Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/663efbc9-c58c-3313-99eb-651d8f6f2ffe.roa
File: 663efbc9-c58c-3313-99eb-651d8f6f2ffe.roa (raw, json)
Hash identifier: gu0XvsyYFNoPbcJJvpwCt+fs7YOKx7A8/M0I9H6CbtI=
Subject key identifier: 4A:42:E1:AA:21:E7:F6:36:8C:F4:29:A7:D5:A4:52:86:CD:88:8D:0A
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F43285845174AD5E3B90278E3DA543E00
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/663efbc9-c58c-3313-99eb-651d8f6f2ffe.roa
Signing time: Mon 04 Mar 2024 02:00:26 +0000
ROA not before: Mon 04 Mar 2024 02:00:26 +0000
ROA not after: Sun 02 Jun 2024 01:00:26 +0000
asID: 57974
IP address blocks: 68.69.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:17:4a:d5:e3:b9:02:78:e3:da:54:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: Mar 4 02:00:26 2024 GMT
Not After : Jun 2 01:00:26 2024 GMT
Subject: CN=281c034f-c5f2-45e5-853b-e9a6d135da20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:e6:37:bd:b6:7f:a7:dd:ae:31:3e:7e:31:
30:3e:82:dd:6a:e1:55:ad:bb:99:09:fc:b4:4d:83:
5d:c0:97:26:b2:eb:be:37:5d:74:57:0b:b2:8f:96:
e6:f3:36:51:8f:62:58:bb:86:b6:49:23:17:9f:7b:
49:a9:6e:55:e2:f1:b4:e8:41:b1:77:35:ae:84:3f:
49:94:f3:e9:e0:65:58:8e:41:f2:57:2c:69:c4:9a:
31:68:bc:de:14:67:74:31:13:bd:69:2d:a5:7c:ed:
4c:c8:4d:cb:fa:0f:a3:2a:8f:40:1f:a6:0d:b3:f8:
2b:2b:6e:aa:b9:eb:c5:75:a1:cc:16:55:c6:fe:10:
65:19:cf:4b:fa:24:4d:17:4c:6d:62:b7:2b:3a:9c:
be:24:82:6c:45:95:75:37:52:b1:b1:17:e2:c6:0c:
21:b9:a6:9d:c0:fb:c7:f7:39:1a:e3:d1:cd:c2:50:
e0:7d:61:9a:c6:54:5b:e5:02:df:26:fd:c2:0c:5a:
af:12:bc:a9:a7:f9:7b:f8:06:3a:93:a3:08:b6:86:
e8:2c:e4:8c:3c:5c:9d:0c:1c:1e:32:e6:69:6e:48:
d1:cd:26:a6:8a:6a:8c:6b:33:4f:fa:6f:ec:b4:4b:
18:80:ef:e1:ab:00:36:e0:d7:ce:38:ef:17:5b:0c:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:E1:AA:21:E7:F6:36:8C:F4:29:A7:D5:A4:52:86:CD:88:8D:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/663efbc9-c58c-3313-99eb-651d8f6f2ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e6:16:f2:dc:fa:b6:97:52:a7:28:a4:9c:2d:b2:62:30:43:
bb:d8:d5:8b:a9:d0:04:89:0d:49:5f:58:f5:ab:d6:d6:0b:c6:
c0:bd:29:67:26:02:45:8f:36:32:af:e8:02:df:26:7b:08:9c:
81:fb:ba:95:77:16:de:a1:50:5c:af:a7:c3:5e:a1:cf:5b:3f:
26:ef:43:e6:b5:36:a4:59:50:70:b7:b4:40:7f:59:5b:07:8d:
54:5b:f1:32:12:63:60:42:f3:ca:df:a6:ae:17:e1:81:08:11:
1d:1c:16:9d:78:a0:7d:a8:01:2e:aa:3f:06:27:d9:12:37:d7:
76:a0:b7:04:f6:71:4b:de:a8:89:84:d5:79:94:eb:50:2f:5c:
01:09:d6:af:cc:e9:45:c8:f1:5f:bd:20:eb:0f:f0:c7:72:aa:
6b:ff:53:41:7d:fe:35:d4:92:87:40:e8:bd:e4:b5:8a:16:46:
a2:b2:a8:78:bd:8e:25:f8:40:f5:68:b2:85:89:f8:e2:17:f9:
93:85:d6:09:46:41:8e:2c:34:c8:80:fd:1f:e6:4e:7e:4a:c1:
a5:ec:b6:f7:b0:b7:f3:59:fe:96:b2:be:85:5f:24:55:27:87:
21:b1:25:c3:14:ef:90:88:eb:f8:bc:4f:15:1a:ac:cf:de:a4:
56:df:c6:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUXStXjuQJ449pUPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4
OTc2MB4XDTI0MDMwNDAyMDAyNloXDTI0MDYwMjAxMDAyNlowLzEtMCsGA1UEAxMk
MjgxYzAzNGYtYzVmMi00NWU1LTg1M2ItZTlhNmQxMzVkYTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJPmN722f6fdrjE+fjEwPoLdauFVrbuZCfy0
TYNdwJcmsuu+N110Vwuyj5bm8zZRj2JYu4a2SSMXn3tJqW5V4vG06EGxdzWuhD9J
lPPp4GVYjkHyVyxpxJoxaLzeFGd0MRO9aS2lfO1MyE3L+g+jKo9AH6YNs/grK26q
uevFdaHMFlXG/hBlGc9L+iRNF0xtYrcrOpy+JIJsRZV1N1KxsRfixgwhuaadwPvH
9zka49HNwlDgfWGaxlRb5QLfJv3CDFqvErypp/l7+AY6k6MItoboLOSMPFydDBwe
MuZpbkjRzSamimqMazNP+m/stEsYgO/hqwA24NfOOO8XWwybAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEpC4aoh5/Y2jPQpp9WkUobNiI0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh
ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNjYzZWZiYzktYzU4Yy0z
MzEzLTk5ZWItNjUxZDhmNmYyZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy
NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4
ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj
YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzmFvLc+raXUqcopJwtsmIwQ7vY1Yup0ASJDUlfWPWr1tYLxsC9KWcm
AkWPNjKv6ALfJnsInIH7upV3Ft6hUFyvp8Neoc9bPybvQ+a1NqRZUHC3tEB/WVsH
jVRb8TISY2BC88rfpq4X4YEIER0cFp14oH2oAS6qPwYn2RI313agtwT2cUveqImE
1XmU61AvXAEJ1q/M6UXI8V+9IOsP8Mdyqmv/U0F9/jXUkodA6L3ktYoWRqKyqHi9
jiX4QPVosoWJ+OIX+ZOF1glGQY4sNMiA/R/mTn5KwaXstvewt/NZ/payvoVfJFUn
hyGxJcMU75CI6/i8TxUarM/epFbfxvU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org