Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fae72e4-01bd-324c-89ad-275377f93781.roa
File: 7fae72e4-01bd-324c-89ad-275377f93781.roa (raw, json)
Hash identifier: IDdVvB7E6p4I6oyZ3mnKj8GRyJweQGY60xqz3JXw1Z0=
Subject key identifier: 95:F2:02:3C:2D:27:70:87:9A:B5:EB:8C:D6:4F:0C:AC:F9:F4:9F:12
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D7935955F288F482596986140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fae72e4-01bd-324c-89ad-275377f93781.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 18779
IP address blocks: 74.82.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:35:95:5f:28:8f:48:25:96:98:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=120057ec-b09d-48db-8b62-e39c9ea99e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:7d:2d:76:cf:ed:24:14:d9:5e:8e:bc:36:
16:ee:e4:b6:49:98:22:9e:b4:27:7d:52:17:e3:06:
1d:fa:81:71:a0:ed:c1:f3:30:b5:37:99:7d:cc:b9:
f7:b2:56:68:bd:74:e1:79:e1:58:bd:df:7d:ff:7c:
81:6c:b5:0d:2d:6e:ae:42:2c:a2:78:e7:96:d2:8c:
89:14:80:94:5e:ec:a6:20:e2:77:66:89:e9:8c:71:
2e:5a:09:b3:6e:cf:0c:b9:c9:39:15:e7:5b:b1:65:
af:83:d2:1e:bc:1f:23:8d:5a:66:23:19:1c:45:86:
aa:aa:c9:95:39:dc:f5:f1:49:6a:4e:54:f9:97:c6:
a8:d5:73:20:62:a4:30:3a:a1:f6:b2:d4:1e:08:20:
1c:1e:bd:71:b0:ef:90:86:48:e5:0e:d4:b6:a4:37:
05:9d:f7:19:d5:47:af:aa:3e:c4:d7:f7:46:dd:d9:
bf:46:bb:54:7d:63:5f:1e:af:a4:bd:72:90:23:1c:
6d:fc:4d:82:7e:ba:53:56:9b:5a:ed:21:54:b8:e7:
cd:eb:0c:bb:1a:ed:f6:96:a7:86:d0:0d:15:59:7f:
51:df:ea:75:19:cc:9c:32:94:4e:bd:6b:27:8f:57:
7f:6d:d3:38:5e:45:42:f8:7b:3d:18:e5:3c:86:ad:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F2:02:3C:2D:27:70:87:9A:B5:EB:8C:D6:4F:0C:AC:F9:F4:9F:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fae72e4-01bd-324c-89ad-275377f93781.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
74.82.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:da:7f:8a:6a:b9:33:0c:fb:f6:0f:57:8b:7b:1f:6e:c5:19:
04:f0:6c:48:ad:47:ac:22:4b:fe:99:ed:75:1d:74:22:f0:35:
c3:63:9e:e1:61:46:33:df:19:28:9c:2a:04:ad:0e:84:46:3a:
ad:dc:4c:b3:8f:5a:82:b2:f2:a2:a2:1d:4d:ef:b9:0a:8a:71:
71:c1:15:32:14:7f:68:a6:ff:2a:fc:8c:39:97:ae:8c:5f:d8:
19:16:a4:3e:de:37:2e:95:39:a4:6e:15:44:d4:f6:88:4b:9e:
e9:d9:3b:dc:36:5e:1b:bc:f7:e3:d4:2a:cc:eb:5b:fa:bc:0e:
68:b8:8b:05:f6:a3:90:61:46:56:e7:cf:1f:06:db:35:53:8f:
4f:cb:d2:80:f3:c0:93:03:63:b9:77:69:77:da:46:9a:0c:46:
7d:8d:fe:53:9f:2e:d4:1a:3e:2a:0e:20:fe:47:82:2e:8f:6d:
7b:a4:36:9f:87:d0:5b:cb:73:c5:67:d9:69:b2:f9:df:62:5d:
c4:49:e5:89:94:b4:92:db:4b:f2:60:32:7c:e6:a0:3f:ab:e3:
cc:e8:12:aa:3a:49:e3:fa:01:5b:04:c1:08:e2:25:6e:f6:89:
11:8e:60:24:2d:16:7c:0c:02:50:8a:fc:ff:72:99:73:4b:01:
85:69:4b:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15NZVfKI9IJZaYYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTIwMDU3ZWMtYjA5ZC00OGRiLThiNjItZTM5YzllYTk5ZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtER9LXbP7SQU2V6OvDYW7uS2SZginrQnfVIX
4wYd+oFxoO3B8zC1N5l9zLn3slZovXTheeFYvd99/3yBbLUNLW6uQiyieOeW0oyJ
FICUXuymIOJ3ZonpjHEuWgmzbs8Muck5FedbsWWvg9IevB8jjVpmIxkcRYaqqsmV
Odz18UlqTlT5l8ao1XMgYqQwOqH2stQeCCAcHr1xsO+QhkjlDtS2pDcFnfcZ1Uev
qj7E1/dG3dm/RrtUfWNfHq+kvXKQIxxt/E2CfrpTVpta7SFUuOfN6wy7Gu32lqeG
0A0VWX9R3+p1GcycMpROvWsnj1d/bdM4XkVC+Hs9GOU8hq1QCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXyAjwtJ3CHmrXrjNZPDKz59J8SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2ZhZTcyZTQtMDFiZC0z
MjRjLTg5YWQtMjc1Mzc3ZjkzNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlIrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvaf4pquTMM+/YPV4t7H27FGQTwbEitR6wiS/6Z7XUddCLwNcNjnuFh
RjPfGSicKgStDoRGOq3cTLOPWoKy8qKiHU3vuQqKcXHBFTIUf2im/yr8jDmXroxf
2BkWpD7eNy6VOaRuFUTU9ohLnunZO9w2Xhu89+PUKszrW/q8Dmi4iwX2o5BhRlbn
zx8G2zVTj0/L0oDzwJMDY7l3aXfaRpoMRn2N/lOfLtQaPioOIP5Hgi6PbXukNp+H
0FvLc8Vn2Wmy+d9iXcRJ5YmUtJLbS/JgMnzmoD+r48zoEqo6SeP6AVsEwQjiJW72
iRGOYCQtFnwMAlCK/P9ymXNLAYVpS/g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-ams.rpki-client.org