Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0cfcb125-6b48-34ee-89be-48af36146dcc.roa
File: 0cfcb125-6b48-34ee-89be-48af36146dcc.roa (raw, json)
Hash identifier: f6PHX/QXvWG0WxJInUrhJHKrrlcUciTTgeTLUu2yuIk=
Subject key identifier: 3B:62:3B:02:20:21:DD:AF:A9:49:E4:C7:76:12:2F:B3:21:08:D2:F9
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285842460FE1AE594C56A661C6BC60
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0cfcb125-6b48-34ee-89be-48af36146dcc.roa
Signing time: Mon 19 Jun 2023 17:43:51 +0000
ROA not before: Mon 19 Jun 2023 17:43:51 +0000
ROA not after: Sun 17 Sep 2023 17:43:51 +0000
asID: 398465
IP address blocks: 72.14.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:46:0f:e1:ae:59:4c:56:a6:61:c6:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Jun 19 17:43:51 2023 GMT
Not After : Sep 17 17:43:51 2023 GMT
Subject: CN=c40e9a54-7b5b-4d72-9ebf-3f0c51df91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:45:83:bc:8c:f5:d7:d7:a2:cc:bf:48:58:
36:1c:ba:0b:c5:59:fe:0b:9f:65:54:a3:4b:1e:fc:
15:db:fc:8d:4a:75:36:81:86:4a:0e:77:27:ee:41:
91:cd:6d:98:13:15:39:2d:81:18:54:69:de:93:2c:
87:af:63:38:ad:06:f6:cc:dd:bb:c9:f3:b4:93:5c:
ad:7d:20:a9:c9:0a:2d:55:2d:09:05:97:52:d9:60:
d1:5e:09:f0:c1:89:07:6c:f1:74:8c:e4:d4:45:b3:
d7:ef:5c:85:0d:3c:d8:65:88:6d:19:57:5c:e9:c5:
ac:4e:9f:c3:92:71:b5:57:b2:48:b3:c9:55:4a:09:
5d:e1:c0:da:7e:99:13:51:92:01:94:fc:6e:09:97:
c3:a9:4a:ee:ec:e7:2f:df:d6:a2:f9:07:60:e6:e1:
07:1b:45:f0:e9:fc:e7:07:90:bd:47:8f:9d:ab:2c:
2b:96:5c:81:d7:31:81:63:2e:d7:c1:01:ae:47:f2:
59:49:04:b7:fa:ec:11:8f:fd:49:09:57:02:ca:f4:
d3:86:21:67:72:d7:e7:5d:bc:6a:e7:3e:56:14:1f:
1d:be:49:14:15:58:24:24:ba:22:b3:8a:7f:94:d2:
87:78:6f:00:bf:47:78:cd:80:16:fc:94:3f:05:26:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:62:3B:02:20:21:DD:AF:A9:49:E4:C7:76:12:2F:B3:21:08:D2:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0cfcb125-6b48-34ee-89be-48af36146dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b6:6d:ee:07:a4:f4:a2:f7:85:79:74:35:98:40:4d:72:29:
61:a1:58:71:07:7f:36:de:c8:af:d0:54:d0:fd:57:4b:31:37:
ca:f3:af:79:c1:09:1f:6c:5c:19:a6:1b:13:aa:aa:77:2a:64:
b4:b8:71:8e:f7:7f:35:a4:86:1e:f9:9f:00:93:45:cd:6d:9a:
ab:8d:16:f6:a0:9e:88:fb:14:94:03:21:7d:bc:59:b0:9f:5f:
f7:1f:ec:0f:0d:9d:56:de:d3:08:35:3a:8d:42:7e:83:92:72:
65:3b:fa:36:27:2a:b5:65:6d:a8:ed:c2:93:9a:ef:9e:cb:57:
6c:d9:d3:30:d2:7e:49:4d:1d:16:62:63:24:12:df:52:ac:a0:
04:c6:30:e8:11:f5:3b:01:29:ad:4b:4b:7c:12:86:db:ff:c7:
ec:f6:ca:ca:02:52:0e:56:1d:d4:bd:6c:3e:49:e6:a3:5a:f7:
66:0c:85:4a:1e:bc:72:1b:c5:4e:25:d5:f0:6f:97:7c:03:97:
c3:de:d3:d4:c2:e0:a7:38:21:d7:87:3e:af:52:00:50:4e:1a:
2b:50:37:ba:98:70:6b:8a:e9:72:a9:59:37:be:56:13:89:27:
b4:4a:d8:88:f6:f5:01:2d:a8:68:49:7d:b8:5d:ba:b0:c2:b3:
73:9d:c8:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJGD+GuWUxWpmHGvGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTIzMDYxOTE3NDM1MVoXDTIzMDkxNzE3NDM1MVowLzEtMCsGA1UEAxMk
YzQwZTlhNTQtN2I1Yi00ZDcyLTllYmYtM2YwYzUxZGY5MWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7ZFg7yM9dfXosy/SFg2HLoLxVn+C59lVKNL
HvwV2/yNSnU2gYZKDncn7kGRzW2YExU5LYEYVGnekyyHr2M4rQb2zN27yfO0k1yt
fSCpyQotVS0JBZdS2WDRXgnwwYkHbPF0jOTURbPX71yFDTzYZYhtGVdc6cWsTp/D
knG1V7JIs8lVSgld4cDafpkTUZIBlPxuCZfDqUru7Ocv39ai+Qdg5uEHG0Xw6fzn
B5C9R4+dqywrllyB1zGBYy7XwQGuR/JZSQS3+uwRj/1JCVcCyvTThiFnctfnXbxq
5z5WFB8dvkkUFVgkJLois4p/lNKHeG8Av0d4zYAW/JQ/BSYl3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtiOwIgId2vqUnkx3YSL7MhCNL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMGNmY2IxMjUtNmI0OC0z
NGVlLTg5YmUtNDhhZjM2MTQ2ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq2be4HpPSi94V5dDWYQE1yKWGhWHEHfzbeyK/QVND9V0sxN8rzr3nB
CR9sXBmmGxOqqncqZLS4cY73fzWkhh75nwCTRc1tmquNFvagnoj7FJQDIX28WbCf
X/cf7A8NnVbe0wg1Oo1CfoOScmU7+jYnKrVlbajtwpOa757LV2zZ0zDSfklNHRZi
YyQS31KsoATGMOgR9TsBKa1LS3wShtv/x+z2ysoCUg5WHdS9bD5J5qNa92YMhUoe
vHIbxU4l1fBvl3wDl8Pe09TC4Kc4IdeHPq9SAFBOGitQN7qYcGuK6XKpWTe+VhOJ
J7RK2Ij29QEtqGhJfbhdurDCs3OdyFU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:20 2024 by rpki-client on console-ams.rpki-client.org