Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6b5caf-803c-3e46-b180-a4c3c0c165a7.roa
File: be6b5caf-803c-3e46-b180-a4c3c0c165a7.roa (raw, json)
Hash identifier: 8c/qNFFzDuNkljxxUN3Q3m8vaTDLSO2Yte4PZXutv2c=
Subject key identifier: 1B:B9:E1:96:7F:7C:17:96:1F:7B:D8:2F:B9:EB:AB:F0:6A:75:76:7B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583C83A69A64F353D268FCACD340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6b5caf-803c-3e46-b180-a4c3c0c165a7.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 40050
IP address blocks: 66.160.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:83:a6:9a:64:f3:53:d2:68:fc:ac:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=fe2903f3-4ab7-40da-b36b-d43679b03202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:98:f6:f2:17:0b:0e:f7:bf:9c:64:4a:43:
1d:ef:38:65:69:0d:48:4a:dc:51:0e:51:4b:63:79:
e4:cb:82:e9:92:f2:f8:d6:54:f5:6e:89:ea:33:48:
c1:95:ae:7b:8a:09:26:6a:53:20:8b:27:69:b9:2e:
8d:9c:8e:59:53:19:3b:74:85:2b:52:fd:e6:fd:71:
70:bb:de:92:b5:e6:be:ee:77:38:8e:28:b1:c5:6b:
04:eb:ca:25:9f:7f:9d:f4:d5:33:29:3f:c5:3b:3c:
38:64:e6:c1:55:b0:54:86:05:8f:9c:e4:3b:46:8d:
19:80:de:de:75:c0:8a:a8:7e:1f:be:a1:8d:86:bd:
e1:20:a8:ad:16:7b:71:51:dc:17:f8:a2:71:12:8a:
0b:4a:55:41:ea:14:d4:19:97:89:73:a4:7d:f2:40:
bc:23:b0:9a:55:57:fa:d1:fc:03:19:8a:17:42:fe:
b5:a5:49:1a:f5:24:d4:99:eb:fe:08:d5:ef:10:0b:
d0:93:84:17:1e:4d:c9:d4:b4:fc:a3:b9:38:4c:5b:
2a:5e:50:b1:a5:7c:be:67:9b:63:2b:56:1f:bd:75:
ee:a9:e9:e7:57:9b:ae:3f:d2:c0:25:31:0a:74:be:
d7:ae:93:af:44:c8:bc:66:c6:2f:da:90:63:ab:6f:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:E1:96:7F:7C:17:96:1F:7B:D8:2F:B9:EB:AB:F0:6A:75:76:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/be6b5caf-803c-3e46-b180-a4c3c0c165a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:5e:c7:5c:d8:9c:ea:16:76:96:f3:26:08:7e:35:22:4a:dc:
d0:d5:f8:85:c4:32:97:c0:17:87:f7:84:f4:a1:9b:24:12:8c:
8f:36:05:96:24:33:49:2e:78:97:2d:1e:fe:35:9b:60:53:80:
2c:8c:42:e5:47:95:72:61:18:52:ea:c9:e4:99:e2:e5:87:db:
33:56:23:8f:12:fb:e9:f8:65:a3:f9:ce:69:7d:9c:2d:45:46:
85:64:22:a8:26:d2:24:62:a6:85:31:21:13:eb:e9:f1:6a:13:
f6:ea:f5:96:16:3b:9a:b3:29:6a:a1:c6:8c:58:6c:9e:b1:65:
64:4f:99:22:01:e6:5c:43:a9:7e:e2:c5:11:5e:c7:99:d8:2d:
65:36:9b:79:29:cd:17:61:7b:61:7f:74:3b:26:1e:1b:49:78:
69:f2:6b:cb:67:f7:23:36:c8:3a:9a:22:ec:ce:85:42:e4:3b:
ab:f4:c6:43:ec:15:0d:e9:dc:19:e2:bd:00:a4:13:d9:87:7a:
7a:58:4f:7f:1b:3b:31:72:b7:91:39:ff:e0:ac:29:9c:ed:cc:
93:d2:b7:7e:b8:56:fb:52:f1:65:fb:f8:c0:03:63:d2:32:fe:
79:57:d4:72:e2:af:d3:ee:2c:2a:ad:a9:15:0d:2b:1b:aa:61:
31:b1:03:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyDpppk81PSaPys00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDEwNzA1MDAwMFoXDTIyMDcwNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmUyOTAzZjMtNGFiNy00MGRhLWIzNmItZDQzNjc5YjAzMjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQSY9vIXCw73v5xkSkMd7zhlaQ1IStxRDlFL
Y3nky4LpkvL41lT1bonqM0jBla57igkmalMgiydpuS6NnI5ZUxk7dIUrUv3m/XFw
u96Stea+7nc4jiixxWsE68oln3+d9NUzKT/FOzw4ZObBVbBUhgWPnOQ7Ro0ZgN7e
dcCKqH4fvqGNhr3hIKitFntxUdwX+KJxEooLSlVB6hTUGZeJc6R98kC8I7CaVVf6
0fwDGYoXQv61pUka9STUmev+CNXvEAvQk4QXHk3J1LT8o7k4TFsqXlCxpXy+Z5tj
K1YfvXXuqennV5uuP9LAJTEKdL7XrpOvRMi8ZsYv2pBjq2/IYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBu54ZZ/fBeWH3vYL7nrq/BqdXZ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmU2YjVjYWYtODAzYy0z
ZTQ2LWIxODAtYTRjM2MwYzE2NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFex1zYnOoWdpbzJgh+NSJK3NDV+IXEMpfAF4f3hPShmyQSjI82BZYk
M0kueJctHv41m2BTgCyMQuVHlXJhGFLqyeSZ4uWH2zNWI48S++n4ZaP5zml9nC1F
RoVkIqgm0iRipoUxIRPr6fFqE/bq9ZYWO5qzKWqhxoxYbJ6xZWRPmSIB5lxDqX7i
xRFex5nYLWU2m3kpzRdhe2F/dDsmHhtJeGnya8tn9yM2yDqaIuzOhULkO6v0xkPs
FQ3p3BnivQCkE9mHenpYT38bOzFyt5E5/+CsKZztzJPSt364VvtS8WX7+MADY9Iy
/nlX1HLir9PuLCqtqRUNKxuqYTGxA6w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-ams.rpki-client.org