Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14beabd8-2d79-3541-9fae-8a636686a16e.roa
File: 14beabd8-2d79-3541-9fae-8a636686a16e.roa (raw, json)
Hash identifier: VoUuE9hgdY6OYyzMiTV7V8v8c94/v4z0O1xqjf3iRvY=
Subject key identifier: 6C:FB:23:0D:78:DC:AA:CF:DA:EB:57:03:EF:D7:A9:DA:BA:54:86:27
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79359BC081AD600E0FDC7520
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14beabd8-2d79-3541-9fae-8a636686a16e.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 18865
IP address blocks: 216.218.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:9b:c0:81:ad:60:0e:0f:dc:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=bf91a3b9-1b16-49be-a029-e541eda0e264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:50:6f:13:c7:23:b3:d1:ad:5d:06:dc:ee:
69:ba:75:38:e9:c2:a9:e0:30:bb:6b:a2:b7:c3:e8:
cc:26:eb:b7:05:05:bf:23:ae:bb:25:d8:ac:71:e5:
3f:a8:f4:bd:be:0c:46:5d:02:1d:a0:1a:4c:97:90:
9c:d1:f6:55:89:63:31:86:f5:fc:cc:65:2e:6e:35:
b9:e6:1a:77:cb:4e:70:e0:ad:e2:e8:6a:a6:ba:fe:
c4:26:27:dc:38:39:33:6d:8c:90:d5:16:36:84:ee:
b0:d2:86:46:62:fa:29:e9:85:35:01:e0:2f:42:28:
e4:93:ca:ca:99:22:fe:04:57:5f:13:8e:52:a8:56:
a8:9d:b6:6f:e7:00:80:bf:0f:8d:eb:2d:95:60:c9:
fb:99:4c:5b:20:7b:96:41:36:23:2d:fe:24:73:91:
77:50:c4:f2:76:fa:a9:c8:9e:17:35:67:b7:99:15:
9a:c7:c3:fb:54:32:ef:a9:98:7e:91:a1:2f:fd:03:
e5:fb:51:f4:22:b0:ab:8b:ef:a3:76:c9:c6:70:bc:
32:0c:92:f9:22:b2:07:14:82:73:9d:79:39:64:32:
95:ae:5d:ab:07:81:11:66:85:42:b3:dd:47:d2:61:
cb:f6:69:e8:ec:5b:dc:63:cf:99:90:da:7c:c7:f7:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:23:0D:78:DC:AA:CF:DA:EB:57:03:EF:D7:A9:DA:BA:54:86:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/14beabd8-2d79-3541-9fae-8a636686a16e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:2a:5f:44:53:0d:8f:25:48:34:b3:be:7d:9c:6b:d2:4b:59:
5e:57:e3:49:83:b1:9f:e3:e7:f2:e6:66:29:da:96:0b:12:cd:
67:8e:51:be:88:91:81:88:90:7e:a4:3e:2a:69:b3:16:9c:46:
a7:6f:52:c6:35:f4:0f:d1:83:bb:ec:ea:a8:58:70:c9:e6:b1:
82:ca:a5:d8:0b:d8:0f:4d:ef:25:d2:10:17:9b:56:fb:bf:4d:
20:62:04:ad:bb:83:4e:25:cc:98:c9:fb:f3:8f:28:bb:c2:1c:
d3:e2:37:9f:46:90:89:68:9f:78:de:3d:42:88:72:99:72:99:
3b:40:9e:5a:3b:c1:44:ea:c6:48:05:ea:85:e5:4a:5a:5f:f0:
5b:f2:21:dd:c3:f5:53:61:b5:66:a6:46:d1:99:63:7f:e1:75:
24:1d:3e:8b:d5:4f:b2:e5:b1:67:f3:38:14:92:e9:84:b7:a1:
dc:b7:10:52:3f:0f:b1:29:7a:e6:71:2e:9c:53:8c:98:d6:57:
7b:1e:20:b7:d4:4a:e9:2d:33:8e:eb:a2:f9:49:e8:5c:7a:b4:
bb:90:f5:c7:49:cd:98:6a:4d:ac:c3:48:88:ef:f0:79:a0:ea:
6e:2d:5a:6b:41:ec:21:0e:e5:69:0b:e7:f8:88:e1:18:a5:2e:
ca:56:51:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15NZvAga1gDg/cdSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
YmY5MWEzYjktMWIxNi00OWJlLWEwMjktZTU0MWVkYTBlMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj5QbxPHI7PRrV0G3O5punU46cKp4DC7a6K3
w+jMJuu3BQW/I667JdisceU/qPS9vgxGXQIdoBpMl5Cc0fZViWMxhvX8zGUubjW5
5hp3y05w4K3i6Gqmuv7EJifcODkzbYyQ1RY2hO6w0oZGYvop6YU1AeAvQijkk8rK
mSL+BFdfE45SqFaonbZv5wCAvw+N6y2VYMn7mUxbIHuWQTYjLf4kc5F3UMTydvqp
yJ4XNWe3mRWax8P7VDLvqZh+kaEv/QPl+1H0IrCri++jdsnGcLwyDJL5IrIHFIJz
nXk5ZDKVrl2rB4ERZoVCs91H0mHL9mno7FvcY8+ZkNp8x/cH8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGz7Iw143KrP2utXA+/Xqdq6VIYnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTRiZWFiZDgtMmQ3OS0z
NTQxLTlmYWUtOGE2MzY2ODZhMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NrXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUqX0RTDY8lSDSzvn2ca9JLWV5X40mDsZ/j5/LmZinalgsSzWeOUb6I
kYGIkH6kPippsxacRqdvUsY19A/Rg7vs6qhYcMnmsYLKpdgL2A9N7yXSEBebVvu/
TSBiBK27g04lzJjJ+/OPKLvCHNPiN59GkIlon3jePUKIcplymTtAnlo7wUTqxkgF
6oXlSlpf8FvyId3D9VNhtWamRtGZY3/hdSQdPovVT7LlsWfzOBSS6YS3ody3EFI/
D7EpeuZxLpxTjJjWV3seILfUSuktM47rovlJ6Fx6tLuQ9cdJzZhqTazDSIjv8Hmg
6m4tWmtB7CEO5WkL5/iI4RilLspWUfo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-ams.rpki-client.org