Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/63b00231-4c70-3706-a7ed-e7b714b6311d.roa
File: 63b00231-4c70-3706-a7ed-e7b714b6311d.roa (raw, json)
Hash identifier: PM9ktLEYrmiul/5QlI5Du0SmljRcNTB9eyRpXXVKPCs=
Subject key identifier: E6:8B:3E:6F:78:06:2C:BB:64:EE:E9:AA:6E:7E:76:96:88:CD:14:E8
Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial: 010D0C9F43285847A2FAE7A10072E08E3FD14000
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/63b00231-4c70-3706-a7ed-e7b714b6311d.roa
Signing time: Wed 23 Oct 2024 12:26:27 +0000
ROA not before: Wed 23 Oct 2024 12:26:27 +0000
ROA not after: Tue 21 Jan 2025 13:26:27 +0000
asID: 7150
IP address blocks: 148.137.0.0/16 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a2:fa:e7:a1:00:72:e0:8e:3f:d1:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Validity
Not Before: Oct 23 12:26:27 2024 GMT
Not After : Jan 21 13:26:27 2025 GMT
Subject: CN=d7a2dbed-3d8f-4249-a87f-29af8dbbe331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:86:1a:21:1a:a9:70:d1:86:10:48:4c:29:
78:d2:86:6d:17:d5:de:37:00:3b:10:c8:53:40:8f:
2c:f3:81:bf:b5:da:3f:ce:68:38:17:89:8c:ee:94:
e7:d6:37:ff:3b:5e:e7:2c:ab:c4:19:0b:be:76:ed:
fe:e2:d8:fc:e1:a5:47:79:0f:49:fa:19:5b:38:f4:
86:f0:fb:48:ad:6e:37:55:15:73:cf:cf:f0:6a:7d:
81:01:f7:f4:0e:45:4b:d3:40:c7:5d:2d:40:fc:19:
1e:50:19:01:a0:22:25:08:a3:e3:e6:cc:22:8e:75:
5b:b8:09:9e:cd:62:22:1a:2e:77:44:7a:0e:4d:16:
e4:b8:de:94:6b:64:51:95:a6:c2:d1:84:7e:0a:03:
6f:7c:e5:d1:64:fb:56:6b:02:18:e1:2d:80:a5:be:
a8:62:ca:41:5d:f4:f8:09:0c:b7:c3:a3:d8:80:b4:
98:0b:8c:a2:13:6a:f8:6e:95:a8:e7:6d:b8:ca:f8:
94:13:ec:6e:98:08:cd:ea:6e:5b:94:f2:2c:32:d4:
62:01:bd:10:3d:3a:86:a3:cc:d2:9e:b7:62:15:a0:
8b:19:9d:5a:8e:af:f7:c7:e4:1c:b6:fe:a7:35:22:
08:39:53:33:ad:00:ff:f7:51:09:2c:a9:00:b3:f9:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:3E:6F:78:06:2C:BB:64:EE:E9:AA:6E:7E:76:96:88:CD:14:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/63b00231-4c70-3706-a7ed-e7b714b6311d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
X509v3 Authority Key Identifier:
keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
sbgp-ipAddrBlock: critical
IPv4:
148.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:c9:42:5b:2d:de:96:36:4d:f0:8c:2f:f8:71:a6:52:54:a5:
92:83:e6:cc:e3:e3:3d:23:e1:79:18:77:3a:0b:df:b7:90:b1:
75:4e:ca:1f:5a:59:a1:29:82:59:fc:0a:ee:41:2b:eb:c7:55:
3e:29:6b:78:47:26:9c:a8:ac:9a:7d:55:2e:7f:61:a8:f4:15:
97:f9:10:52:bb:a2:fd:b6:e3:95:02:45:c1:5b:6d:66:c5:b8:
3f:ce:fd:f7:41:2b:fb:87:cb:09:53:af:10:d4:eb:81:9e:50:
f9:07:fb:80:3f:ed:ab:05:a3:d0:b5:49:fc:7d:5b:02:70:63:
fb:32:d4:b1:c4:46:7d:35:4b:71:a6:b3:c6:91:ef:30:c0:d1:
f5:7e:70:c7:84:3b:09:56:80:b7:2c:ae:e0:39:12:ba:84:11:
20:41:f9:d9:3d:31:04:4e:76:f1:06:0b:77:f2:5f:89:77:08:
ac:47:18:ea:30:d3:00:8b:37:4f:cc:a8:4a:01:91:5f:3f:c0:
03:fc:8e:3e:72:c1:18:31:71:c2:fb:8a:4d:cc:bd:09:a5:d8:
71:ed:2b:d5:06:88:9c:69:cf:e5:4f:0e:f8:06:74:66:62:bc:
6a:c6:6d:de:43:57:1c:d6:90:10:d0:0a:f3:40:a4:fa:96:9a:
11:5f:a3:c3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEei+uehAHLgjj/RQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz
YWExMB4XDTI0MTAyMzEyMjYyN1oXDTI1MDEyMTEzMjYyN1owLzEtMCsGA1UEAxMk
ZDdhMmRiZWQtM2Q4Zi00MjQ5LWE4N2YtMjlhZjhkYmJlMzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUaGGiEaqXDRhhBITCl40oZtF9XeNwA7EMhT
QI8s84G/tdo/zmg4F4mM7pTn1jf/O17nLKvEGQu+du3+4tj84aVHeQ9J+hlbOPSG
8PtIrW43VRVzz8/wan2BAff0DkVL00DHXS1A/BkeUBkBoCIlCKPj5swijnVbuAme
zWIiGi53RHoOTRbkuN6Ua2RRlabC0YR+CgNvfOXRZPtWawIY4S2Apb6oYspBXfT4
CQy3w6PYgLSYC4yiE2r4bpWo5224yviUE+xumAjN6m5blPIsMtRiAb0QPTqGo8zS
nrdiFaCLGZ1ajq/3x+Qctv6nNSIIOVMzrQD/91EJLKkAs/nm+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOaLPm94Biy7ZO7pqm5+dpaIzRToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw
ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvNjNiMDAyMzEtNGM3MC0z
NzA2LWE3ZWQtZTdiNzE0YjYzMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk
YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx
M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0
YjRmMTNhYTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARMlCWy3eljZN8Iwv+HGmUlSlkoPmzOPjPSPheRh3Ogvft5CxdU7KH1pZ
oSmCWfwK7kEr68dVPilreEcmnKismn1VLn9hqPQVl/kQUrui/bbjlQJFwVttZsW4
P87990Er+4fLCVOvENTrgZ5Q+Qf7gD/tqwWj0LVJ/H1bAnBj+zLUscRGfTVLcaaz
xpHvMMDR9X5wx4Q7CVaAtyyu4DkSuoQRIEH52T0xBE528QYLd/JfiXcIrEcY6jDT
AIs3T8yoSgGRXz/AA/yOPnLBGDFxwvuKTcy9CaXYce0r1QaInGnP5U8O+AZ0ZmK8
asZt3kNXHNaQENAK80Ck+paaEV+jww==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:44:22 2025 by rpki-client