Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8098e8e7-0da9-3f7b-9ac5-0fbcc6bf5f1d.roa
File: 8098e8e7-0da9-3f7b-9ac5-0fbcc6bf5f1d.roa (raw, json)
Hash identifier: kGFt8h6aHw1oxv+wdXH/U93P6s8QfqJkjWaeqTPpOVs=
Subject key identifier: D3:5D:2C:D0:2D:F6:38:E7:08:F4:F3:4B:31:1E:78:37:F1:84:D3:4A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583BFDA6CA2156C6832C67AF6480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8098e8e7-0da9-3f7b-9ac5-0fbcc6bf5f1d.roa
Signing time: Sat 20 Nov 2021 05:00:00 +0000
ROA not before: Sat 20 Nov 2021 05:00:00 +0000
ROA not after: Fri 20 May 2022 04:00:00 +0000
asID: 40300
IP address blocks: 66.160.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fd:a6:ca:21:56:c6:83:2c:67:af:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 20 05:00:00 2021 GMT
Not After : May 20 04:00:00 2022 GMT
Subject: CN=8a0e2fe6-8fc2-4bfa-b0e9-49caada9dea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:ba:da:4e:dd:84:6f:8e:11:09:16:34:98:
18:d3:7c:5e:c6:ed:38:5f:84:c1:0d:ea:05:84:63:
89:cc:71:d2:45:8e:74:71:25:6c:34:f3:97:85:b5:
64:24:88:86:9b:97:8c:8b:f3:71:a3:a0:86:58:57:
c5:52:13:53:d2:e6:57:54:f3:3f:8e:34:51:57:50:
21:20:70:a1:2e:d7:06:00:a3:0a:9b:c6:6a:32:95:
40:fe:25:13:05:e0:f8:63:b9:c5:e9:4c:80:25:78:
55:02:9d:4e:1d:bd:33:1a:76:2d:01:b2:a0:f3:3a:
6c:63:30:be:40:10:3a:6d:2a:a9:90:71:d5:97:fb:
6f:83:e3:bf:67:94:d8:06:76:bc:69:8d:9d:84:15:
0b:43:89:c5:ed:c1:fa:29:24:23:a2:44:46:f3:a0:
b7:ce:c6:26:2e:39:bb:cb:90:49:fa:e5:7a:ce:a4:
bf:2c:1d:26:e0:54:7f:99:30:a1:30:8f:13:f0:7a:
47:05:36:aa:95:35:59:dd:49:18:95:ea:af:a8:1c:
a8:81:5a:f1:c4:00:d0:a2:a3:fe:c7:d2:44:26:35:
77:40:12:67:ce:25:da:fc:3a:8b:bf:64:82:19:ac:
94:52:89:59:5c:14:e3:3b:59:1f:03:3b:a6:4d:d5:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:2C:D0:2D:F6:38:E7:08:F4:F3:4B:31:1E:78:37:F1:84:D3:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8098e8e7-0da9-3f7b-9ac5-0fbcc6bf5f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ae:22:f2:7e:73:df:a9:22:af:9a:10:db:34:57:e4:3d:d2:
2b:7a:81:65:fd:ec:10:7f:f9:5d:52:2e:35:bb:45:4b:33:1d:
30:cd:98:e0:d1:61:30:99:e7:e6:e0:54:d2:f9:0b:25:30:b8:
e1:0d:cc:9d:4d:fe:2b:c0:b5:9a:e1:07:a5:29:c9:5f:f5:36:
57:db:98:7c:8f:46:01:31:3d:4e:52:8f:5c:a3:04:51:f7:1d:
f8:c3:9a:d3:78:28:9c:f3:dd:68:2e:1d:e5:40:bb:56:d7:35:
26:8a:8b:cc:7c:fb:3b:47:3e:b5:c0:26:a3:29:6c:71:d3:49:
1c:61:13:30:cb:e4:d6:5e:1e:89:ea:c8:36:44:fd:03:08:3b:
97:73:60:e1:56:35:11:62:a5:23:c5:f2:42:08:91:a1:3b:04:
ec:81:b0:97:68:02:0c:55:29:0f:ed:8f:75:22:8d:86:01:4c:
87:a2:76:d2:b4:b5:f5:d8:d1:66:b4:43:0f:ef:a1:c3:a6:70:
65:c7:db:23:14:d8:72:4e:29:5a:9f:cb:de:4b:c6:34:05:6d:
6f:72:52:6d:c4:83:4a:22:d8:65:6a:ad:39:72:63:ec:73:bd:
44:53:89:f7:85:54:4c:8c:b0:11:92:57:d4:0c:48:f2:4f:a2:
0e:71:fb:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9psohVsaDLGevZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
OGEwZTJmZTYtOGZjMi00YmZhLWIwZTktNDljYWFkYTlkZWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS+62k7dhG+OEQkWNJgY03xexu04X4TBDeoF
hGOJzHHSRY50cSVsNPOXhbVkJIiGm5eMi/Nxo6CGWFfFUhNT0uZXVPM/jjRRV1Ah
IHChLtcGAKMKm8ZqMpVA/iUTBeD4Y7nF6UyAJXhVAp1OHb0zGnYtAbKg8zpsYzC+
QBA6bSqpkHHVl/tvg+O/Z5TYBna8aY2dhBULQ4nF7cH6KSQjokRG86C3zsYmLjm7
y5BJ+uV6zqS/LB0m4FR/mTChMI8T8HpHBTaqlTVZ3UkYleqvqByogVrxxADQoqP+
x9JEJjV3QBJnziXa/DqLv2SCGayUUolZXBTjO1kfAzumTdXz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNdLNAt9jjnCPTzSzEeeDfxhNNKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODA5OGU4ZTctMGRhOS0z
ZjdiLTlhYzUtMGZiY2M2YmY1ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqDCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyuIvJ+c9+pIq+aENs0V+Q90it6gWX97BB/+V1SLjW7RUszHTDNmODR
YTCZ5+bgVNL5CyUwuOENzJ1N/ivAtZrhB6UpyV/1NlfbmHyPRgExPU5Sj1yjBFH3
HfjDmtN4KJzz3WguHeVAu1bXNSaKi8x8+ztHPrXAJqMpbHHTSRxhEzDL5NZeHonq
yDZE/QMIO5dzYOFWNRFipSPF8kIIkaE7BOyBsJdoAgxVKQ/tj3UijYYBTIeidtK0
tfXY0Wa0Qw/vocOmcGXH2yMU2HJOKVqfy95LxjQFbW9yUm3Eg0oi2GVqrTlyY+xz
vURTifeFVEyMsBGSV9QMSPJPog5x+9M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-ams.rpki-client.org