Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/b555a54f-50a4-3190-8671-d4a1bbe9b20c.roa
File: b555a54f-50a4-3190-8671-d4a1bbe9b20c.roa (raw, json)
Hash identifier: G1jX2f4v9cIYSuBJSr8+lYwiDcum7ZwHm9GLwYr5DCE=
Subject key identifier: BD:49:88:CF:86:52:10:CC:93:F9:CB:EB:5C:B2:20:79:9D:35:C8:2C
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F43285843EF220E1F8305814321776380
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/b555a54f-50a4-3190-8671-d4a1bbe9b20c.roa
Signing time: Sat 18 Nov 2023 23:59:01 +0000
ROA not before: Sat 18 Nov 2023 23:59:01 +0000
ROA not after: Fri 16 Feb 2024 23:59:01 +0000
asID: 1004
IP address blocks: 198.186.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ef:22:0e:1f:83:05:81:43:21:77:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Nov 18 23:59:01 2023 GMT
Not After : Feb 16 23:59:01 2024 GMT
Subject: CN=435336c0-6c1c-4649-a4aa-279d93388880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:dd:58:30:ab:e5:43:51:d4:ea:a4:bf:64:
9e:37:5d:9e:b4:a1:58:6b:6b:ec:c3:be:f9:46:5b:
00:61:70:b8:df:5d:cd:de:fb:15:4b:3b:0f:d9:a3:
f7:aa:88:7a:d5:6e:91:e1:e3:ee:81:f5:a7:f0:58:
f5:29:4b:e9:6d:a4:00:f9:bd:76:48:b3:8d:6e:a7:
d2:70:cb:ba:ac:0f:ef:b0:d0:c1:20:c5:d6:83:c9:
3c:f4:5f:e2:8a:94:5d:24:a5:04:57:17:f0:89:53:
23:2b:86:4c:cf:cc:7b:2d:8f:93:5e:53:8c:95:ae:
74:e8:09:eb:d7:40:08:02:84:8a:b7:b6:f6:5a:de:
ae:a9:92:ce:f3:96:61:24:65:09:8e:f6:67:7e:9b:
c3:a5:f0:ff:b7:b7:4b:b5:15:09:aa:c1:75:a6:0c:
a7:52:ea:b8:29:ad:52:e2:37:85:03:5a:14:76:b9:
76:4c:8d:be:51:7b:6d:35:f1:f6:33:43:a7:ee:f6:
0a:b3:4d:6e:20:2b:34:1a:32:12:2c:6f:fd:c2:d7:
62:28:d9:9b:02:ed:20:de:66:af:48:e3:b3:7c:3c:
68:e0:66:ed:75:92:b8:0b:b1:e5:90:25:ed:41:f1:
3a:c5:cc:c1:ab:4e:3e:ea:0d:52:84:fb:54:3c:d7:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:88:CF:86:52:10:CC:93:F9:CB:EB:5C:B2:20:79:9D:35:C8:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/b555a54f-50a4-3190-8671-d4a1bbe9b20c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
198.186.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:55:2c:e4:75:47:8b:79:1f:59:d5:f9:1c:cd:87:e4:cf:12:
06:6b:c0:eb:15:33:43:4f:67:59:5d:73:9f:84:ad:9a:8b:c3:
bc:2b:c8:5a:b8:59:e0:50:5a:88:53:49:0c:61:de:22:5d:b2:
5f:2a:60:97:d7:21:87:8a:6f:a3:b4:48:0d:b4:ca:a0:e0:74:
7d:ad:7a:7d:f6:9e:db:45:d9:a9:85:c5:a5:7e:c1:c2:ec:78:
84:c2:30:59:95:3f:be:d7:bf:f3:b1:c0:12:95:22:dd:d9:c4:
70:9a:a9:ce:a9:15:b1:fc:54:e1:f9:8b:59:90:2e:89:13:97:
d1:0c:71:13:a1:28:bf:8f:dc:9d:08:2c:4e:8e:5a:5f:be:00:
b3:fd:1d:aa:12:bf:d8:ed:7e:52:c2:5a:77:a3:0d:29:44:62:
3d:25:a7:89:c4:72:74:63:a4:25:9c:20:d6:45:1a:07:44:87:
4c:67:92:18:25:53:6d:4f:99:88:43:fc:7e:f7:f3:2d:57:1d:
bd:47:d8:5d:3f:94:44:cc:92:24:03:83:72:bf:56:25:f9:32:
e2:d8:65:3e:ec:fa:fa:45:9c:6b:78:b9:33:20:3d:55:05:1c:
41:06:f8:64:3c:b0:2e:22:18:1e:7d:6a:b3:af:bf:c4:64:06:
a0:c5:d9:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPvIg4fgwWBQyF3Y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTIzMTExODIzNTkwMVoXDTI0MDIxNjIzNTkwMVowLzEtMCsGA1UEAxMk
NDM1MzM2YzAtNmMxYy00NjQ5LWE0YWEtMjc5ZDkzMzg4ODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPndWDCr5UNR1Oqkv2SeN12etKFYa2vsw775
RlsAYXC4313N3vsVSzsP2aP3qoh61W6R4ePugfWn8Fj1KUvpbaQA+b12SLONbqfS
cMu6rA/vsNDBIMXWg8k89F/iipRdJKUEVxfwiVMjK4ZMz8x7LY+TXlOMla506Anr
10AIAoSKt7b2Wt6uqZLO85ZhJGUJjvZnfpvDpfD/t7dLtRUJqsF1pgynUuq4Ka1S
4jeFA1oUdrl2TI2+UXttNfH2M0On7vYKs01uICs0GjISLG/9wtdiKNmbAu0g3mav
SOOzfDxo4GbtdZK4C7HlkCXtQfE6xczBq04+6g1ShPtUPNf/gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1JiM+GUhDMk/nL61yyIHmdNcgsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvYjU1NWE1NGYtNTBhNC0z
MTkwLTg2NzEtZDRhMWJiZTliMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtVLOR1R4t5H1nV+RzNh+TPEgZrwOsVM0NPZ1ldc5+ErZqLw7wryFq4
WeBQWohTSQxh3iJdsl8qYJfXIYeKb6O0SA20yqDgdH2ten32nttF2amFxaV+wcLs
eITCMFmVP77Xv/OxwBKVIt3ZxHCaqc6pFbH8VOH5i1mQLokTl9EMcROhKL+P3J0I
LE6OWl++ALP9HaoSv9jtflLCWnejDSlEYj0lp4nEcnRjpCWcINZFGgdEh0xnkhgl
U21PmYhD/H738y1XHb1H2F0/lETMkiQDg3K/ViX5MuLYZT7s+vpFnGt4uTMgPVUF
HEEG+GQ8sC4iGB59arOvv8RkBqDF2Q8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org