Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3551611-6c7e-305b-9245-6fc562059f82.roa
File: f3551611-6c7e-305b-9245-6fc562059f82.roa (raw, json)
Hash identifier: EO9ejBGQ45ePCh//AA/4ijL1P5x5YF6ZydekZ8Ntrw8=
Subject key identifier: 24:AA:71:70:09:18:A2:4F:DC:55:DD:C2:08:63:FB:54:1E:22:47:EF
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D79365B49936AA5BC5340C480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3551611-6c7e-305b-9245-6fc562059f82.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 54288
IP address blocks: 72.52.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:5b:49:93:6a:a5:bc:53:40:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=cc35e93e-68ce-4f9b-9869-13216854df57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:0a:c6:36:9e:e4:2d:59:a4:68:14:9f:a8:
fe:d5:40:23:4e:b7:f8:12:6d:60:2b:35:53:3b:ec:
65:83:bc:dd:1e:d7:77:5e:2b:3c:8d:85:8b:47:8a:
a7:29:95:19:32:ef:70:28:70:66:16:db:65:21:0d:
d6:b5:b4:4d:5d:a1:16:bb:f2:af:84:55:d8:cc:52:
12:fe:ed:da:95:0c:9a:e9:d6:22:67:5b:26:e9:6b:
a7:03:b1:83:c4:77:e9:df:0e:a8:1e:d1:83:7e:43:
d8:ba:1b:27:af:3b:aa:ef:1b:36:5a:c7:b6:29:40:
e2:1c:2f:10:ba:55:27:b6:ec:8b:8f:ec:9e:6f:7c:
55:00:9f:f1:8d:7c:a8:4f:87:ea:93:a3:5e:eb:36:
08:a1:f1:d6:bf:4b:3d:9b:23:0c:b7:97:0e:cc:b8:
e4:97:8d:47:62:a8:93:17:0b:a3:01:02:50:f8:ca:
0e:ae:29:89:a6:03:b6:e7:13:d8:7d:b7:c9:af:9d:
6b:54:69:98:f3:2c:0f:e9:46:13:a0:58:61:95:9e:
e2:b9:ae:52:51:19:73:3f:a1:12:5c:41:ea:20:45:
bd:3b:38:5f:7c:89:aa:01:1a:33:e5:48:2a:28:f9:
03:20:71:d3:48:08:79:7d:d9:f4:c0:d0:3e:65:22:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AA:71:70:09:18:A2:4F:DC:55:DD:C2:08:63:FB:54:1E:22:47:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3551611-6c7e-305b-9245-6fc562059f82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:87:f4:61:99:99:4f:b2:7b:45:36:c3:49:5e:1b:96:6b:8e:
ab:2f:bb:3e:8e:47:a1:71:80:16:f4:ad:b7:1a:d3:ad:04:1b:
a0:b8:8f:68:46:b5:bd:cc:89:ff:5c:72:b1:fe:e2:37:6b:bd:
36:f0:d5:62:6c:d4:f9:f0:a1:d8:65:be:8c:e1:6c:80:de:8c:
d3:a1:0e:a9:71:cc:c2:18:f1:e4:19:6a:57:58:6c:87:06:5d:
80:9b:68:9b:3f:82:2b:cc:99:1f:0e:94:34:74:92:ab:5f:71:
56:3d:b8:a6:d5:7f:7a:32:d1:4a:4b:2c:85:5b:96:29:da:03:
9c:5c:50:2e:98:ff:cb:e9:8d:c7:01:06:5e:83:d4:65:8e:80:
ed:d8:ef:2a:33:91:d6:07:6c:7a:48:5c:18:07:19:37:cd:df:
2e:1e:69:c0:8b:bb:1a:6a:68:5b:b9:9a:2e:7c:d0:98:45:68:
54:b3:df:dd:f3:c4:ea:8d:5f:44:14:8c:2b:a4:28:37:26:f8:
96:e6:de:3f:05:06:e4:09:52:9e:5e:02:7a:d2:41:f6:ae:63:
ff:40:9b:60:0b:71:5d:01:3a:19:c1:4d:e3:0c:5b:a3:ed:39:
d0:d4:22:f7:e5:04:78:34:09:64:d4:94:95:34:c5:d6:16:03:
2b:37:b4:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD15NltJk2qlvFNAxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDQwNTA0MDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2MzNWU5M2UtNjhjZS00ZjliLTk4NjktMTMyMTY4NTRkZjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11MKxjae5C1ZpGgUn6j+1UAjTrf4Em1gKzVT
O+xlg7zdHtd3Xis8jYWLR4qnKZUZMu9wKHBmFttlIQ3WtbRNXaEWu/KvhFXYzFIS
/u3alQya6dYiZ1sm6WunA7GDxHfp3w6oHtGDfkPYuhsnrzuq7xs2Wse2KUDiHC8Q
ulUntuyLj+yeb3xVAJ/xjXyoT4fqk6Ne6zYIofHWv0s9myMMt5cOzLjkl41HYqiT
FwujAQJQ+MoOrimJpgO25xPYfbfJr51rVGmY8ywP6UYToFhhlZ7iua5SURlzP6ES
XEHqIEW9OzhffImqARoz5UgqKPkDIHHTSAh5fdn0wNA+ZSIuLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSqcXAJGKJP3FXdwghj+1QeIkfvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjM1NTE2MTEtNmM3ZS0z
MDViLTkyNDUtNmZjNTYyMDU5ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaH9GGZmU+ye0U2w0leG5Zrjqsvuz6OR6FxgBb0rbca060EG6C4j2hG
tb3Mif9ccrH+4jdrvTbw1WJs1PnwodhlvozhbIDejNOhDqlxzMIY8eQZaldYbIcG
XYCbaJs/givMmR8OlDR0kqtfcVY9uKbVf3oy0UpLLIVblinaA5xcUC6Y/8vpjccB
Bl6D1GWOgO3Y7yozkdYHbHpIXBgHGTfN3y4eacCLuxpqaFu5mi580JhFaFSz393z
xOqNX0QUjCukKDcm+Jbm3j8FBuQJUp5eAnrSQfauY/9Am2ALcV0BOhnBTeMMW6Pt
OdDUIvflBHg0CWTUlJU0xdYWAys3tLQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:49 2023 by rpki-client on console-fra.rpki-client.org