Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e12cdacf-9735-36eb-a09d-54841793579e.roa
File: e12cdacf-9735-36eb-a09d-54841793579e.roa (raw, json)
Hash identifier: xiWtYOvdKI7OM9GPBn8vp0WbsFjhWc4Rp+m4ZVZ25wU=
Subject key identifier: DC:84:2C:8C:78:64:7A:E4:55:E3:AD:88:7C:80:D9:DE:A8:00:8E:A0
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858414A51480F23E096D509A77940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e12cdacf-9735-36eb-a09d-54841793579e.roa
Signing time: Mon 20 Mar 2023 12:00:00 +0000
ROA not before: Mon 20 Mar 2023 12:00:00 +0000
ROA not after: Thu 21 Sep 2023 04:00:00 +0000
asID: 396026
IP address blocks: 184.105.198.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:4a:51:48:0f:23:e0:96:d5:09:a7:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 20 12:00:00 2023 GMT
Not After : Sep 21 04:00:00 2023 GMT
Subject: CN=74af2292-3e7c-4483-be03-210c0ae61224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:64:47:5e:0c:d8:bf:b6:76:08:55:57:f8:
be:95:74:84:36:cf:1d:d8:10:68:f2:d5:99:1c:55:
d4:e5:68:bc:6e:30:57:4a:1b:c1:fb:1b:f7:df:16:
c5:bf:3d:83:ff:12:7c:b4:69:60:9a:66:86:f5:10:
3f:28:22:1d:20:7a:e9:c1:48:ba:de:d9:49:d7:77:
83:0e:06:de:ca:6f:ba:14:07:ec:df:e0:1c:f8:b5:
31:7b:05:e9:a5:b7:2a:43:6c:9a:fa:b7:ef:cb:cb:
67:07:1e:93:5e:1b:31:66:f3:35:b6:1e:f9:19:60:
9e:bd:57:95:ec:26:9c:5d:f2:11:95:de:7b:66:6b:
54:4d:ba:2b:24:0f:a8:df:4f:a0:a5:70:70:3f:85:
a6:47:0d:9a:fb:18:4e:51:fb:b7:27:bb:44:27:72:
c5:27:6d:8f:8d:22:2d:8f:7e:1a:3b:31:bd:22:ea:
66:ee:10:15:a1:0b:bd:3d:b9:ed:e0:e7:c9:2c:ac:
a3:05:3c:9c:97:9f:fd:5c:01:2f:c5:ed:33:7e:ee:
11:f2:e5:57:9a:ca:83:06:b0:c8:11:91:0a:bc:4e:
64:cc:fc:a8:1a:9d:e9:41:ae:42:c0:38:c5:82:63:
c8:6b:95:77:26:a8:09:63:f1:89:df:a5:0b:5d:57:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:84:2C:8C:78:64:7A:E4:55:E3:AD:88:7C:80:D9:DE:A8:00:8E:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e12cdacf-9735-36eb-a09d-54841793579e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:dc:49:05:5b:ef:dd:cb:4d:84:6e:aa:64:f6:9d:e1:b0:b2:
7d:ae:98:9e:78:ba:b1:5a:ad:34:ec:76:9c:b1:ea:24:77:92:
c3:4b:91:17:33:65:8c:1f:f3:d4:82:0d:af:b3:3f:4e:d1:1f:
f0:ff:72:71:8d:11:6c:bc:c2:26:f6:48:1c:bf:b4:76:96:41:
de:fa:b4:01:6d:a2:b1:e9:e9:bf:7e:ea:0e:42:02:7a:c0:cb:
93:08:18:f3:5a:a6:51:f0:79:32:bd:61:29:37:43:2e:ad:28:
ba:77:c7:ee:c3:a1:18:d7:03:76:d2:2a:88:42:a6:a8:25:2e:
c4:cc:80:b8:8a:a7:e1:17:c7:da:6a:b7:e8:7a:9a:9c:ac:72:
7d:dc:d2:eb:6d:eb:ac:8b:a4:bc:2e:2a:fe:96:43:5d:ec:74:
b7:8f:1e:00:b9:b8:c9:b3:bf:ef:15:93:f2:c9:82:26:0b:d8:
a3:24:33:32:bf:3d:53:20:84:bb:d0:3c:a7:14:3d:0d:41:b7:
1b:2a:27:e8:89:72:a1:d9:55:4d:33:40:91:24:47:fc:9b:35:
72:dc:21:91:bc:ce:56:57:cc:1d:dd:69:05:2f:dd:4b:c9:92:
e2:17:b1:46:a8:06:77:6b:2b:c6:e4:5d:de:6f:45:e5:9b:57:
8f:e9:00:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUUgPI+CW1QmneUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzRhZjIyOTItM2U3Yy00NDgzLWJlMDMtMjEwYzBhZTYxMjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XpkR14M2L+2dghVV/i+lXSENs8d2BBo8tWZ
HFXU5Wi8bjBXShvB+xv33xbFvz2D/xJ8tGlgmmaG9RA/KCIdIHrpwUi63tlJ13eD
Dgbeym+6FAfs3+Ac+LUxewXppbcqQ2ya+rfvy8tnBx6TXhsxZvM1th75GWCevVeV
7CacXfIRld57ZmtUTborJA+o30+gpXBwP4WmRw2a+xhOUfu3J7tEJ3LFJ22PjSIt
j34aOzG9Iupm7hAVoQu9Pbnt4OfJLKyjBTycl5/9XAEvxe0zfu4R8uVXmsqDBrDI
EZEKvE5kzPyoGp3pQa5CwDjFgmPIa5V3JqgJY/GJ36ULXVcLfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyELIx4ZHrkVeOtiHyA2d6oAI6gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTEyY2RhY2YtOTczNS0z
NmViLWEwOWQtNTQ4NDE3OTM1NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGnGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXcSQVb793LTYRuqmT2neGwsn2umJ54urFarTTsdpyx6iR3ksNLkRcz
ZYwf89SCDa+zP07RH/D/cnGNEWy8wib2SBy/tHaWQd76tAFtorHp6b9+6g5CAnrA
y5MIGPNaplHweTK9YSk3Qy6tKLp3x+7DoRjXA3bSKohCpqglLsTMgLiKp+EXx9pq
t+h6mpyscn3c0utt66yLpLwuKv6WQ13sdLePHgC5uMmzv+8Vk/LJgiYL2KMkMzK/
PVMghLvQPKcUPQ1BtxsqJ+iJcqHZVU0zQJEkR/ybNXLcIZG8zlZXzB3daQUv3UvJ
kuIXsUaoBndrK8bkXd5vReWbV4/pABQ=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org