Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a6538b27-e2e3-3e98-94e3-55784f134eb6.roa
File: a6538b27-e2e3-3e98-94e3-55784f134eb6.roa (raw, json)
Hash identifier: Q8fmGfHsxYThxhM7lmZ2Po6dRKAUZCx86+vWZMuoySw=
Subject key identifier: 73:EA:5A:7A:4D:88:4A:76:90:8D:F1:27:E1:BA:D2:A3:FA:06:51:FE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA79E8E7764D1CC2D62B42480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a6538b27-e2e3-3e98-94e3-55784f134eb6.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:8e:77:64:d1:cc:2d:62:b4:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0829e5d1-14b1-424c-9d40-2115e206f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:c2:16:1d:c0:34:ba:ba:8a:42:5e:5a:67:
96:3a:53:47:e0:f5:2a:51:d8:26:66:89:15:eb:6b:
ae:11:74:4c:fa:bd:89:f5:fa:ae:14:7d:b7:4a:ee:
6d:53:12:9e:53:c1:16:02:cf:0e:57:c1:15:e4:57:
7c:af:88:47:f0:a0:cf:a6:aa:eb:52:f1:3c:59:bd:
88:ca:e4:50:18:23:c5:84:fb:31:e2:a0:8f:a3:cc:
3b:17:ac:f3:82:09:c1:9a:1e:0e:48:e7:19:b5:c8:
37:40:68:eb:96:a2:b0:7f:55:87:91:11:e8:e1:6d:
51:2e:6a:2d:57:99:7f:dd:be:41:00:cb:16:a4:ad:
20:a0:57:65:ce:95:58:55:11:56:f8:a8:e5:c7:c4:
ca:65:a0:c4:e7:eb:43:cc:47:cc:e7:70:d2:b0:fb:
69:7a:f6:a1:fb:5b:b9:cb:2c:fa:ab:b2:b4:4b:af:
d7:a1:f2:ac:3e:2d:a0:2e:08:5c:52:71:1d:c2:3a:
c7:30:8b:47:56:96:d4:cd:4f:e1:e6:d3:35:c6:bd:
a8:e7:a5:46:65:56:03:d8:f2:f6:f4:1b:62:ff:98:
ae:02:09:ca:6e:63:c2:9c:5c:7a:7f:67:1e:07:8f:
6e:a9:78:4d:0f:4e:fa:2c:b0:4b:05:b4:3c:6c:27:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:5A:7A:4D:88:4A:76:90:8D:F1:27:E1:BA:D2:A3:FA:06:51:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a6538b27-e2e3-3e98-94e3-55784f134eb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:01:5a:2f:54:ed:94:8c:ab:af:c7:38:dd:67:39:bd:37:e7:
08:be:21:9f:a0:66:02:5e:c9:c5:92:ff:24:67:8f:79:0a:41:
1c:ff:b1:75:67:d6:86:22:6d:89:67:96:06:9c:6b:47:db:50:
64:31:b6:c3:48:b9:8a:53:f2:b9:4c:84:41:72:fe:49:b6:35:
15:21:23:68:a7:dc:c3:3b:2e:28:80:8a:09:91:49:ef:c1:e9:
47:c2:6b:72:23:39:2a:a1:cd:bc:7a:26:49:2a:7f:63:50:f7:
87:87:fc:4a:4a:74:f7:95:cc:a9:1c:c0:9e:89:c0:78:48:95:
1a:20:c8:72:9b:a6:f7:9d:e1:c3:38:15:a3:1f:74:6e:20:dd:
9d:d5:2c:13:4f:5a:fb:5a:9a:0c:9f:ea:40:53:04:2f:03:3c:
42:08:29:4d:af:e7:4e:ac:fa:60:f2:5e:46:74:93:09:e8:c3:
fe:1f:96:b4:90:04:6b:c1:33:a5:58:16:b7:d6:4d:e8:b7:8d:
11:a4:fe:5a:8f:aa:7b:55:21:6d:48:02:c7:d0:d8:f4:12:5d:
31:12:67:3b:64:e4:40:15:2c:78:2e:cf:0c:b0:10:27:1e:be:
cd:74:d8:d0:2c:da:85:67:78:ed:c9:7a:be:24:81:19:9a:b8:
1b:5c:96:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnno53ZNHMLWK0JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDgyOWU1ZDEtMTRiMS00MjRjLTlkNDAtMjExNWUyMDZmNWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVzCFh3ANLq6ikJeWmeWOlNH4PUqUdgmZokV
62uuEXRM+r2J9fquFH23Su5tUxKeU8EWAs8OV8EV5Fd8r4hH8KDPpqrrUvE8Wb2I
yuRQGCPFhPsx4qCPo8w7F6zzggnBmh4OSOcZtcg3QGjrlqKwf1WHkRHo4W1RLmot
V5l/3b5BAMsWpK0goFdlzpVYVRFW+Kjlx8TKZaDE5+tDzEfM53DSsPtpevah+1u5
yyz6q7K0S6/XofKsPi2gLghcUnEdwjrHMItHVpbUzU/h5tM1xr2o56VGZVYD2PL2
9Bti/5iuAgnKbmPCnFx6f2ceB49uqXhND076LLBLBbQ8bCfTZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPqWnpNiEp2kI3xJ+G60qP6BlH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY1MzhiMjctZTJlMy0z
ZTk4LTk0ZTMtNTU3ODRmMTM0ZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEBWi9U7ZSMq6/HON1nOb035wi+IZ+gZgJeycWS/yRnj3kKQRz/sXVn
1oYibYlnlgaca0fbUGQxtsNIuYpT8rlMhEFy/km2NRUhI2in3MM7LiiAigmRSe/B
6UfCa3IjOSqhzbx6Jkkqf2NQ94eH/EpKdPeVzKkcwJ6JwHhIlRogyHKbpved4cM4
FaMfdG4g3Z3VLBNPWvtamgyf6kBTBC8DPEIIKU2v506s+mDyXkZ0kwnow/4flrSQ
BGvBM6VYFrfWTei3jRGk/lqPqntVIW1IAsfQ2PQSXTESZztk5EAVLHguzwywECce
vs102NAs2oVneO3Jer4kgRmauBtclmQ=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:49 2023 by rpki-client on console-fra.rpki-client.org