Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ade0785-48a0-3b62-9a90-3420ec2b4a4f.roa
File: 0ade0785-48a0-3b62-9a90-3420ec2b4a4f.roa (raw, json)
Hash identifier: CXEvTkH4yZ+lmQ5YM0E2ef7ty1SwdOyMoGql9oR8Y3U=
Subject key identifier: FF:B0:DC:20:AD:2F:CF:A6:25:F9:8F:D6:C0:A7:98:EA:AC:47:08:03
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A611657418024A92321500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ade0785-48a0-3b62-9a90-3420ec2b4a4f.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:11:65:74:18:02:4a:92:32:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0a01968d-1252-4eac-8aac-05da2560dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:f4:a5:5e:1c:69:b3:70:bc:1b:49:61:d9:
84:3d:e7:40:b7:95:9d:7b:05:d2:ef:db:ae:da:7a:
98:85:42:d9:04:87:2a:27:09:bf:50:c1:b5:19:c6:
fd:30:f1:f8:50:bc:9e:8f:e3:7a:51:dd:c7:61:4f:
06:f5:e0:bc:b7:f8:a4:c3:f3:3a:3e:d2:24:3a:10:
a4:db:29:5e:f3:d9:7d:9a:1c:05:c4:c5:8e:ab:53:
03:31:0b:b6:b1:33:20:b7:54:2f:8c:f0:e6:9a:7b:
3e:b2:8d:9b:ab:ba:1f:72:2d:46:da:69:00:9c:a6:
dd:ed:e6:5e:28:e5:80:0d:79:a7:fb:07:c2:2b:c0:
54:44:cf:3c:e3:6d:8a:00:4b:e0:d0:a3:55:bc:62:
3c:d6:0a:db:b9:d2:90:45:41:9c:c6:88:b7:7c:33:
e4:4d:0d:c1:8a:51:58:ca:9d:9f:a8:94:d9:97:89:
f7:e5:c7:a2:a0:5a:92:93:a0:94:b3:5f:13:bf:92:
8e:0d:1b:24:a0:fb:b6:8e:70:52:b3:5b:11:a7:6e:
ed:bc:8e:e2:b7:4a:ce:11:ab:d8:35:48:cd:0e:b1:
c1:74:20:ae:83:b1:e3:6e:c8:fe:6b:f6:2c:03:a1:
c0:d9:7f:73:b2:06:51:c7:7d:e3:1f:93:ef:be:e5:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:DC:20:AD:2F:CF:A6:25:F9:8F:D6:C0:A7:98:EA:AC:47:08:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ade0785-48a0-3b62-9a90-3420ec2b4a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:4a:d4:37:3f:51:cf:c2:97:62:68:23:a3:ac:3a:de:23:b7:
57:00:58:99:54:be:60:4d:26:90:44:3c:e3:dd:f7:18:f4:c0:
f0:73:c4:1b:82:16:32:2c:19:02:d3:a7:9e:e7:8a:bb:ee:38:
40:17:06:32:5d:1c:30:da:d6:df:db:a0:b3:4c:31:a1:0d:20:
90:55:ab:ad:72:73:08:e6:12:d2:12:3a:2a:bf:06:24:07:5d:
30:7c:62:d8:ce:69:14:d7:94:83:9c:c6:7d:df:f6:7a:26:3b:
db:db:95:ad:ed:56:9f:ce:d7:c9:a5:c8:49:b5:2b:33:74:5b:
15:76:fd:66:ec:e3:e3:e2:68:98:b8:f2:5a:0f:da:b4:90:36:
7e:44:62:e0:2b:3f:08:66:b7:d1:1f:56:fe:1d:51:9c:71:6e:
44:58:e5:ae:26:61:8a:b7:93:c6:b6:62:81:53:9b:27:7c:63:
de:f8:78:c5:5e:d3:1d:c3:e9:c6:89:a0:dc:49:88:90:8d:d2:
75:83:95:9d:4a:5f:5d:fb:a3:33:e2:3f:1a:98:a1:5e:7c:32:
f9:d4:dd:53:0c:cd:9e:10:6d:38:ca:2c:85:55:15:f2:78:7e:
6e:3e:c2:6c:91:d3:14:bc:72:b2:ee:d7:8c:d1:e9:92:a8:c4:
30:72:b1:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnphFldBgCSpIyFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MGEwMTk2OGQtMTI1Mi00ZWFjLThhYWMtMDVkYTI1NjBkYWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrX0pV4cabNwvBtJYdmEPedAt5WdewXS79uu
2nqYhULZBIcqJwm/UMG1Gcb9MPH4ULyej+N6Ud3HYU8G9eC8t/ikw/M6PtIkOhCk
2yle89l9mhwFxMWOq1MDMQu2sTMgt1QvjPDmmns+so2bq7ofci1G2mkAnKbd7eZe
KOWADXmn+wfCK8BURM88422KAEvg0KNVvGI81grbudKQRUGcxoi3fDPkTQ3BilFY
yp2fqJTZl4n35ceioFqSk6CUs18Tv5KODRskoPu2jnBSs1sRp27tvI7it0rOEavY
NUjNDrHBdCCug7Hjbsj+a/YsA6HA2X9zsgZRx33jH5PvvuVrOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+w3CCtL8+mJfmP1sCnmOqsRwgDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFkZTA3ODUtNDhhMC0z
YjYyLTlhOTAtMzQyMGVjMmI0YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJK1Dc/Uc/Cl2JoI6OsOt4jt1cAWJlUvmBNJpBEPOPd9xj0wPBzxBuC
FjIsGQLTp57nirvuOEAXBjJdHDDa1t/boLNMMaENIJBVq61ycwjmEtISOiq/BiQH
XTB8YtjOaRTXlIOcxn3f9nomO9vbla3tVp/O18mlyEm1KzN0WxV2/Wbs4+PiaJi4
8loP2rSQNn5EYuArPwhmt9EfVv4dUZxxbkRY5a4mYYq3k8a2YoFTmyd8Y974eMVe
0x3D6caJoNxJiJCN0nWDlZ1KX137ozPiPxqYoV58MvnU3VMMzZ4QbTjKLIVVFfJ4
fm4+wmyR0xS8crLu14zR6ZKoxDBysds=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org