Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/00218a4f-7073-3ea8-a51c-c7b16443d74c.roa
File: 00218a4f-7073-3ea8-a51c-c7b16443d74c.roa (raw, json)
Hash identifier: AtCxWK5mIF5uDQSSKJQT/ncVW6AA/XJHYc0cBBCJOPc=
Subject key identifier: FC:CF:23:D9:63:AA:94:EE:39:2C:0B:59:E0:1F:F7:86:EA:50:4C:0F
Certificate issuer: /CN=ba9f4db7-00df-4d0a-a8e8-efdd20572e9f
Certificate serial: 010D0C9F4328576D51CC73C042CFC173009C2A3D
Authority key identifier: C4:41:9D:D5:56:F7:E9:28:F1:31:B6:66:7A:29:9E:9B:D8:7B:74:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/00218a4f-7073-3ea8-a51c-c7b16443d74c.roa
Signing time: Mon 29 Jun 2020 15:05:01 +0000
ROA not before: Mon 29 Jun 2020 04:00:00 +0000
ROA not after: Sun 02 Oct 2022 04:00:00 +0000
asID: 35862
IP address blocks: 192.81.63.0/24 maxlen: 24
199.38.120.0/22 maxlen: 24
208.86.160.0/22 maxlen: 24
74.112.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:00:9c:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9f4db7-00df-4d0a-a8e8-efdd20572e9f
Validity
Not Before: Jun 29 04:00:00 2020 GMT
Not After : Oct 2 04:00:00 2022 GMT
Subject: CN=e23f7dd7-5048-4643-9ffd-80c3bf3040b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7f:2e:c1:da:64:88:dc:62:db:65:28:9c:b9:
93:c2:e9:4b:30:de:5d:b4:36:82:be:a2:40:39:2a:
04:18:c6:49:e0:8e:70:71:ec:1b:87:a8:f4:1a:41:
61:b4:92:14:0a:80:ad:0d:c0:b8:82:13:19:ef:9a:
6e:92:d9:d1:1b:1f:65:cc:da:08:43:7f:3c:05:3d:
9e:35:ea:a1:4c:35:4f:9a:07:18:c2:17:42:14:03:
f6:09:4c:83:ea:e1:52:18:b3:78:6a:ee:0a:00:99:
d3:02:6a:1c:77:51:d2:cf:02:0b:3b:e6:af:c9:7f:
9b:4e:09:63:4a:ef:c2:92:5e:f4:5b:e8:22:0e:46:
b4:ff:eb:90:ec:52:ae:12:4a:89:65:43:2d:bd:c1:
0f:87:0e:df:b4:01:0e:3b:f7:17:b3:37:88:44:fe:
18:a5:a5:8c:5a:8a:aa:b0:71:5a:46:dc:02:3d:fd:
05:e4:56:cc:6e:ec:2a:01:3a:5a:20:50:6f:21:91:
2f:41:84:97:83:5b:d3:0c:cd:a3:55:e3:ff:f9:9b:
ba:ca:b8:12:63:8b:17:13:87:f2:6d:45:09:1a:bb:
6e:84:95:ac:4e:aa:f9:b3:11:49:50:bf:c8:f7:e4:
83:3a:1a:25:6d:09:b3:a1:98:ff:bd:5b:b6:72:f3:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:23:D9:63:AA:94:EE:39:2C:0B:59:E0:1F:F7:86:EA:50:4C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/00218a4f-7073-3ea8-a51c-c7b16443d74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.crl
X509v3 Authority Key Identifier:
keyid:C4:41:9D:D5:56:F7:E9:28:F1:31:B6:66:7A:29:9E:9B:D8:7B:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9f4db7-00df-4d0a-a8e8-efdd20572e9f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.136.0/21
192.81.63.0/24
199.38.120.0/22
208.86.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:e0:47:d0:2d:ec:c3:29:8c:fa:04:ee:23:d1:4d:02:53:61:
0a:97:f4:28:0f:2b:9e:73:a6:26:7f:d3:6b:85:81:e1:f0:0a:
d7:5d:32:ff:57:83:0f:1d:11:c2:20:53:3b:2d:b7:db:78:59:
af:83:ea:f1:1a:56:69:c9:47:d0:a7:e5:81:db:26:d4:db:b2:
d2:1f:5d:d1:c1:68:30:fd:5b:8a:ad:4c:32:0b:a3:8a:38:21:
82:87:22:7b:12:32:ec:e9:38:05:56:90:b4:35:a3:d8:c2:90:
5f:62:84:04:fb:12:27:49:80:ee:46:fb:d6:9e:aa:70:9f:f7:
52:c4:2f:67:79:53:62:38:fe:1e:ae:e9:ed:68:71:4d:ad:28:
aa:b1:c5:e9:3a:c6:fc:db:c9:17:5a:6f:19:58:16:8a:47:90:
a4:5a:74:92:51:17:00:32:95:15:e8:8b:a1:c0:72:b4:9c:bb:
03:7c:8c:a8:82:9f:1b:3c:30:87:c1:1e:20:8e:3b:fe:e4:cc:
36:ae:f8:f8:90:33:10:1d:75:66:53:2f:44:f1:f2:8a:35:f2:
77:bc:00:6c:49:17:fd:01:f6:0a:99:a5:18:87:8f:14:d6:2f:
6e:3d:f6:2e:00:f1:13:06:c0:b2:63:df:b8:4c:14:84:17:12:
a4:9d:7b:55
-----BEGIN CERTIFICATE-----
MIIGUTCCBTugAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcwCcKj0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGJhOWY0ZGI3LTAwZGYtNGQwYS1hOGU4LWVmZGQyMDU3MmU5
ZjAeFw0yMDA2MjkwNDAwMDBaFw0yMjEwMDIwNDAwMDBaMC8xLTArBgNVBAMTJGUy
M2Y3ZGQ3LTUwNDgtNDY0My05ZmZkLTgwYzNiZjMwNDBiNTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPh/LsHaZIjcYttlKJy5k8LpSzDeXbQ2gr6iQDkq
BBjGSeCOcHHsG4eo9BpBYbSSFAqArQ3AuIITGe+abpLZ0RsfZczaCEN/PAU9njXq
oUw1T5oHGMIXQhQD9glMg+rhUhizeGruCgCZ0wJqHHdR0s8CCzvmr8l/m04JY0rv
wpJe9FvoIg5GtP/rkOxSrhJKiWVDLb3BD4cO37QBDjv3F7M3iET+GKWljFqKqrBx
WkbcAj39BeRWzG7sKgE6WiBQbyGRL0GEl4Nb0wzNo1Xj//mbusq4EmOLFxOH8m1F
CRq7boSVrE6q+bMRSVC/yPfkgzoaJW0Js6GY/71btnLzZpUCAwEAAaOCA2cwggNj
MB0GA1UdDgQWBBT8zyPZY6qU7jksC1ngH/eG6lBMDzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5ZjRk
YjctMDBkZi00ZDBhLWE4ZTgtZWZkZDIwNTcyZTlmLzAwMjE4YTRmLTcwNzMtM2Vh
OC1hNTFjLWM3YjE2NDQzZDc0Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JhOWY0ZGI3LTAwZGYtNGQwYS1hOGU4
LWVmZGQyMDU3MmU5Zi9iYTlmNGRiNy0wMGRmLTRkMGEtYThlOC1lZmRkMjA1NzJl
OWYuY3JsMB8GA1UdIwQYMBaAFMRBndVW9+ko8TG2ZnopnpvYe3SQMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvYmE5ZjRkYjctMDBkZi00ZDBhLWE4ZTgtZWZkZDIw
NTcyZTlmLmNlcjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEA0pwiAMEAMBR
PwMEAscmeAMEAtBWoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMAsGCSqGSIb3DQEBCwOCAQEAPeBH0C3swymM+gTuI9FNAlNhCpf0KA8rnnOm
Jn/Ta4WB4fAK110y/1eDDx0RwiBTOy2323hZr4Pq8RpWaclH0Kflgdsm1Nuy0h9d
0cFoMP1biq1MMgujijghgociexIy7Ok4BVaQtDWj2MKQX2KEBPsSJ0mA7kb71p6q
cJ/3UsQvZ3lTYjj+Hq7p7WhxTa0oqrHF6TrG/NvJF1pvGVgWikeQpFp0klEXADKV
FeiLocBytJy7A3yMqIKfGzwwh8EeII47/uTMNq74+JAzEB11ZlMvRPHyijXyd7wA
bEkX/QH2CpmlGIePFNYvbj32LgDxEwbAsmPfuEwUhBcSpJ17VQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:15 2023 by rpki-client on console-ams.rpki-client.org