Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa
File: c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa (raw, json)
Hash identifier: BEIzEVSKqA46O5fFDoemKzX5d+1wpdkIYz479UAtxIA=
Subject key identifier: DC:A6:01:3B:EB:78:C4:0A:4D:22:24:C9:08:E1:3E:2D:8D:48:CE:C1
Certificate issuer: /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial: 010D0C9F4328576D51CC73C042CFC173499D0853
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa
Signing time: Mon 13 Jul 2020 19:18:14 +0000
ROA not before: Wed 08 Jul 2020 04:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 10958
IP address blocks: 147.161.4.0/22 maxlen: 32
162.216.108.0/22 maxlen: 32
162.216.208.0/21 maxlen: 32
198.62.181.0/24 maxlen: 32
208.68.56.0/22 maxlen: 32
208.80.144.0/21 maxlen: 32
208.91.176.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:9d:08:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
Validity
Not Before: Jul 8 04:00:00 2020 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=6e6bd2bf-5fd7-44aa-ba7a-7dd9e170914f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:4e:8f:c9:ba:ac:07:c2:6f:5c:0e:e8:84:
6f:df:4c:90:1b:ca:80:c5:6f:a8:21:28:4d:e1:ce:
df:a0:46:f2:32:3d:f0:30:11:8b:f2:09:a7:09:49:
a8:16:a1:c8:fe:09:e7:f1:ff:9c:63:34:09:19:f1:
5a:76:dd:34:b7:a1:50:81:a4:92:28:4b:a3:18:0f:
42:fd:67:bb:5f:31:e1:db:6d:ba:e9:f9:53:d3:e3:
26:b4:17:77:ca:22:c0:ad:82:54:e3:b1:e7:c8:c2:
96:32:72:fd:a1:46:5f:b2:ac:e3:ac:1d:01:28:f1:
b5:eb:ab:98:cd:f3:8c:ce:c3:1e:65:ec:48:48:de:
8b:88:d1:55:ee:b1:9c:1a:67:a5:d8:6a:de:02:3e:
a0:db:e8:d0:a8:04:32:a5:cb:0e:32:e4:38:f3:06:
6d:87:fb:59:b1:81:ab:1e:9f:44:10:7f:f9:b0:ef:
d1:a5:4b:08:ee:05:85:0d:8e:ba:3c:d3:7d:fb:bb:
e6:c0:5b:a9:15:8e:c5:38:a0:c2:47:36:6a:a0:8d:
e0:8a:8e:26:6d:3e:79:9c:e0:15:f7:68:75:c5:f4:
40:de:3a:64:41:56:ba:7d:a8:2d:5e:73:ff:f1:f3:
8b:80:36:a5:ed:6a:ad:8d:ea:e0:9d:76:eb:94:e1:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:01:3B:EB:78:C4:0A:4D:22:24:C9:08:E1:3E:2D:8D:48:CE:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/c0394cac-48d1-30a7-b1ff-3928bc4988ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
X509v3 Authority Key Identifier:
keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
147.161.4.0/22
162.216.108.0/22
162.216.208.0/21
198.62.181.0/24
208.68.56.0/22
208.80.144.0/21
208.91.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:43:ff:2b:e4:f8:c9:a4:e4:5a:a1:24:69:f5:4a:74:d4:cb:
fe:cf:09:c5:15:41:b3:d6:71:ec:a5:d5:7a:a4:13:e8:f9:45:
ab:c5:58:15:e8:12:b3:a3:51:d6:9f:0d:b7:22:3a:2b:34:c1:
74:49:dc:3c:ed:d3:d7:a3:51:53:d4:f2:d8:f5:de:df:b7:80:
0e:97:3c:d4:9f:5d:f0:e0:6e:b5:13:fb:94:e6:e4:a4:fb:0b:
7d:4c:e4:ee:f6:63:7f:fe:6c:51:de:38:62:80:1b:b9:3c:e4:
e9:77:27:3f:5f:4f:0e:b9:90:d3:54:03:d8:9e:82:06:03:c1:
be:84:42:de:26:bb:17:b7:d1:31:49:22:00:2b:d2:63:bb:e0:
31:fa:85:a9:a2:73:73:d2:b2:9f:75:99:12:6a:c4:20:6b:06:
18:00:57:c4:b9:20:24:4e:70:3f:1a:0a:d4:79:ca:ae:6d:02:
8e:8f:44:7b:72:5f:0b:73:62:9f:fb:aa:12:e5:5e:ce:42:3f:
b9:36:5e:7d:fb:5e:d1:8b:85:54:ff:87:c1:e1:7b:a4:e2:27:
90:72:74:65:77:5c:ef:d6:c4:05:4f:d0:f0:e3:23:fc:44:2d:
66:4e:14:0d:b6:17:e9:87:26:89:e0:3f:cc:46:7a:0d:79:3a:
f0:92:0a:e5
-----BEGIN CERTIFICATE-----
MIIGYzCCBU2gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc0mdCFMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDMzMDk3ZTM2LWNlZjMtNDE4Yi1hODk1LWNhY2I3OTdkMWVl
YjAeFw0yMDA3MDgwNDAwMDBaFw0yMjEwMTYwNDAwMDBaMC8xLTArBgNVBAMTJDZl
NmJkMmJmLTVmZDctNDRhYS1iYTdhLTdkZDllMTcwOTE0ZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANCBTo/JuqwHwm9cDuiEb99MkBvKgMVvqCEoTeHO
36BG8jI98DARi/IJpwlJqBahyP4J5/H/nGM0CRnxWnbdNLehUIGkkihLoxgPQv1n
u18x4dttuun5U9PjJrQXd8oiwK2CVOOx58jCljJy/aFGX7Ks46wdASjxteurmM3z
jM7DHmXsSEjei4jRVe6xnBpnpdhq3gI+oNvo0KgEMqXLDjLkOPMGbYf7WbGBqx6f
RBB/+bDv0aVLCO4FhQ2OujzTffu75sBbqRWOxTigwkc2aqCN4IqOJm0+eZzgFfdo
dcX0QN46ZEFWun2oLV5z//Hzi4A2pe1qrY3q4J1265ThqZUCAwEAAaOCA3kwggN1
MB0GA1UdDgQWBBTcpgE763jECk0iJMkI4T4tjUjOwTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzMwOTdl
MzYtY2VmMy00MThiLWE4OTUtY2FjYjc5N2QxZWViL2MwMzk0Y2FjLTQ4ZDEtMzBh
Ny1iMWZmLTM5MjhiYzQ5ODhhYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzMzMDk3ZTM2LWNlZjMtNDE4Yi1hODk1
LWNhY2I3OTdkMWVlYi8zMzA5N2UzNi1jZWYzLTQxOGItYTg5NS1jYWNiNzk3ZDFl
ZWIuY3JsMB8GA1UdIwQYMBaAFPPSVit2/zs2cQtFsMeZUxaGp4/yMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvMzMwOTdlMzYtY2VmMy00MThiLWE4OTUtY2FjYjc5
N2QxZWViLmNlcjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEApOhBAMEAqLY
bAMEA6LY0AMEAMY+tQMEAtBEOAMEA9BQkAMEA9BbsDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOCAQEAYUP/K+T4yaTk
WqEkafVKdNTL/s8JxRVBs9Zx7KXVeqQT6PlFq8VYFegSs6NR1p8NtyI6KzTBdEnc
PO3T16NRU9Ty2PXe37eADpc81J9d8OButRP7lObkpPsLfUzk7vZjf/5sUd44YoAb
uTzk6XcnP19PDrmQ01QD2J6CBgPBvoRC3ia7F7fRMUkiACvSY7vgMfqFqaJzc9Ky
n3WZEmrEIGsGGABXxLkgJE5wPxoK1HnKrm0Cjo9Ee3JfC3Nin/uqEuVezkI/uTZe
ffte0YuFVP+HweF7pOInkHJ0ZXdc79bEBU/Q8OMj/EQtZk4UDbYX6YcmieA/zEZ6
DXk68JIK5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:59 2023 by rpki-client on console-fra.rpki-client.org