Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36b0ca22-16fb-3a06-b97b-e665a9f4eb44.roa
File: 36b0ca22-16fb-3a06-b97b-e665a9f4eb44.roa (raw, json)
Hash identifier: CilvwcO7NEoH0v5Us2a3XfBWoADLY0uZipu7unOWwx8=
Subject key identifier: A5:F6:FF:A1:D6:D9:1E:41:64:1F:41:87:66:8F:3F:AC:BB:24:DA:C0
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285838787E53465839ADAE321D0240
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36b0ca22-16fb-3a06-b97b-e665a9f4eb44.roa
Signing time: Tue 05 May 2020 04:00:00 +0000
ROA not before: Tue 05 May 2020 04:00:00 +0000
ROA not after: Thu 06 Apr 2023 04:00:00 +0000
asID: 61317
IP address blocks: 166.0.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:78:7e:53:46:58:39:ad:ae:32:1d:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 04:00:00 2020 GMT
Not After : Apr 6 04:00:00 2023 GMT
Subject: CN=65523d83-6c2f-4ccd-bf92-6350948fa3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:b2:14:4e:c2:86:65:07:f7:83:32:ec:3d:
53:27:04:27:f3:be:14:7a:1e:2e:2c:0d:0e:cc:0e:
58:96:f4:b6:87:6e:f1:ba:fa:fa:15:9e:34:f7:c0:
73:94:1f:75:d4:54:e3:4a:88:32:76:a4:5e:76:fb:
35:96:bb:22:a2:ea:be:e9:b8:6f:b6:6b:ba:21:e5:
50:dd:b1:a2:18:da:25:8d:4e:8f:d7:5a:de:ea:21:
a2:04:1d:aa:57:90:40:9f:5d:ab:fb:66:e9:60:0d:
53:1a:00:9f:17:1c:46:c4:ce:8f:7b:ea:17:9b:0c:
43:da:4b:eb:05:ee:ed:0b:65:50:c8:3f:44:f7:d9:
3a:95:62:20:4c:ac:78:aa:ea:59:00:d7:b8:4d:ac:
23:e7:cb:1a:a5:86:35:51:fb:1a:d3:bc:76:30:c1:
1b:a9:0d:9f:69:cf:20:b8:b9:a6:c6:c6:bd:aa:5f:
6a:85:54:d6:6a:5e:f2:93:8b:ad:a2:07:19:6a:6a:
de:60:dd:63:ff:78:9a:83:a9:8c:73:7d:f6:d0:ea:
a8:2a:86:3e:c8:c7:89:64:b6:ae:fd:19:20:2a:31:
e6:8f:66:c5:e9:06:73:20:99:3a:fe:9b:38:cb:21:
d0:08:51:2c:63:31:04:24:42:c4:3c:29:1b:51:6e:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:FF:A1:D6:D9:1E:41:64:1F:41:87:66:8F:3F:AC:BB:24:DA:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/36b0ca22-16fb-3a06-b97b-e665a9f4eb44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:bc:9d:28:c7:7a:55:81:62:1f:06:20:74:d6:d2:db:99:a2:
bd:6c:c2:b8:b4:a7:1d:32:85:25:02:db:16:b1:45:e6:f6:86:
ea:83:32:63:ba:9e:36:49:00:5b:34:8f:66:dd:04:fd:27:b3:
c2:a3:49:bd:ba:1f:55:e7:bc:5f:40:21:ec:c9:40:62:f3:a8:
0a:6c:89:51:ee:b5:f1:64:c2:4a:ef:bb:f9:0e:ac:a1:42:71:
15:4e:8e:e7:48:89:57:06:eb:b0:d5:f9:45:be:71:46:c7:f5:
a5:33:72:68:1a:55:a3:57:67:2c:44:4d:b2:43:b0:e0:c1:e6:
3e:37:d3:94:3e:ee:c8:df:6b:6a:27:7a:fb:93:95:40:0d:5e:
86:26:bd:73:f3:f7:25:ab:6d:f2:d5:f5:aa:ce:a9:e5:2a:86:
44:e5:bd:19:61:de:78:8e:75:7f:35:2e:70:02:6a:5a:3a:9d:
f3:d4:84:f8:a1:ed:26:27:5c:c1:5d:df:41:00:b6:76:c0:50:
0e:42:da:58:6c:14:b7:3b:19:3a:fc:e3:25:44:b0:45:54:c5:
7d:3a:b6:52:26:d0:d8:15:c5:f7:f8:c4:b1:40:bf:c1:24:af:
a5:b8:5b:ab:d6:0c:66:db:fc:bb:43:75:4c:15:82:86:d8:6c:
d5:c9:8e:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDh4flNGWDmtrjIdAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTA0MDAwMFoXDTIzMDQwNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjU1MjNkODMtNmMyZi00Y2NkLWJmOTItNjM1MDk0OGZhM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5uyFE7ChmUH94My7D1TJwQn874Ueh4uLA0O
zA5YlvS2h27xuvr6FZ4098BzlB911FTjSogydqRedvs1lrsiouq+6bhvtmu6IeVQ
3bGiGNoljU6P11re6iGiBB2qV5BAn12r+2bpYA1TGgCfFxxGxM6Pe+oXmwxD2kvr
Be7tC2VQyD9E99k6lWIgTKx4qupZANe4Tawj58sapYY1Ufsa07x2MMEbqQ2fac8g
uLmmxsa9ql9qhVTWal7yk4utogcZamreYN1j/3iag6mMc3320OqoKoY+yMeJZLau
/RkgKjHmj2bF6QZzIJk6/ps4yyHQCFEsYzEEJELEPCkbUW5qkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKX2/6HW2R5BZB9Bh2aPP6y7JNrAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzZiMGNhMjItMTZmYi0z
YTA2LWI5N2ItZTY2NWE5ZjRlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpgCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAy8nSjHelWBYh8GIHTW0tuZor1swri0px0yhSUC2xaxReb2huqDMmO6
njZJAFs0j2bdBP0ns8KjSb26H1XnvF9AIezJQGLzqApsiVHutfFkwkrvu/kOrKFC
cRVOjudIiVcG67DV+UW+cUbH9aUzcmgaVaNXZyxETbJDsODB5j4305Q+7sjfa2on
evuTlUANXoYmvXPz9yWrbfLV9arOqeUqhkTlvRlh3niOdX81LnACalo6nfPUhPih
7SYnXMFd30EAtnbAUA5C2lhsFLc7GTr84yVEsEVUxX06tlIm0NgVxff4xLFAv8Ek
r6W4W6vWDGbb/LtDdUwVgobYbNXJjvI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:24 2023 by rpki-client on console-fra.rpki-client.org