Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/04b49f23-0470-3a78-a9e8-ddb0b7f80957.roa
File: 04b49f23-0470-3a78-a9e8-ddb0b7f80957.roa (raw, json)
Hash identifier: PPeqFG1qvOPlf+9qPMp2ASqULJgwRXgSguq6taOw0fQ=
Subject key identifier: 2C:CC:F2:B7:7D:02:5E:41:25:2A:E4:90:D7:8B:17:24:8E:FA:62:4C
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F43285841E46D9828E638304ABD6A0F80
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/04b49f23-0470-3a78-a9e8-ddb0b7f80957.roa
Signing time: Mon 15 May 2023 18:21:01 +0000
ROA not before: Mon 15 May 2023 18:21:01 +0000
ROA not after: Tue 04 Jul 2023 08:33:26 +0000
asID: 174
IP address blocks: 158.41.128.0/17 maxlen: 17
156.146.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:6d:98:28:e6:38:30:4a:bd:6a:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: May 15 18:21:01 2023 GMT
Not After : Jul 4 08:33:26 2023 GMT
Subject: CN=62c4e720-29f2-45d2-8d13-2fad80f9728c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:60:24:19:3d:87:a1:34:2d:3b:49:d6:6b:
a5:c8:33:da:34:b0:6c:0f:d0:cd:63:e2:9d:90:f6:
b3:b8:56:ec:98:7f:9c:65:6c:28:fe:8f:df:0f:63:
b4:5f:92:ee:2f:8b:ee:20:b2:ac:be:82:fd:f8:4b:
6b:63:1b:05:e9:cd:55:04:6d:bd:08:17:39:2b:ea:
08:19:f8:b1:f4:2f:45:c3:b8:01:45:e2:e5:c4:59:
17:d7:72:71:d9:00:b0:58:d5:ae:b8:df:69:b5:6f:
66:6c:64:0c:2f:0c:0e:8a:83:dc:09:21:1b:0f:26:
77:26:b2:6e:5a:f1:dd:5d:56:9f:dc:8a:c7:a7:c9:
a7:35:24:9d:29:18:22:0d:95:cf:60:dc:81:c5:c6:
98:5f:67:70:36:d8:f2:c9:e8:2a:66:21:be:1a:37:
52:dd:a4:3c:0d:2b:60:8b:b8:a7:7f:95:8a:4f:59:
f6:a6:0d:32:60:af:eb:73:49:82:9a:95:ee:95:db:
60:5c:d9:1c:90:4f:3d:63:9c:a5:e1:e8:48:b0:5a:
c3:16:df:7c:03:0d:8a:dc:54:e4:2a:b2:6e:f1:2c:
e8:5c:d9:51:fd:ad:5b:a7:42:f7:78:ed:a6:ac:1d:
b0:70:62:f9:68:0f:ea:ab:1c:99:14:bc:c3:b6:af:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:F2:B7:7D:02:5E:41:25:2A:E4:90:D7:8B:17:24:8E:FA:62:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/04b49f23-0470-3a78-a9e8-ddb0b7f80957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:5f:84:16:6b:5e:dc:4d:fb:82:f4:68:66:52:83:ae:46:90:
ea:18:26:c8:99:4b:ae:d0:36:01:d7:a7:e5:2a:f5:9e:c6:26:
52:56:8e:d0:5b:a5:b6:5d:94:1f:bc:c5:d0:2e:18:e5:68:64:
51:09:b4:1f:9c:8a:92:42:7b:81:0e:3c:c3:e1:b0:d1:af:1b:
89:79:43:7a:92:9c:4e:d6:17:2f:0d:05:30:13:b8:8d:b0:48:
f2:43:43:a0:b5:60:9d:0d:ce:24:56:45:e5:f5:98:d7:a6:42:
9e:df:d5:b8:81:b6:22:69:3d:39:5a:c1:3a:f7:91:5d:85:cd:
d3:f1:46:e4:ed:e2:bd:57:fd:38:05:c8:ea:46:a0:ce:61:19:
09:3c:ec:c9:b3:4d:40:60:b0:f6:12:c0:bf:46:dd:17:e9:51:
8e:24:ea:3f:7f:5b:a3:b1:2f:f3:61:da:4c:f1:f7:4d:8b:37:
38:f0:43:a4:95:fa:c8:eb:c8:91:76:d0:41:83:e9:8b:15:78:
62:c7:3f:aa:ce:ca:64:4b:3d:e1:7f:62:bc:7e:13:1f:d0:6d:
fc:9f:8b:8d:54:de:c6:fa:35:e0:66:e6:31:74:4f:90:84:3c:
b5:22:ee:10:38:9e:fb:26:7b:e6:79:d7:9e:b1:6a:33:05:3a:
75:89:a4:3d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEHkbZgo5jgwSr1qD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5
Yzk1MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwNDA4MzMyNlowLzEtMCsGA1UEAxMk
NjJjNGU3MjAtMjlmMi00NWQyLThkMTMtMmZhZDgwZjk3MjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtlgJBk9h6E0LTtJ1mulyDPaNLBsD9DNY+Kd
kPazuFbsmH+cZWwo/o/fD2O0X5LuL4vuILKsvoL9+EtrYxsF6c1VBG29CBc5K+oI
Gfix9C9Fw7gBReLlxFkX13Jx2QCwWNWuuN9ptW9mbGQMLwwOioPcCSEbDyZ3JrJu
WvHdXVaf3IrHp8mnNSSdKRgiDZXPYNyBxcaYX2dwNtjyyegqZiG+GjdS3aQ8DStg
i7inf5WKT1n2pg0yYK/rc0mCmpXuldtgXNkckE89Y5yl4ehIsFrDFt98Aw2K3FTk
KrJu8SzoXNlR/a1bp0L3eO2mrB2wcGL5aA/qqxyZFLzDtq/VhQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCzM8rd9Al5BJSrkkNeLFySO+mJMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3
Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvMDRiNDlmMjMtMDQ3MC0z
YTc4LWE5ZTgtZGRiMGI3ZjgwOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2
NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl
OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj
OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH
nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAItfhBZrXtxN+4L0aGZSg65GkOoYJsiZS67QNgHXp+Uq9Z7G
JlJWjtBbpbZdlB+8xdAuGOVoZFEJtB+cipJCe4EOPMPhsNGvG4l5Q3qSnE7WFy8N
BTATuI2wSPJDQ6C1YJ0NziRWReX1mNemQp7f1biBtiJpPTlawTr3kV2FzdPxRuTt
4r1X/TgFyOpGoM5hGQk87MmzTUBgsPYSwL9G3RfpUY4k6j9/W6OxL/Nh2kzx902L
NzjwQ6SV+sjryJF20EGD6YsVeGLHP6rOymRLPeF/Yrx+Ex/Qbfyfi41U3sb6NeBm
5jF0T5CEPLUi7hA4nvsme+Z5156xajMFOnWJpD0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org