Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/593ae2fb-8232-3e11-95a8-ed57ee89080a.roa
File: 593ae2fb-8232-3e11-95a8-ed57ee89080a.roa (raw, json)
Hash identifier: IuDCF7hQ/dkSqf26Wg55ZY2aq2mJ7CcuAvFagD0nfbw=
Subject key identifier: D6:6E:1F:46:D7:6C:5C:5E:E4:60:82:BD:97:36:FF:73:74:F4:26:6B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858429EE80A491486B35C9415E040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/593ae2fb-8232-3e11-95a8-ed57ee89080a.roa
Signing time: Thu 20 Jul 2023 12:00:00 +0000
ROA not before: Thu 20 Jul 2023 12:00:00 +0000
ROA not after: Sun 21 Jan 2024 05:00:00 +0000
asID: 53268
IP address blocks: 65.49.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9e:e8:0a:49:14:86:b3:5c:94:15:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 20 12:00:00 2023 GMT
Not After : Jan 21 05:00:00 2024 GMT
Subject: CN=54a11771-66f9-4d5d-9219-6d0e6868ef71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:22:c3:ec:df:e1:35:a9:64:09:f6:57:49:
4a:b9:2e:c7:a3:91:6d:28:08:8a:ca:b6:a3:4f:a5:
24:ad:69:96:dd:54:e7:fb:89:4a:11:07:fd:2a:42:
0f:c7:5a:5f:9c:29:1d:56:17:54:37:62:07:23:49:
27:6e:9c:ed:c1:5d:2f:8d:dd:4c:ed:6a:bc:0d:2e:
cb:94:3b:36:d5:05:f9:8b:de:34:c7:2f:91:0b:de:
59:8e:e6:18:55:9f:c3:53:56:9b:50:18:f6:85:96:
f6:84:09:d8:05:ea:e1:cc:b3:e1:c1:66:1c:88:65:
0e:5f:4a:6c:ec:77:42:90:80:32:a1:c6:39:49:73:
df:ab:6f:3c:90:92:4f:f6:33:69:53:c0:c0:c2:b7:
76:be:d2:fe:79:3a:69:d6:86:8e:2a:48:3b:82:6d:
cb:67:90:b2:01:5c:34:be:5b:bb:af:b9:dc:47:dd:
9e:da:5e:70:04:54:a2:70:e4:92:58:85:a9:2c:06:
69:55:a7:11:e7:5c:03:66:9b:5d:e1:b8:cc:84:29:
86:65:06:f1:57:62:35:82:29:ea:05:16:1e:1c:3e:
bd:81:90:0a:fd:9e:ad:ab:f8:ca:a7:a8:d8:91:f8:
cd:fe:51:23:26:77:4e:fd:bb:43:d6:44:3a:3a:2a:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:1F:46:D7:6C:5C:5E:E4:60:82:BD:97:36:FF:73:74:F4:26:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/593ae2fb-8232-3e11-95a8-ed57ee89080a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:88:f8:66:90:3a:d6:e1:2d:ab:9d:b1:89:57:51:e0:5f:5e:
84:67:3e:99:b0:87:ee:ba:d2:32:6a:1f:02:8a:92:84:d4:3f:
c8:60:f0:77:7b:b3:dc:73:7e:c7:e0:f8:ad:5d:a3:53:54:34:
19:5e:34:f6:23:c2:d8:18:4a:ad:53:31:67:d8:35:90:ef:b6:
8c:98:35:5f:97:5c:8d:7d:b4:02:30:5f:6c:9f:17:a8:42:19:
ff:03:ff:d5:4e:d6:da:4b:5f:22:97:37:c5:70:76:fc:ef:d5:
3d:f1:30:7c:29:69:ed:b0:e5:70:52:31:dc:2e:99:c3:48:3c:
c3:00:93:db:ba:d4:1d:d6:dd:fd:d2:20:8b:ff:63:35:30:56:
f7:17:94:8a:c8:ed:da:be:01:2a:f0:be:bc:2c:ac:ec:45:23:
4c:b3:d4:02:5b:4f:63:5e:81:ae:44:c6:c0:37:a6:30:44:4d:
b5:d2:f4:8e:e5:1f:d9:70:72:b0:95:f0:65:96:dc:39:d0:99:
94:a3:5f:51:89:b6:ba:07:ad:de:a2:7b:d6:e3:3a:aa:63:93:
67:89:05:cf:13:65:52:0f:af:ae:ed:bd:e5:57:cf:aa:91:b5:
17:21:f7:d4:54:88:8a:c6:f9:0a:d0:58:0b:dd:0a:34:5f:34:
bd:ef:9a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKe6ApJFIazXJQV4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDcyMDEyMDAwMFoXDTI0MDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NTRhMTE3NzEtNjZmOS00ZDVkLTkyMTktNmQwZTY4NjhlZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj8iw+zf4TWpZAn2V0lKuS7Ho5FtKAiKyraj
T6UkrWmW3VTn+4lKEQf9KkIPx1pfnCkdVhdUN2IHI0knbpztwV0vjd1M7Wq8DS7L
lDs21QX5i940xy+RC95ZjuYYVZ/DU1abUBj2hZb2hAnYBerhzLPhwWYciGUOX0ps
7HdCkIAyocY5SXPfq288kJJP9jNpU8DAwrd2vtL+eTpp1oaOKkg7gm3LZ5CyAVw0
vlu7r7ncR92e2l5wBFSicOSSWIWpLAZpVacR51wDZptd4bjMhCmGZQbxV2I1ginq
BRYeHD69gZAK/Z6tq/jKp6jYkfjN/lEjJndO/btD1kQ6Oip5YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZuH0bXbFxe5GCCvZc2/3N09CZrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTkzYWUyZmItODIzMi0z
ZTExLTk1YTgtZWQ1N2VlODkwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTE3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqI+GaQOtbhLaudsYlXUeBfXoRnPpmwh+660jJqHwKKkoTUP8hg8Hd7
s9xzfsfg+K1do1NUNBleNPYjwtgYSq1TMWfYNZDvtoyYNV+XXI19tAIwX2yfF6hC
Gf8D/9VO1tpLXyKXN8Vwdvzv1T3xMHwpae2w5XBSMdwumcNIPMMAk9u61B3W3f3S
IIv/YzUwVvcXlIrI7dq+ASrwvrwsrOxFI0yz1AJbT2Nega5ExsA3pjBETbXS9I7l
H9lwcrCV8GWW3DnQmZSjX1GJtroHrd6ie9bjOqpjk2eJBc8TZVIPr67tveVXz6qR
tRch99RUiIrG+QrQWAvdCjRfNL3vmqw=
-----END CERTIFICATE-----
Generated at Sun Jan 21 05:51:19 2024 by rpki-client on console-fra.rpki-client.org