Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/651c7c5a-7e7a-330b-8a3c-911f10e5c011.roa
File: 651c7c5a-7e7a-330b-8a3c-911f10e5c011.roa (raw, json)
Hash identifier: R3zwGsAAOsj0HeFOj+JAUgz0q81YSIGg65jUf+raYk8=
Subject key identifier: A4:97:EF:D6:4C:26:CB:B7:D5:E9:10:3E:E9:88:5D:63:10:88:CE:A8
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F432858438ABFD4F0BA33875832AC43C0
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/651c7c5a-7e7a-330b-8a3c-911f10e5c011.roa
Signing time: Sat 14 Oct 2023 01:00:14 +0000
ROA not before: Sat 14 Oct 2023 01:00:14 +0000
ROA not after: Fri 12 Jan 2024 02:00:14 +0000
asID: 918
IP address blocks: 64.112.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:8a:bf:d4:f0:ba:33:87:58:32:ac:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Oct 14 01:00:14 2023 GMT
Not After : Jan 12 02:00:14 2024 GMT
Subject: CN=e7be374e-1d91-4d0b-82c0-871281b4c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:b4:6c:24:ec:39:99:3b:98:05:53:4c:db:
0f:66:61:21:64:ae:f7:9e:39:bc:89:f5:14:42:a3:
cc:97:26:18:27:ab:3c:c6:a9:82:63:73:68:25:4f:
07:91:5e:1e:8f:d1:d5:c8:57:c3:41:56:44:bf:48:
d1:14:b0:f2:cf:5a:43:e9:1e:bc:b8:e4:be:c1:28:
f9:0d:71:2c:07:16:55:87:35:5e:85:30:d9:ef:db:
34:db:f0:03:10:20:f6:d6:f4:80:72:84:1a:a2:2f:
91:47:e1:1b:c4:74:ed:18:8e:04:7a:d7:93:03:7e:
e9:55:fe:eb:e4:42:84:f2:38:aa:13:6a:92:1e:c1:
0a:85:13:cf:b6:77:a2:40:c4:4d:e7:9a:6d:e1:79:
b6:49:ee:95:f7:21:55:f4:57:dd:4b:ea:9a:59:2e:
dc:21:36:6b:95:98:da:62:43:08:ed:d2:73:cf:f2:
03:73:82:92:1e:f4:be:c2:8e:e6:8a:d3:65:b0:45:
bf:51:be:b7:bb:55:ac:d3:b7:cd:e1:67:1b:bd:51:
c8:47:08:13:fb:05:6c:e5:a1:ea:ca:e4:d7:1c:79:
06:7b:21:d8:eb:44:4a:a3:11:23:41:85:57:56:3d:
d0:e5:f9:65:14:96:ed:55:9f:74:c3:c6:c6:c2:34:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:97:EF:D6:4C:26:CB:B7:D5:E9:10:3E:E9:88:5D:63:10:88:CE:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/651c7c5a-7e7a-330b-8a3c-911f10e5c011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:ab:02:b7:df:19:55:5b:cf:b2:00:8e:64:b4:a6:f9:5d:d4:
5b:af:ff:e3:0e:25:df:92:b2:ac:56:12:f0:66:6f:99:a2:89:
e4:da:89:a7:40:ad:bb:ae:3f:49:ae:e4:e6:80:d5:7a:38:9b:
ea:d8:96:57:2a:03:ab:f7:53:66:2d:03:73:a2:e9:68:1b:cf:
bf:04:06:fe:86:11:cb:40:42:6e:eb:99:37:40:7d:6c:6d:09:
61:cc:51:4c:5d:c9:87:ac:38:c2:2d:63:f8:56:b3:42:31:f7:
c6:31:41:f6:b3:b8:16:85:b5:35:ac:1c:49:1f:45:ff:8a:b7:
20:e8:d4:35:d0:c9:3a:7e:79:d2:78:e7:69:a5:92:96:e9:6d:
1a:fb:17:44:03:99:2f:4b:7f:a6:23:f8:67:fb:e6:52:cf:c7:
3d:2a:f5:1a:33:e3:e6:f3:bf:25:ac:9b:00:f0:45:a2:b6:dd:
2d:71:7b:bd:d8:a3:67:45:a1:a1:92:ca:b3:86:58:2d:53:fc:
0a:7e:8e:41:a3:d8:14:53:1d:fa:79:4b:3e:b7:49:0a:2a:91:
57:3c:48:e3:f9:0f:30:25:2b:04:c1:81:38:12:74:90:49:6b:
0a:cb:97:5f:90:7c:e5:ea:4e:1d:19:30:f7:33:87:23:2e:c2:
6c:35:8f:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOKv9TwujOHWDKsQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFm
OTEzMB4XDTIzMTAxNDAxMDAxNFoXDTI0MDExMjAyMDAxNFowLzEtMCsGA1UEAxMk
ZTdiZTM3NGUtMWQ5MS00ZDBiLTgyYzAtODcxMjgxYjRjOTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJu0bCTsOZk7mAVTTNsPZmEhZK73njm8ifUU
QqPMlyYYJ6s8xqmCY3NoJU8HkV4ej9HVyFfDQVZEv0jRFLDyz1pD6R68uOS+wSj5
DXEsBxZVhzVehTDZ79s02/ADECD21vSAcoQaoi+RR+EbxHTtGI4EeteTA37pVf7r
5EKE8jiqE2qSHsEKhRPPtneiQMRN55pt4Xm2Se6V9yFV9FfdS+qaWS7cITZrlZja
YkMI7dJzz/IDc4KSHvS+wo7mitNlsEW/Ub63u1Ws07fN4WcbvVHIRwgT+wVs5aHq
yuTXHHkGeyHY60RKoxEjQYVXVj3Q5fllFJbtVZ90w8bGwjSiUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSX79ZMJsu31ekQPumIXWMQiM6oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2
MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvNjUxYzdjNWEtN2U3YS0z
MzBiLThhM2MtOTExZjEwZTVjMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTdhNjM0MWItNWE1ZS00YWMwLWE3
NjAtNWE1NDE5MGFmOTEzL2U3YTYzNDFiLTVhNWUtNGFjMC1hNzYwLTVhNTQxOTBh
ZjkxMy5jcmwwHwYDVR0jBBgwFoAUMaKt48OVDcaXQR4vjLH8a7eDJcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0
MTkwYWY5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHB9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEarArffGVVbz7IAjmS0pvld1Fuv/+MOJd+SsqxWEvBmb5miieTaiadA
rbuuP0mu5OaA1Xo4m+rYllcqA6v3U2YtA3Oi6Wgbz78EBv6GEctAQm7rmTdAfWxt
CWHMUUxdyYesOMItY/hWs0Ix98YxQfazuBaFtTWsHEkfRf+KtyDo1DXQyTp+edJ4
52mlkpbpbRr7F0QDmS9Lf6Yj+Gf75lLPxz0q9Roz4+bzvyWsmwDwRaK23S1xe73Y
o2dFoaGSyrOGWC1T/Ap+jkGj2BRTHfp5Sz63SQoqkVc8SOP5DzAlKwTBgTgSdJBJ
awrLl1+QfOXqTh0ZMPczhyMuwmw1j4E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:20 2025 by rpki-client