Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/24ddaa4a-984d-36f2-99b4-4ae06c5b14a5.roa
File: 24ddaa4a-984d-36f2-99b4-4ae06c5b14a5.roa (raw, json)
Hash identifier: SCQNM+DV++fbATPMswPjyDxTiY5CXhRIMVXxdA5F0Sk=
Subject key identifier: 45:3F:22:CF:8C:F3:E7:FA:EF:97:41:A2:A5:4A:2E:46:48:0E:DD:0C
Certificate issuer: /CN=8fcdcf75-4a90-4874-85b0-b4e1b3fc2923
Certificate serial: 010D0C9F4328584675BF172A6291082EADEF0000
Authority key identifier: BE:57:49:55:9E:E3:50:25:51:D7:1D:5D:DD:AF:4F:23:32:8E:72:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/24ddaa4a-984d-36f2-99b4-4ae06c5b14a5.roa
Signing time: Sun 07 Jul 2024 14:47:37 +0000
ROA not before: Sun 07 Jul 2024 14:47:37 +0000
ROA not after: Sat 05 Oct 2024 14:47:37 +0000
asID: 400179
IP address blocks: 23.130.8.0/24 maxlen: 24
2602:817:4000::/40 maxlen: 40
2620:9f:a000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:75:bf:17:2a:62:91:08:2e:ad:ef:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fcdcf75-4a90-4874-85b0-b4e1b3fc2923
Validity
Not Before: Jul 7 14:47:37 2024 GMT
Not After : Oct 5 14:47:37 2024 GMT
Subject: CN=f4c10434-9f62-4513-8f0a-d9a630244c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:bd:35:26:b0:31:c6:ba:30:ee:bc:84:6f:
d0:b1:94:fd:57:64:f9:a5:12:cc:ac:39:6f:2e:dd:
ee:da:d5:f3:96:36:2f:b5:01:3a:43:38:ac:ff:34:
85:ec:5f:3b:ac:56:a4:3a:85:6a:29:0a:a2:f6:52:
81:31:b9:01:74:ef:f2:c9:ec:22:ca:43:db:63:f9:
26:38:70:9a:86:90:f4:49:31:0d:76:28:d3:1d:17:
4f:1d:fb:7b:b5:6e:e2:f1:51:60:49:44:cd:a4:d1:
d2:aa:4d:78:c2:8f:b4:6b:45:3d:2b:94:e1:48:98:
d5:ce:4a:00:96:98:2a:83:e0:1e:95:7b:3c:70:65:
d4:3c:57:45:d8:3e:4e:92:ca:58:ef:bc:88:d0:d6:
8b:c4:51:95:89:82:0d:ad:1a:59:b8:19:cb:fd:80:
0d:8b:57:23:22:6a:c3:32:22:ed:ec:04:91:27:9b:
6c:8f:61:71:c9:d5:fc:46:cb:7c:be:d9:9a:ae:9b:
ba:a3:4b:47:a1:93:32:7c:86:2d:0e:67:a5:4a:10:
e2:c4:54:0b:05:2c:94:11:fe:7c:d5:12:f7:6f:e7:
28:3a:4f:2b:75:10:1d:af:cf:0b:31:ee:18:80:db:
48:5e:2e:17:9c:34:51:b3:5b:e6:c2:07:0b:51:b5:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:22:CF:8C:F3:E7:FA:EF:97:41:A2:A5:4A:2E:46:48:0E:DD:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/24ddaa4a-984d-36f2-99b4-4ae06c5b14a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.crl
X509v3 Authority Key Identifier:
keyid:BE:57:49:55:9E:E3:50:25:51:D7:1D:5D:DD:AF:4F:23:32:8E:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8fcdcf75-4a90-4874-85b0-b4e1b3fc2923.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.8.0/24
IPv6:
2602:817:4000::/40
2620:9f:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6c:77:3e:d7:44:ea:78:97:ff:24:2c:76:5f:e8:52:76:e1:
15:98:35:89:0e:cd:2b:bd:e3:dc:c1:48:07:8c:d4:d8:52:51:
b9:88:da:c7:f1:30:1b:3b:77:fb:5c:44:3a:ec:2e:8d:94:0c:
a9:cf:eb:84:79:76:4a:4a:18:68:3a:30:95:c8:38:ad:46:9f:
3f:92:2f:2e:85:8f:64:ec:b1:18:87:07:ea:a7:75:7c:0f:81:
1c:a5:08:86:9d:eb:be:60:d2:bb:86:66:bc:3a:2d:8b:d5:cd:
c9:07:17:05:66:66:13:0b:01:6c:92:3d:69:e7:46:26:c9:ba:
97:4b:98:83:dd:e5:fe:d4:16:63:5e:2a:fc:b5:ea:0d:92:bc:
49:41:cf:5e:3b:a7:99:04:d7:1d:25:d1:23:15:be:cb:df:95:
37:5e:0a:41:6d:ae:44:75:42:65:5d:18:05:ef:c3:7e:f8:c9:
a2:55:fa:5e:f6:29:c6:9d:86:0f:d1:80:20:5b:12:8a:6b:79:
9e:2e:fc:50:2a:bd:a5:7a:fc:93:77:cc:e4:ff:70:f2:c2:5b:
2f:f9:86:89:87:02:6a:c2:48:7e:cd:2a:7c:2b:8d:ac:db:14:
aa:86:de:61:f2:21:ec:4f:70:98:ad:4b:72:93:f2:07:84:f7:
81:e7:3e:f9
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEZ1vxcqYpEILq3vAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZjZGNmNzUtNGE5MC00ODc0LTg1YjAtYjRlMWIzZmMy
OTIzMB4XDTI0MDcwNzE0NDczN1oXDTI0MTAwNTE0NDczN1owLzEtMCsGA1UEAxMk
ZjRjMTA0MzQtOWY2Mi00NTEzLThmMGEtZDlhNjMwMjQ0YzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTy9NSawMca6MO68hG/QsZT9V2T5pRLMrDlv
Lt3u2tXzljYvtQE6Qzis/zSF7F87rFakOoVqKQqi9lKBMbkBdO/yyewiykPbY/km
OHCahpD0STENdijTHRdPHft7tW7i8VFgSUTNpNHSqk14wo+0a0U9K5ThSJjVzkoA
lpgqg+AelXs8cGXUPFdF2D5OkspY77yI0NaLxFGViYINrRpZuBnL/YANi1cjImrD
MiLt7ASRJ5tsj2FxydX8Rst8vtmarpu6o0tHoZMyfIYtDmelShDixFQLBSyUEf58
1RL3b+coOk8rdRAdr88LMe4YgNtIXi4XnDRRs1vmwgcLUbVrkQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFEU/Is+M8+f675dBoqVKLkZIDt0MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84ZmNk
Y2Y3NS00YTkwLTQ4NzQtODViMC1iNGUxYjNmYzI5MjMvMjRkZGFhNGEtOTg0ZC0z
NmYyLTk5YjQtNGFlMDZjNWIxNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGZjZGNmNzUtNGE5MC00ODc0LTg1
YjAtYjRlMWIzZmMyOTIzLzhmY2RjZjc1LTRhOTAtNDg3NC04NWIwLWI0ZTFiM2Zj
MjkyMy5jcmwwHwYDVR0jBBgwFoAUvldJVZ7jUCVR1x1d3a9PIzKOcogwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84ZmNkY2Y3NS00YTkwLTQ4NzQtODViMC1iNGUx
YjNmYzI5MjMuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAF4IIMBcE
AgACMBEDBgAmAggXQAMHACYgAJ+gADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzbHc+10TqeJf/JCx2X+hS
duEVmDWJDs0rvePcwUgHjNTYUlG5iNrH8TAbO3f7XEQ67C6NlAypz+uEeXZKShho
OjCVyDitRp8/ki8uhY9k7LEYhwfqp3V8D4EcpQiGneu+YNK7hma8Oi2L1c3JBxcF
ZmYTCwFskj1p50YmybqXS5iD3eX+1BZjXir8teoNkrxJQc9eO6eZBNcdJdEjFb7L
35U3XgpBba5EdUJlXRgF78N++MmiVfpe9inGnYYP0YAgWxKKa3meLvxQKr2levyT
d8zk/3Dywlsv+YaJhwJqwkh+zSp8K42s2xSqht5h8iHsT3CYrUtyk/IHhPeB5z75
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:15:14 2025 by rpki-client