Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6c04250-5fa8-3b58-b5ef-edc936aedf24.roa
File: d6c04250-5fa8-3b58-b5ef-edc936aedf24.roa (raw, json)
Hash identifier: OrOxrZAOV9e3gd1mfHwPXR7jy59N4SL/ypEBcT47ZDc=
Subject key identifier: D4:BF:AA:8E:C1:8E:48:0A:E1:B4:21:76:66:70:0A:BE:C7:8B:7C:42
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858428197DD603AA257D4A4032C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6c04250-5fa8-3b58-b5ef-edc936aedf24.roa
Signing time: Sun 09 Jul 2023 12:00:00 +0000
ROA not before: Sun 09 Jul 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 14978
IP address blocks: 216.66.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:81:97:dd:60:3a:a2:57:d4:a4:03:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=3cfb1e07-4918-4894-a436-734de9f01f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:16:ac:ae:7f:c3:91:9a:96:60:31:b1:ea:
1f:ac:39:14:81:05:f3:b8:17:96:f3:c5:13:2e:76:
bb:72:04:f5:3c:7d:8e:e9:9e:be:27:c7:19:ab:1e:
d9:ac:41:66:60:9e:5d:02:9c:b1:9d:7f:00:3a:a8:
f5:22:1e:a5:a8:73:ed:c6:c7:0f:f5:ea:28:f6:3e:
12:bf:0f:19:1a:92:d2:1a:ee:13:02:de:8b:c2:a1:
6e:90:f7:36:87:d9:4b:ae:8b:45:46:3f:35:14:00:
59:a2:fd:ff:6d:d5:09:a3:cc:a4:0d:a4:22:54:33:
08:fe:2f:18:95:d5:aa:f6:e7:67:4c:17:a9:6d:13:
24:14:83:d1:b4:0a:33:36:30:43:62:58:ae:fd:57:
ea:b3:b6:06:87:63:93:c8:0b:55:fa:2b:59:9b:32:
4a:e6:66:f4:7c:59:82:b8:5d:86:8c:5a:fe:47:23:
96:16:18:21:41:4b:8c:1e:87:eb:9d:b3:e8:9d:1b:
93:38:77:20:7d:41:14:37:14:f1:16:bb:93:d8:97:
f6:d2:a5:df:a4:7b:13:39:dd:5f:22:d9:d9:19:66:
64:a9:06:65:ed:cc:e7:d2:91:9f:53:9b:7e:a5:7e:
42:64:ea:79:0c:8d:1e:bc:1b:42:8e:45:f8:e4:1f:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:AA:8E:C1:8E:48:0A:E1:B4:21:76:66:70:0A:BE:C7:8B:7C:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6c04250-5fa8-3b58-b5ef-edc936aedf24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a7:75:1c:56:5e:af:a1:e3:85:84:ae:e9:91:a5:79:56:e2:
1d:55:ca:9b:e5:9f:c9:4a:c9:5b:44:91:22:a9:0c:78:b6:34:
49:63:66:81:65:c0:61:b7:5b:c4:4d:15:65:f5:38:ee:02:40:
d7:77:27:3d:5d:4f:84:41:71:bf:db:a6:2e:36:bc:a9:c7:00:
9c:8c:42:ec:4f:a5:33:ec:91:1b:b1:80:0d:44:b0:a9:ee:51:
72:c7:4c:fd:13:bf:15:63:35:a9:ba:c6:75:05:f1:d1:97:72:
a6:e5:0d:f7:a5:f8:3f:49:6c:7f:dc:4b:e6:76:07:c1:64:6b:
8b:04:e5:36:ff:fa:ae:5d:56:cc:21:de:d3:02:a9:72:2b:c9:
2a:c1:4b:14:c7:18:8d:5c:9b:c5:f3:c0:9d:a0:7a:43:85:60:
2c:b7:76:c3:e9:b6:e4:9c:12:ea:b4:13:69:e8:a5:7d:83:96:
5e:40:6f:cc:10:0c:f4:a2:b1:ac:99:47:1d:e6:41:c8:bf:dd:
8b:4e:2d:b9:20:bf:f4:16:99:2b:f7:e7:6a:ec:33:e3:c2:29:
98:c7:27:9c:88:1f:e7:d0:c3:39:29:a6:2f:bd:03:ae:58:69:
8c:64:b6:ff:1d:7d:2d:eb:3e:20:2e:7d:b6:45:4f:77:6f:0d:
f3:d2:61:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKBl91gOqJX1KQDLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDcwOTEyMDAwMFoXDTI0MDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
M2NmYjFlMDctNDkxOC00ODk0LWE0MzYtNzM0ZGU5ZjAxZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAIWrK5/w5GalmAxseofrDkUgQXzuBeW88UT
Lna7cgT1PH2O6Z6+J8cZqx7ZrEFmYJ5dApyxnX8AOqj1Ih6lqHPtxscP9eoo9j4S
vw8ZGpLSGu4TAt6LwqFukPc2h9lLrotFRj81FABZov3/bdUJo8ykDaQiVDMI/i8Y
ldWq9udnTBepbRMkFIPRtAozNjBDYliu/Vfqs7YGh2OTyAtV+itZmzJK5mb0fFmC
uF2GjFr+RyOWFhghQUuMHofrnbPonRuTOHcgfUEUNxTxFruT2Jf20qXfpHsTOd1f
ItnZGWZkqQZl7czn0pGfU5t+pX5CZOp5DI0evBtCjkX45B/9UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS/qo7BjkgK4bQhdmZwCr7Hi3xCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZjMDQyNTAtNWZhOC0z
YjU4LWI1ZWYtZWRjOTM2YWVkZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADendRxWXq+h44WErumRpXlW4h1Vypvln8lKyVtEkSKpDHi2NEljZoFl
wGG3W8RNFWX1OO4CQNd3Jz1dT4RBcb/bpi42vKnHAJyMQuxPpTPskRuxgA1EsKnu
UXLHTP0TvxVjNam6xnUF8dGXcqblDfel+D9JbH/cS+Z2B8Fka4sE5Tb/+q5dVswh
3tMCqXIrySrBSxTHGI1cm8XzwJ2gekOFYCy3dsPptuScEuq0E2nopX2Dll5Ab8wQ
DPSisayZRx3mQci/3YtOLbkgv/QWmSv352rsM+PCKZjHJ5yIH+fQwzkppi+9A65Y
aYxktv8dfS3rPiAufbZFT3dvDfPSYVM=
-----END CERTIFICATE-----
Generated at Wed Jan 10 05:18:05 2024 by rpki-client on console-fra.rpki-client.org