8V0pBz86Tjiu8wrnle6vrDXMP1DB/AzMrU9qvh6bLdwPpVH0/
jzSu23LUK8+701w9fc6KJelzUZkShBgd2ev8nL/0uXNWeSIqAuSxrEkONgxvEQQJ
YVjeJ4lXSZEgXuvDfqo69aM0rYVnYsLbG6JmsHZDr+P8h8APIHPrTF+Cm9uZGXCn
//lOoX479o9wcV5ehlJwStApHU5Ct9QlvziODkj5xZ58Adnz9lcSIsDn+pwZKh39
kHaZnG9nOvW3f35BKhGMsZ/gvESob9qLL/mrigNm7lTPaKoEyC61fU5cuSDS5qjr
pAICkjs62vrbAgg+ymEd+/UOUugDALM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:26 2025 by rpki-client