Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5029cc70-e537-3efa-9f1e-8180c87bbe82.roa
File: 5029cc70-e537-3efa-9f1e-8180c87bbe82.roa (raw, json)
Hash identifier: bbf3oV0//9aj9kWIZQb/C848+4fqFyiNthBuAoaESm8=
Subject key identifier: 36:D9:A4:8E:8B:BB:E5:F3:C0:9B:EC:82:A1:81:36:3E:68:1B:58:42
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6D0889FDB7D96B34E8F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5029cc70-e537-3efa-9f1e-8180c87bbe82.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 46278
IP address blocks: 65.49.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:d0:88:9f:db:7d:96:b3:4e:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=088b1197-5598-4b19-86cc-c8f26a8f4145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:2e:fd:04:fd:03:ee:c9:20:87:47:42:90:
54:ce:62:af:7f:08:22:51:b0:ff:72:20:04:18:21:
6a:e1:74:af:9f:98:75:35:a4:71:fe:2f:31:40:f1:
c0:9c:c8:b5:63:e5:d7:59:52:b6:77:66:95:77:0c:
56:4b:25:1e:e1:db:02:f9:44:e6:b2:9d:e9:b1:24:
07:e0:5a:e2:c8:88:99:04:af:b1:00:7b:1c:dd:6e:
e9:f1:e5:15:a6:52:4b:5b:73:dd:56:5c:1f:08:8b:
30:b0:ae:17:89:98:9a:3b:d6:7f:f8:50:e8:61:cb:
d9:0a:d6:2b:fa:ac:04:ff:f7:d4:c5:ee:33:84:0e:
b5:8e:b2:76:eb:4d:6f:41:9a:16:cf:2b:b6:9c:00:
26:8d:18:5d:d9:2b:93:79:fd:b2:a4:4a:e6:61:5a:
79:b1:8c:ac:17:4d:8b:df:cd:c9:ab:75:d6:c1:20:
00:88:47:32:0b:8a:2e:f5:5b:10:04:ae:a6:13:d3:
2c:7e:92:d7:31:47:0a:2d:10:b5:34:b4:96:8b:e1:
2d:2f:ac:a4:42:5e:e4:1b:17:14:b7:0a:50:d6:7e:
93:1e:5c:26:e8:2d:ca:02:31:6b:fd:eb:cb:be:50:
97:5a:21:62:c5:de:b2:ee:9d:3b:91:cc:4c:59:23:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D9:A4:8E:8B:BB:E5:F3:C0:9B:EC:82:A1:81:36:3E:68:1B:58:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5029cc70-e537-3efa-9f1e-8180c87bbe82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:90:6f:6a:31:af:e2:cf:05:46:ac:21:c2:46:10:80:19:9d:
d8:6f:6c:d4:f0:15:55:a5:05:80:d0:c4:fe:99:2d:41:ee:6e:
33:21:84:82:22:ea:39:24:f5:db:c0:d4:88:81:e0:b1:2a:73:
a2:df:89:34:38:2c:a8:4f:a4:a4:cc:2a:fb:fb:20:89:2c:05:
a7:55:66:79:f8:90:c6:64:59:ff:e0:db:00:74:4c:40:af:f1:
d9:7e:7e:aa:22:b1:7a:ce:32:fe:98:62:0d:2c:f9:30:cd:ef:
a4:c0:6b:c4:92:4c:42:65:cd:6e:69:d0:f2:46:15:ba:cc:ec:
7e:c5:72:14:21:bf:e0:5a:9e:5c:97:3b:77:13:02:67:5e:d9:
22:b6:76:68:23:aa:45:51:ff:71:ca:45:0a:15:ef:ab:03:d9:
74:4d:8f:a3:05:fd:09:89:1c:42:93:a4:33:95:91:96:86:11:
bf:46:05:41:d5:f5:11:58:c5:73:30:04:4f:a5:94:23:1c:cc:
5e:7c:bf:dc:19:7b:c7:1a:22:48:ec:c8:33:3a:32:2e:12:55:
7a:df:76:c8:a1:05:ba:e3:cd:1b:8f:fc:db:fc:e8:45:b6:b7:
16:cd:2d:6a:21:87:a8:31:1d:3c:50:9d:1f:dc:47:ee:4b:93:
af:7a:6b:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9ptCIn9t9lrNOj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MDg4YjExOTctNTU5OC00YjE5LTg2Y2MtYzhmMjZhOGY0MTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG8u/QT9A+7JIIdHQpBUzmKvfwgiUbD/ciAE
GCFq4XSvn5h1NaRx/i8xQPHAnMi1Y+XXWVK2d2aVdwxWSyUe4dsC+UTmsp3psSQH
4FriyIiZBK+xAHsc3W7p8eUVplJLW3PdVlwfCIswsK4XiZiaO9Z/+FDoYcvZCtYr
+qwE//fUxe4zhA61jrJ2601vQZoWzyu2nAAmjRhd2SuTef2ypErmYVp5sYysF02L
383Jq3XWwSAAiEcyC4ou9VsQBK6mE9MsfpLXMUcKLRC1NLSWi+EtL6ykQl7kGxcU
twpQ1n6THlwm6C3KAjFr/evLvlCXWiFixd6y7p07kcxMWSM7xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbZpI6Lu+XzwJvsgqGBNj5oG1hCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTAyOWNjNzAtZTUzNy0z
ZWZhLTlmMWUtODE4MGM4N2JiZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTELMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSQb2oxr+LPBUasIcJGEIAZndhvbNTwFVWlBYDQxP6ZLUHubjMhhIIi
6jkk9dvA1IiB4LEqc6LfiTQ4LKhPpKTMKvv7IIksBadVZnn4kMZkWf/g2wB0TECv
8dl+fqoisXrOMv6YYg0s+TDN76TAa8SSTEJlzW5p0PJGFbrM7H7FchQhv+BanlyX
O3cTAmde2SK2dmgjqkVR/3HKRQoV76sD2XRNj6MF/QmJHEKTpDOVkZaGEb9GBUHV
9RFYxXMwBE+llCMczF58v9wZe8caIkjsyDM6Mi4SVXrfdsihBbrjzRuP/Nv86EW2
txbNLWohh6gxHTxQnR/cR+5Lk696a8E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:42 2023 by rpki-client on console-fra.rpki-client.org