Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b231a794-009a-358e-afe5-31ff44c90b42.roa
File: b231a794-009a-358e-afe5-31ff44c90b42.roa (raw, json)
Hash identifier: kkB2ZVQmtPRvZc8YpKqoBSsmDfJNnP5UjkXjfLErWF0=
Subject key identifier: 50:E5:A2:E8:D0:63:12:A5:4C:CA:F7:69:8F:7A:6E:86:C5:D3:16:07
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7A4A00CBD0657EEBD675100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b231a794-009a-358e-afe5-31ff44c90b42.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 66.249.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a4:a0:0c:bd:06:57:ee:bd:67:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=58c9aa0b-0a6e-4e14-9576-6cbea6867ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:8c:20:9f:c4:04:9c:78:c0:a9:ff:d2:e4:
f8:c8:bf:3d:6a:6d:cf:05:9f:4b:4a:ef:84:03:43:
af:66:8c:30:8e:3d:45:31:b7:c1:3f:d5:3e:c0:3c:
9a:4d:d8:0d:94:bc:2c:15:45:c2:11:f1:86:6b:e0:
ae:88:4c:3f:c1:9f:9a:29:c5:41:62:68:a3:33:e8:
de:3f:d5:e1:c6:2b:06:5e:8e:25:8a:58:c2:bf:c1:
2f:c0:b7:59:95:02:59:e0:6b:0f:df:ff:e9:9c:09:
28:f4:52:ba:05:98:03:3a:23:8a:05:19:48:5a:54:
bc:af:1f:fb:c9:8b:18:e8:14:7d:a8:10:e0:7d:7a:
c4:52:ab:8d:b2:28:42:9c:5c:93:4e:0f:69:34:45:
9a:ab:9b:3c:36:23:95:e0:46:e6:f3:df:53:de:e8:
91:45:50:83:cb:ee:61:b7:8d:3c:95:1c:1a:89:7a:
47:a5:33:47:79:3d:31:f6:70:a6:e4:7b:72:25:a8:
0b:26:44:64:60:9c:ed:59:ee:d1:7e:98:ec:0a:a1:
9c:53:90:6c:91:50:f3:49:dc:a8:b5:a1:95:a9:0d:
9f:df:15:a3:30:08:66:a7:b3:d0:7b:9c:bd:c6:0b:
44:84:29:82:e9:64:9a:ca:7c:90:e0:1e:24:0a:5a:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:A2:E8:D0:63:12:A5:4C:CA:F7:69:8F:7A:6E:86:C5:D3:16:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b231a794-009a-358e-afe5-31ff44c90b42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:67:ad:32:da:37:63:1c:ae:34:ae:88:60:9c:b3:2d:99:a7:
10:65:db:8f:a1:5b:a8:b3:d2:c1:01:43:36:f8:95:3f:f5:9a:
c1:cc:f8:8e:11:cb:ea:f2:ea:e4:e9:c2:0f:0d:94:47:eb:05:
05:2f:9a:79:f4:18:3e:0c:14:8d:81:2f:b0:9d:cf:b6:4c:04:
f0:3c:d0:4a:d9:73:4c:5c:5a:96:29:e1:8d:01:a7:15:80:26:
4f:30:bd:b1:21:03:28:f3:64:9e:89:ad:f2:fe:b8:fb:08:61:
73:b6:4c:35:25:69:c0:50:48:79:b9:3d:c4:8c:62:2f:1f:37:
20:97:86:f0:4c:de:ca:4b:f0:a0:8b:a6:98:0e:8a:54:49:0f:
72:8f:6f:24:96:a2:3a:a9:16:6f:59:24:23:09:96:d6:b7:99:
be:6d:00:0e:c8:91:b5:e7:67:21:5b:40:a8:c7:f8:f4:36:9c:
1d:d8:ad:8c:a0:ec:f7:74:fb:55:31:a1:31:6a:3c:64:6c:d4:
4f:9e:56:5f:90:f7:58:e0:2f:94:d5:ae:70:e7:47:2c:fd:23:
0f:2f:0e:a1:4d:34:1d:d8:64:30:89:7e:41:19:6b:5d:46:3a:
b8:c4:21:ba:ee:7b:85:2b:22:d3:8a:dd:ec:f1:b1:eb:8e:08:
5a:46:0e:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpKAMvQZX7r1nUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NThjOWFhMGItMGE2ZS00ZTE0LTk1NzYtNmNiZWE2ODY3ZWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspCMIJ/EBJx4wKn/0uT4yL89am3PBZ9LSu+E
A0OvZowwjj1FMbfBP9U+wDyaTdgNlLwsFUXCEfGGa+CuiEw/wZ+aKcVBYmijM+je
P9XhxisGXo4liljCv8EvwLdZlQJZ4GsP3//pnAko9FK6BZgDOiOKBRlIWlS8rx/7
yYsY6BR9qBDgfXrEUquNsihCnFyTTg9pNEWaq5s8NiOV4Ebm899T3uiRRVCDy+5h
t408lRwaiXpHpTNHeT0x9nCm5HtyJagLJkRkYJztWe7RfpjsCqGcU5BskVDzSdyo
taGVqQ2f3xWjMAhmp7PQe5y9xgtEhCmC6WSaynyQ4B4kClrEDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDloujQYxKlTMr3aY96bobF0xYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjIzMWE3OTQtMDA5YS0z
NThlLWFmZTUtMzFmZjQ0YzkwYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQvlAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxnrTLaN2McrjSuiGCcsy2ZpxBl24+hW6iz0sEBQzb4lT/1msHM+I4R
y+ry6uTpwg8NlEfrBQUvmnn0GD4MFI2BL7Cdz7ZMBPA80ErZc0xcWpYp4Y0BpxWA
Jk8wvbEhAyjzZJ6JrfL+uPsIYXO2TDUlacBQSHm5PcSMYi8fNyCXhvBM3spL8KCL
ppgOilRJD3KPbySWojqpFm9ZJCMJlta3mb5tAA7IkbXnZyFbQKjH+PQ2nB3YrYyg
7Pd0+1UxoTFqPGRs1E+eVl+Q91jgL5TVrnDnRyz9Iw8vDqFNNB3YZDCJfkEZa11G
OrjEIbrue4UrItOK3ezxseuOCFpGDnE=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org