Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/ca8319d7-8356-302d-8bf4-f05b084e1996.roa
File: ca8319d7-8356-302d-8bf4-f05b084e1996.roa (raw, json)
Hash identifier: abqHqa9cLLQOkANUFaonDlj6g9YEawS0A8TsNZb5H7Q=
Subject key identifier: AD:3F:B1:3D:A1:B9:1B:E3:12:A9:E2:EC:B2:A7:6C:8E:88:BF:8D:F7
Certificate issuer: /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial: 010D0C9F4328576D51CC73C042CFC1735D4038DC
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/ca8319d7-8356-302d-8bf4-f05b084e1996.roa
Signing time: Fri 17 Jul 2020 14:49:16 +0000
ROA not before: Wed 15 Jul 2020 04:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 27364
IP address blocks: 24.101.0.0/19 maxlen: 19
24.101.32.0/19 maxlen: 19
24.101.64.0/19 maxlen: 19
24.101.96.0/19 maxlen: 19
24.101.128.0/19 maxlen: 19
24.101.160.0/20 maxlen: 20
24.101.176.0/21 maxlen: 21
24.101.184.0/21 maxlen: 21
24.101.192.0/19 maxlen: 19
24.101.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5d:40:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Validity
Not Before: Jul 15 04:00:00 2020 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=2a09bd03-d6f1-4670-aecd-8d1e55efe750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:7f:ca:9e:f9:45:77:e9:d8:1f:18:bf:5b:
8c:3e:9c:95:5a:f2:29:3f:f2:3b:48:1f:3e:b0:11:
68:bc:3f:10:dc:00:18:10:a2:27:4a:7b:82:e5:8f:
86:78:c9:c7:37:e0:fc:2e:b5:f5:2a:d8:60:4f:18:
98:1d:7d:74:9b:7c:30:d5:47:e3:e9:a7:76:dc:7a:
bf:c7:4b:50:16:d4:fa:ed:36:cb:50:e0:ee:04:ce:
a8:88:9b:db:e9:ef:cc:5e:20:d4:66:08:2d:75:a7:
dc:78:56:ee:dd:ff:88:d8:e9:d5:54:e8:70:c0:84:
6c:24:12:42:e9:7c:fe:c2:66:88:5a:be:d1:44:6d:
32:f1:50:1f:16:73:26:41:41:78:86:aa:06:3c:58:
fa:61:c5:07:57:fe:4d:1b:25:65:55:d3:40:7e:a9:
86:da:91:dd:7e:46:a9:84:c0:27:22:cb:ce:a7:4c:
42:d6:d8:88:39:69:41:fa:43:cf:2b:27:5b:01:f4:
2e:10:d2:e3:28:f8:07:bf:9a:b6:59:a8:4b:49:58:
26:fb:f8:c1:4e:de:1d:c2:be:36:27:de:a4:43:62:
65:e4:1e:67:2f:53:95:75:08:f4:01:7c:c2:06:3d:
9a:0e:c7:5e:b6:cf:0b:9c:52:37:ef:c0:28:8e:09:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:B1:3D:A1:B9:1B:E3:12:A9:E2:EC:B2:A7:6C:8E:88:BF:8D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/ca8319d7-8356-302d-8bf4-f05b084e1996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
X509v3 Authority Key Identifier:
keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:a1:15:55:57:58:00:e5:a4:02:a8:b3:82:a7:5f:ad:0b:9e:
27:63:11:4a:67:6f:98:1f:a5:da:3a:05:aa:9d:c7:b6:79:be:
2d:a6:12:b7:a5:bb:fb:70:21:1a:47:c8:99:dd:f7:11:b9:24:
e5:f6:79:d3:22:35:b8:fc:4e:ca:8e:83:85:a2:3d:ec:84:29:
91:d4:b9:a0:31:0b:2b:ff:cd:11:67:0d:cb:a5:ec:b5:e0:98:
e3:03:7b:3d:43:e0:d4:a6:13:f8:64:06:1d:79:44:be:08:66:
8c:e8:b5:51:d8:a9:b6:af:3b:3a:6d:66:2c:c1:d7:80:95:66:
9b:ef:0c:cf:2a:61:34:28:3d:2e:86:6d:ba:44:a0:41:0e:18:
fc:d0:d8:4a:38:88:a9:af:7f:8c:8b:47:5c:ea:01:58:ca:31:
2c:d4:c1:53:ac:a5:69:23:a6:c2:65:ce:36:f6:f0:c1:4e:ec:
7b:21:d7:f3:f4:e0:6b:15:20:0e:0e:b4:b4:b4:19:80:90:f4:
32:cf:d9:45:bb:30:05:3f:28:9a:68:02:96:72:9b:fc:e9:df:
10:cd:2f:63:a0:ca:17:25:e8:f9:a6:06:24:e3:d3:1e:e7:00:
8d:68:09:d6:29:6d:da:c7:3f:16:b0:91:ea:c7:53:d7:7d:c3:
0b:b4:53:97
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc11AONwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDA0NGY3NjU5LTExM2UtNGIzYy1iZTlkLTIwMDgyMWJjOWE1
YjAeFw0yMDA3MTUwNDAwMDBaFw0yMjEwMjAwNDAwMDBaMC8xLTArBgNVBAMTJDJh
MDliZDAzLWQ2ZjEtNDY3MC1hZWNkLThkMWU1NWVmZTc1MDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMbOf8qe+UV36dgfGL9bjD6clVryKT/yO0gfPrAR
aLw/ENwAGBCiJ0p7guWPhnjJxzfg/C619SrYYE8YmB19dJt8MNVH4+mndtx6v8dL
UBbU+u02y1Dg7gTOqIib2+nvzF4g1GYILXWn3HhW7t3/iNjp1VTocMCEbCQSQul8
/sJmiFq+0URtMvFQHxZzJkFBeIaqBjxY+mHFB1f+TRslZVXTQH6phtqR3X5GqYTA
JyLLzqdMQtbYiDlpQfpDzysnWwH0LhDS4yj4B7+atlmoS0lYJvv4wU7eHcK+Nife
pENiZeQeZy9TlXUI9AF8wgY9mg7HXrbPC5xSN+/AKI4J2wECAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBStP7E9obkb4xKp4uyyp2yOiL+N9zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2
NTktMTEzZS00YjNjLWJlOWQtMjAwODIxYmM5YTViL2NhODMxOWQ3LTgzNTYtMzAy
ZC04YmY0LWYwNWIwODRlMTk5Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzA0NGY3NjU5LTExM2UtNGIzYy1iZTlk
LTIwMDgyMWJjOWE1Yi8wNDRmNzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4MjFiYzlh
NWIuY3JsMB8GA1UdIwQYMBaAFMO6OXUfTY3vEV/94Rc9fuymgYDOMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2NTktMTEzZS00YjNjLWJlOWQtMjAwODIx
YmM5YTViLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDABhlMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQCfoRVVV1gA5aQCqLOCp1+tC54nYxFKZ2+YH6XaOgWqnce2eb4tphK3pbv7cCEa
R8iZ3fcRuSTl9nnTIjW4/E7KjoOFoj3shCmR1LmgMQsr/80RZw3Lpey14JjjA3s9
Q+DUphP4ZAYdeUS+CGaM6LVR2Km2rzs6bWYswdeAlWab7wzPKmE0KD0uhm26RKBB
Dhj80NhKOIipr3+Mi0dc6gFYyjEs1MFTrKVpI6bCZc429vDBTux7Idfz9OBrFSAO
DrS0tBmAkPQyz9lFuzAFPyiaaAKWcpv86d8QzS9joMoXJej5pgYk49Me5wCNaAnW
KW3axz8WsJHqx1PXfcMLtFOX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:54 2023 by rpki-client on console-fra.rpki-client.org