Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28af1a25-3863-3481-b31b-f40bbb7bd504.roa
File: 28af1a25-3863-3481-b31b-f40bbb7bd504.roa (raw, json)
Hash identifier: KEGN1IGR0VI25F5HLcjvNpvBQv5yEshWjRfF4PlW/Ow=
Subject key identifier: B7:BE:7A:DF:8D:AD:03:03:45:E0:54:60:09:0E:18:F0:54:1E:D5:60
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7A83AA23E970B052B5B0800
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28af1a25-3863-3481-b31b-f40bbb7bd504.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:3a:a2:3e:97:0b:05:2b:5b:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1b2fdcf3-29b6-48e8-9e71-9ac2ca2fb5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:27:7a:55:c1:95:2b:f0:f5:0d:91:cb:eb:
53:78:20:5d:6b:aa:8c:6c:d7:ee:e6:d7:13:60:76:
67:5d:0c:2c:6a:1c:7f:95:b4:ca:56:d5:ed:7b:1f:
c7:d2:e5:3b:7c:07:d5:0d:be:cb:7a:c5:2c:10:8d:
dd:76:12:3d:d7:0f:92:04:a9:71:1a:a7:7b:90:07:
95:66:c3:ea:ea:98:79:92:5b:a3:9a:aa:05:8f:b6:
02:1a:ac:d1:05:c4:e1:4e:e7:8f:7d:69:58:5b:75:
27:94:0e:d0:58:59:a5:fe:16:3a:8d:7e:44:6b:80:
df:7e:6b:be:c0:dc:bc:a3:6f:ae:2e:92:f6:43:49:
77:58:e2:7b:34:30:ee:95:43:62:39:28:cc:ea:ad:
e3:d6:dc:a1:26:f4:89:2a:6e:b0:5a:b4:20:94:e4:
87:94:10:0e:de:f4:d5:18:f2:97:64:c1:9a:72:1d:
b0:e2:c7:2a:0e:52:57:bc:fd:8b:a6:68:b0:d4:c3:
ea:63:bd:29:4e:f7:45:62:3f:d4:00:6b:8a:ff:fc:
c3:ca:ef:22:ad:2c:ac:4b:19:a0:ad:b6:a4:17:51:
eb:d2:ed:fd:98:af:b3:0c:82:72:6e:bc:d1:4e:2b:
62:a0:43:4e:f7:f9:3c:81:8e:4d:36:dc:dc:00:f0:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:7A:DF:8D:AD:03:03:45:E0:54:60:09:0E:18:F0:54:1E:D5:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28af1a25-3863-3481-b31b-f40bbb7bd504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:cf:57:55:ed:42:92:52:74:3b:8a:48:d6:ae:f1:f6:34:12:
60:a5:f6:c6:96:ff:81:b6:f0:87:19:f4:8d:81:9a:f7:f2:e1:
ae:1f:25:6c:68:a1:7d:99:a4:2c:13:fb:44:3a:59:92:0e:ba:
8d:82:42:14:db:85:e6:ed:22:15:42:17:52:ef:71:31:fb:b7:
ed:c7:35:3b:ed:af:63:fa:22:63:70:e7:bb:27:be:7b:c4:fb:
30:44:58:dd:83:69:b2:84:a4:48:84:cf:1f:94:c2:ff:a3:b6:
35:ee:e2:26:03:5e:75:1b:d9:e8:4c:38:5f:7d:03:b2:57:4e:
cb:fa:95:ad:7c:43:8b:a0:4c:e7:cc:1c:3b:c1:74:87:a8:6c:
f4:f6:91:30:c8:99:45:34:96:db:30:04:dd:e0:80:ea:5b:ce:
b3:3c:d5:97:d6:3e:ae:c1:7a:ef:f0:b6:f7:73:e9:25:35:17:
d6:1e:67:06:3e:96:55:a0:09:97:60:af:89:60:88:ca:88:35:
8d:cc:84:2b:dc:c9:d8:f8:a0:bf:ee:30:04:f4:63:d2:32:40:
6b:25:cb:a7:85:f0:ea:c8:10:19:92:85:f1:ff:a6:0d:43:95:
0d:c9:70:b9:8f:53:ea:de:4c:f8:b7:b8:83:ee:0a:1a:7e:32:
e4:ba:ad:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqDqiPpcLBStbCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWIyZmRjZjMtMjliNi00OGU4LTllNzEtOWFjMmNhMmZiNWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlwnelXBlSvw9Q2Ry+tTeCBda6qMbNfu5tcT
YHZnXQwsahx/lbTKVtXtex/H0uU7fAfVDb7LesUsEI3ddhI91w+SBKlxGqd7kAeV
ZsPq6ph5klujmqoFj7YCGqzRBcThTuePfWlYW3UnlA7QWFml/hY6jX5Ea4Dffmu+
wNy8o2+uLpL2Q0l3WOJ7NDDulUNiOSjM6q3j1tyhJvSJKm6wWrQglOSHlBAO3vTV
GPKXZMGach2w4scqDlJXvP2Lpmiw1MPqY70pTvdFYj/UAGuK//zDyu8irSysSxmg
rbakF1Hr0u39mK+zDIJybrzRTitioENO9/k8gY5NNtzcAPBQkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLe+et+NrQMDReBUYAkOGPBUHtVgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMjhhZjFhMjUtMzg2My0z
NDgxLWIzMWItZjQwYmJiN2JkNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7PV1XtQpJSdDuKSNau8fY0EmCl9saW/4G28IcZ9I2Bmvfy4a4fJWxo
oX2ZpCwT+0Q6WZIOuo2CQhTbhebtIhVCF1LvcTH7t+3HNTvtr2P6ImNw57snvnvE
+zBEWN2DabKEpEiEzx+Uwv+jtjXu4iYDXnUb2ehMOF99A7JXTsv6la18Q4ugTOfM
HDvBdIeobPT2kTDImUU0ltswBN3ggOpbzrM81ZfWPq7Beu/wtvdz6SU1F9YeZwY+
llWgCZdgr4lgiMqINY3MhCvcydj4oL/uMAT0Y9IyQGsly6eF8OrIEBmShfH/pg1D
lQ3JcLmPU+reTPi3uIPuChp+MuS6rQo=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:15 2023 by rpki-client on console-ams.rpki-client.org