Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94414b3b-3f24-32a3-aa3c-0efe30e1a625.roa
File: 94414b3b-3f24-32a3-aa3c-0efe30e1a625.roa (raw, json)
Hash identifier: 9RkVq6B1jvwMgu/0mw9KqfG1E09e+Yort8gHcTBSxks=
Subject key identifier: 0B:35:E5:88:6C:51:80:0D:D4:EC:D6:E9:C8:8A:4E:FB:9F:57:9D:E8
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A50B80E1F4A712FB2CB8400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94414b3b-3f24-32a3-aa3c-0efe30e1a625.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 14979
IP address blocks: 66.160.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:50:b8:0e:1f:4a:71:2f:b2:cb:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=c0bb1fa1-1518-4cea-9f1e-bbdb9690f611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:2f:25:0f:51:82:ba:f1:3a:ec:50:01:5e:
39:a2:f6:fb:5f:b8:ce:fe:50:78:9e:06:49:0e:b8:
31:5b:f2:04:17:72:b6:b4:fc:59:da:9f:c2:9d:e7:
8e:24:1f:85:64:d7:48:2b:ca:15:a1:bd:71:37:dc:
d5:5b:14:73:18:94:0e:2b:e8:41:78:b6:b7:9d:75:
eb:12:a1:8d:f2:89:c5:07:3b:f9:73:f9:a4:80:02:
d9:ae:4d:10:16:d7:c8:6d:e7:69:19:9a:c0:e2:86:
2b:98:26:6e:be:94:e5:9b:54:09:23:3c:0f:d4:81:
81:7f:31:be:07:fb:c5:b1:f1:bd:84:a4:1a:c2:e3:
09:a8:81:c9:f5:e8:9f:bf:9d:49:7b:fb:10:2c:16:
60:2b:1e:e4:7c:55:86:f7:0f:81:a7:43:b1:f3:0c:
fd:e8:1a:d0:05:d3:ab:62:f8:df:77:78:3d:3a:ef:
9e:97:19:98:2b:eb:ef:d8:ef:61:ff:e3:6f:b5:6c:
d3:b9:ed:36:d3:ca:6e:48:38:4e:7e:d6:05:c5:18:
b3:0f:f9:73:38:56:df:f2:c9:fc:e8:c3:80:93:a7:
3c:8c:7e:c4:37:fc:b0:8a:6b:73:c0:1b:5d:35:6b:
78:63:73:bb:20:7f:36:91:48:4b:68:67:dc:98:c4:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:E5:88:6C:51:80:0D:D4:EC:D6:E9:C8:8A:4E:FB:9F:57:9D:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94414b3b-3f24-32a3-aa3c-0efe30e1a625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:74:e9:62:24:07:c7:b4:47:01:3f:ba:d0:12:11:96:46:dd:
2d:07:db:f6:c1:e5:8b:47:eb:bd:19:c2:60:b0:7d:4f:d7:99:
88:f3:ff:12:f3:d8:e1:1b:b2:27:e5:13:72:94:c7:5c:b3:46:
84:00:c3:e1:a4:63:f6:4c:a8:47:54:92:1f:40:31:76:76:34:
c1:69:e0:46:8b:11:3f:db:eb:02:05:13:ee:9e:6d:07:1e:f6:
9d:fa:b4:02:a1:13:cd:23:a3:ca:59:bb:3a:00:f8:e5:e3:fc:
36:5e:68:67:70:15:c1:8c:37:1e:42:22:cc:e1:ff:23:a2:70:
ab:22:4c:ff:38:6e:e3:57:57:96:9b:01:53:60:da:8d:82:e5:
66:bf:b7:52:8b:23:fd:4b:cf:77:4f:8f:56:94:e4:aa:b6:9e:
25:fb:d2:68:9f:c4:d6:5d:fb:be:d6:e4:29:19:1f:66:58:58:
67:7c:35:75:08:aa:f7:49:55:6b:ea:52:1d:3a:08:e1:72:91:
c8:fc:7f:27:90:27:23:4a:b5:5e:ff:5f:b5:f2:f4:9e:bd:87:
d1:2d:8c:b4:7f:ec:12:07:76:95:0b:dc:fa:91:2b:0b:97:53:
b4:5c:d5:34:ea:65:ec:0e:76:64:64:b7:a2:02:5f:ba:bf:23:
d8:93:70:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKULgOH0pxL7LLhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzBiYjFmYTEtMTUxOC00Y2VhLTlmMWUtYmJkYjk2OTBmNjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUvJQ9RgrrxOuxQAV45ovb7X7jO/lB4ngZJ
DrgxW/IEF3K2tPxZ2p/CneeOJB+FZNdIK8oVob1xN9zVWxRzGJQOK+hBeLa3nXXr
EqGN8onFBzv5c/mkgALZrk0QFtfIbedpGZrA4oYrmCZuvpTlm1QJIzwP1IGBfzG+
B/vFsfG9hKQawuMJqIHJ9eifv51Je/sQLBZgKx7kfFWG9w+Bp0Ox8wz96BrQBdOr
Yvjfd3g9Ou+elxmYK+vv2O9h/+NvtWzTue0208puSDhOftYFxRizD/lzOFbf8sn8
6MOAk6c8jH7EN/ywimtzwBtdNWt4Y3O7IH82kUhLaGfcmMRziwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAs15YhsUYAN1OzW6ciKTvufV53oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTQ0MTRiM2ItM2YyNC0z
MmEzLWFhM2MtMGVmZTMwZTFhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd06WIkB8e0RwE/utASEZZG3S0H2/bB5YtH670ZwmCwfU/XmYjz/xLz
2OEbsiflE3KUx1yzRoQAw+GkY/ZMqEdUkh9AMXZ2NMFp4EaLET/b6wIFE+6ebQce
9p36tAKhE80jo8pZuzoA+OXj/DZeaGdwFcGMNx5CIszh/yOicKsiTP84buNXV5ab
AVNg2o2C5Wa/t1KLI/1Lz3dPj1aU5Kq2niX70mifxNZd+77W5CkZH2ZYWGd8NXUI
qvdJVWvqUh06COFykcj8fyeQJyNKtV7/X7Xy9J69h9EtjLR/7BIHdpUL3PqRKwuX
U7Rc1TTqZewOdmRkt6ICX7q/I9iTcGE=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org