Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/917f58e1-60f8-36e6-bf58-d9cd73f556b0.roa
File: 917f58e1-60f8-36e6-bf58-d9cd73f556b0.roa (raw, json)
Hash identifier: 9d6wIuqdAIngDBlJP1VPy4Fg7PLs7IVxDUeAnl/3cOI=
Subject key identifier: E2:51:C3:A4:9E:0C:11:55:BF:3A:CC:13:71:91:FD:AA:87:49:7A:39
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A519AEED3FA9B959C054A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/917f58e1-60f8-36e6-bf58-d9cd73f556b0.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 6565
IP address blocks: 64.71.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:9a:ee:d3:fa:9b:95:9c:05:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=5e0435ae-d71c-45c5-947e-84070af9f291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:c8:f1:8a:19:ce:ee:f7:d7:8d:72:34:6e:
17:38:c3:a3:2a:93:54:46:3b:dd:de:a6:a8:a7:66:
de:a7:f6:7e:13:61:5a:14:93:51:78:f4:1e:e3:84:
74:7f:0c:60:a5:3b:7c:b0:25:de:bd:61:0d:81:01:
00:cc:0d:b2:b1:19:ce:1e:8d:77:02:73:80:5f:dc:
21:cc:5f:14:6c:1f:d2:f3:6e:60:87:85:5e:3a:aa:
7c:25:88:4f:57:d0:9c:c2:1c:09:68:2b:70:a5:10:
8d:f7:54:f7:ee:27:e7:ca:88:f3:b0:3c:2e:29:22:
f2:8c:b9:8a:b0:f7:b6:4b:46:f4:93:b4:67:f2:1c:
c6:60:64:0e:ae:a7:8a:6a:c8:5d:12:b9:31:67:66:
e2:36:b7:97:b9:bc:d8:bc:9a:6f:76:92:da:45:1b:
83:ec:68:4f:0b:47:3d:3a:aa:4a:30:00:3e:d2:cb:
33:3c:56:50:6b:b6:42:cd:f2:e3:50:dd:58:ab:bc:
0d:b5:13:77:8f:1a:9f:b5:b9:cd:49:ff:e4:89:cf:
66:e8:d7:20:ac:3c:3c:9d:3a:ca:6d:d4:22:72:19:
a9:ac:28:69:af:6e:42:52:bb:2a:da:68:ac:fd:7f:
28:6a:2e:4d:14:0c:5e:75:f9:3f:d4:f8:ec:21:6e:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:C3:A4:9E:0C:11:55:BF:3A:CC:13:71:91:FD:AA:87:49:7A:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/917f58e1-60f8-36e6-bf58-d9cd73f556b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:75:22:c7:a4:5f:65:7e:a4:e3:fb:de:0e:2d:29:9b:8e:25:
2d:37:ce:e6:8d:38:d5:2a:f4:e0:e8:45:ba:62:c5:39:9c:59:
4b:15:6d:87:cf:6f:c6:9a:8a:c4:c7:47:92:ce:6b:1d:78:79:
dd:80:9b:08:75:4c:02:96:e9:eb:ff:0c:63:6a:9e:ae:7e:e8:
aa:1c:cd:e5:78:30:09:a1:66:59:60:e4:6f:12:b7:89:eb:d6:
45:a4:31:9c:9f:e4:19:d9:db:14:de:78:b0:b1:e2:66:a0:bc:
2c:7e:14:d7:cb:d2:61:f8:ea:c8:41:9c:af:9f:27:56:63:86:
b6:22:1e:28:b6:e2:c1:82:12:f4:84:fe:70:fe:3d:99:ff:37:
a7:80:03:de:a8:0b:7a:b7:3f:80:cc:27:e4:36:03:6d:70:c8:
fb:67:9e:24:68:07:a8:d6:62:26:26:a9:aa:8a:a8:6c:10:53:
fd:7a:a7:3a:b6:48:88:e4:9f:60:07:e3:2a:de:69:84:81:21:
83:16:7d:34:d9:ee:ed:ab:3b:4a:d7:78:03:54:30:23:9d:b5:
68:45:c3:61:2c:24:b5:30:49:a7:d0:0c:8b:d5:5f:01:51:fa:
60:ab:69:ea:e7:c1:0b:d6:86:78:60:7f:8f:41:3e:62:3e:74:
97:a2:a6:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUZru0/qblZwFSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWUwNDM1YWUtZDcxYy00NWM1LTk0N2UtODQwNzBhZjlmMjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OrI8YoZzu73141yNG4XOMOjKpNURjvd3qao
p2bep/Z+E2FaFJNRePQe44R0fwxgpTt8sCXevWENgQEAzA2ysRnOHo13AnOAX9wh
zF8UbB/S825gh4VeOqp8JYhPV9CcwhwJaCtwpRCN91T37ifnyojzsDwuKSLyjLmK
sPe2S0b0k7Rn8hzGYGQOrqeKashdErkxZ2biNreXubzYvJpvdpLaRRuD7GhPC0c9
OqpKMAA+0sszPFZQa7ZCzfLjUN1Yq7wNtRN3jxqftbnNSf/kic9m6NcgrDw8nTrK
bdQichmprChpr25CUrsq2mis/X8oai5NFAxedfk/1PjsIW7kcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJRw6SeDBFVvzrME3GR/aqHSXo5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTE3ZjU4ZTEtNjBmOC0z
NmU2LWJmNTgtZDljZDczZjU1NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEe1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALl1IsekX2V+pOP73g4tKZuOJS03zuaNONUq9ODoRbpixTmcWUsVbYfP
b8aaisTHR5LOax14ed2Amwh1TAKW6ev/DGNqnq5+6KoczeV4MAmhZllg5G8St4nr
1kWkMZyf5BnZ2xTeeLCx4magvCx+FNfL0mH46shBnK+fJ1ZjhrYiHii24sGCEvSE
/nD+PZn/N6eAA96oC3q3P4DMJ+Q2A21wyPtnniRoB6jWYiYmqaqKqGwQU/16pzq2
SIjkn2AH4yreaYSBIYMWfTTZ7u2rO0rXeANUMCOdtWhFw2EsJLUwSafQDIvVXwFR
+mCraernwQvWhnhgf49BPmI+dJeipjc=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org