Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/29e5becb-78a3-34ec-8d92-277f3256b836.roa
File: 29e5becb-78a3-34ec-8d92-277f3256b836.roa (raw, json)
Hash identifier: Iw6x4r3mZb2rQ6k449voksrUc/lkhlwmLP8O+RpSf4s=
Subject key identifier: 32:0E:D8:E7:C2:CB:06:DB:61:22:24:16:86:D6:F3:3B:46:38:B6:3C
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328583B5906EDE4F812D4F6476E6E80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/29e5becb-78a3-34ec-8d92-277f3256b836.roa
Signing time: Wed 22 Sep 2021 04:00:00 +0000
ROA not before: Wed 22 Sep 2021 04:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 25645
IP address blocks: 208.85.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:59:06:ed:e4:f8:12:d4:f6:47:6e:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Sep 22 04:00:00 2021 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=577e4c76-0b5f-4a0d-8a56-75680332aa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:16:75:ae:6e:25:a2:07:f3:08:b2:ab:8e:
36:64:5f:a0:96:92:05:23:c2:22:8b:81:af:3d:9a:
75:30:a7:9c:45:53:73:23:57:d5:12:9e:cf:ce:6e:
16:43:14:cb:cf:a4:e3:45:37:b5:56:7f:15:bf:3a:
04:6d:f9:f5:ad:81:dd:de:91:c8:af:fd:be:6a:e4:
8c:ba:ce:cd:e9:41:53:19:88:68:64:0c:ed:0d:19:
b1:48:ac:4a:db:68:60:b4:ba:32:f1:a6:b5:bd:29:
95:44:d1:19:a4:61:59:1f:40:da:ec:29:bc:cf:27:
ca:41:0e:47:93:1a:ff:e1:60:e1:1a:70:5d:f4:22:
33:e5:80:a7:57:9f:20:75:f6:92:bd:fd:51:52:f8:
5d:a5:54:27:17:7a:d1:84:66:1c:94:e2:a4:0c:3e:
2b:71:40:6b:ff:73:53:81:1b:08:2a:ba:54:ea:fe:
60:cf:d6:bd:d9:86:fa:e8:b9:e1:01:d1:40:43:08:
fb:4f:44:2a:41:8b:d2:2e:dc:1c:b6:0d:c2:92:90:
5a:cd:35:d0:a6:4b:f7:d1:58:75:aa:77:0d:8e:93:
df:9c:c5:6a:36:5e:96:7e:d4:25:cf:78:0a:e5:18:
e4:18:5e:07:ce:ba:a5:80:41:cc:c6:07:c1:15:06:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:D8:E7:C2:CB:06:DB:61:22:24:16:86:D6:F3:3B:46:38:B6:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/29e5becb-78a3-34ec-8d92-277f3256b836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
208.85.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:31:6a:ba:04:95:c9:d3:62:c1:ec:b1:d3:c8:0f:29:1c:1d:
83:7d:42:cd:91:f4:66:25:92:29:65:98:e9:05:f2:81:59:8b:
e8:5a:cb:d0:6a:5f:6c:7f:ef:f0:e3:f1:8a:ca:76:25:c4:66:
08:fc:40:79:79:f2:16:78:16:47:ef:59:d5:da:96:e1:e7:af:
14:64:ff:40:f7:4c:e0:da:45:e8:1f:8c:dc:af:f7:06:8f:ee:
13:65:7c:2b:8a:b4:5b:f1:18:a1:11:6e:a8:a3:d9:ec:4c:6e:
9b:49:7c:15:5d:6c:22:af:db:eb:97:b7:c8:f6:25:1e:0a:50:
d7:21:aa:43:92:8f:64:d1:42:4a:ef:f9:cb:93:d0:bf:3b:6d:
43:d3:49:6a:e2:3c:cc:c2:8e:83:9a:50:8d:f0:e6:ba:2d:ec:
b7:18:b3:c3:76:de:e8:d5:45:e1:4d:92:ce:2e:ab:16:2b:ef:
70:64:a2:46:4e:60:7a:1a:c5:c6:19:64:95:ea:a8:32:b0:c2:
d9:b2:ea:d0:d1:eb:b5:01:83:14:06:fa:40:cb:ac:0e:68:f3:
c8:7e:d6:ba:5b:ce:9e:56:a3:3a:f8:e3:be:d6:78:23:ea:f7:
73:eb:0e:de:66:f1:e6:72:a0:99:3c:67:8a:05:31:9d:50:cd:
cc:6d:e1:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDtZBu3k+BLU9kduboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTIxMDkyMjA0MDAwMFoXDTIyMDYwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTc3ZTRjNzYtMGI1Zi00YTBkLThhNTYtNzU2ODAzMzJhYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspkWda5uJaIH8wiyq442ZF+glpIFI8Iii4Gv
PZp1MKecRVNzI1fVEp7Pzm4WQxTLz6TjRTe1Vn8VvzoEbfn1rYHd3pHIr/2+auSM
us7N6UFTGYhoZAztDRmxSKxK22hgtLoy8aa1vSmVRNEZpGFZH0Da7Cm8zyfKQQ5H
kxr/4WDhGnBd9CIz5YCnV58gdfaSvf1RUvhdpVQnF3rRhGYclOKkDD4rcUBr/3NT
gRsIKrpU6v5gz9a92Yb66LnhAdFAQwj7T0QqQYvSLtwctg3CkpBazTXQpkv30Vh1
qncNjpPfnMVqNl6WftQlz3gK5RjkGF4HzrqlgEHMxgfBFQYTnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIO2OfCywbbYSIkFobW8ztGOLY8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMjllNWJlY2ItNzhhMy0z
NGVjLThkOTItMjc3ZjMyNTZiODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoxaroElcnTYsHssdPIDykcHYN9Qs2R9GYlkillmOkF8oFZi+hay9Bq
X2x/7/Dj8YrKdiXEZgj8QHl58hZ4FkfvWdXaluHnrxRk/0D3TODaRegfjNyv9waP
7hNlfCuKtFvxGKERbqij2exMbptJfBVdbCKv2+uXt8j2JR4KUNchqkOSj2TRQkrv
+cuT0L87bUPTSWriPMzCjoOaUI3w5rot7LcYs8N23ujVReFNks4uqxYr73BkokZO
YHoaxcYZZJXqqDKwwtmy6tDR67UBgxQG+kDLrA5o88h+1rpbzp5Wozr4477WeCPq
93PrDt5m8eZyoJk8Z4oFMZ1Qzcxt4dw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:41 2023 by rpki-client on console-ams.rpki-client.org