Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/66e776ce-bef8-3400-bbb9-d421ff83bd02.roa
File: 66e776ce-bef8-3400-bbb9-d421ff83bd02.roa (raw, json)
Hash identifier: 8jYnqwFImC9isaKhhnPSb1iw1tQVh77xXxaIvsS1QAo=
Subject key identifier: 43:71:9B:52:2F:A5:72:9F:C4:8B:00:E8:12:75:D3:5A:6E:E8:31:68
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285842BC2940979C09BBC0DCA71F7E
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/66e776ce-bef8-3400-bbb9-d421ff83bd02.roa
Signing time: Tue 01 Aug 2023 01:00:17 +0000
ROA not before: Tue 01 Aug 2023 01:00:17 +0000
ROA not after: Mon 30 Oct 2023 01:00:17 +0000
asID: 9009
IP address blocks: 72.14.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bc:29:40:97:9c:09:bb:c0:dc:a7:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Aug 1 01:00:17 2023 GMT
Not After : Oct 30 01:00:17 2023 GMT
Subject: CN=ffeae41b-ef86-4769-b2c9-74890f6ba409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:03:4d:35:2a:48:99:c8:1d:8f:95:20:4f:
f7:dc:b7:e7:32:da:4e:82:01:8d:98:7d:29:54:e6:
c3:e2:72:ea:92:b4:d2:0e:b9:cf:15:68:cd:3d:97:
c8:d7:8c:38:c0:00:1e:45:58:b1:bf:b2:b1:70:71:
72:f2:b3:e4:ba:9d:48:ee:b4:66:57:a6:7d:e3:56:
48:14:08:33:cc:6f:6e:e6:ec:9f:2a:a6:d4:88:a9:
3a:1f:7e:40:69:c1:25:86:fb:aa:68:0d:e2:8d:c3:
a2:2a:9f:33:de:80:20:d0:27:33:a0:e3:33:ca:04:
af:4e:02:fc:08:79:d4:6a:28:99:78:0c:90:c0:9b:
df:f2:99:35:d9:b6:d0:4d:3d:cd:b1:60:5d:65:5a:
f4:d7:44:b3:40:7d:19:ce:12:1d:26:58:ac:1b:bb:
c8:5d:4a:7b:04:d6:a1:4e:be:bc:0b:e3:a2:c2:98:
1a:15:91:3a:3f:91:a4:0c:56:12:50:a7:54:e8:ee:
7e:c4:95:81:6f:73:75:a7:cc:f5:54:cc:37:4d:66:
7b:99:5f:c4:1d:40:d3:b2:55:62:fd:c9:69:3e:2d:
f2:b4:d9:27:8a:4d:ce:90:0a:53:a9:fe:ac:2f:9a:
a7:b0:9c:e2:3c:d7:04:f9:63:22:e2:f1:ab:00:38:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:9B:52:2F:A5:72:9F:C4:8B:00:E8:12:75:D3:5A:6E:E8:31:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/66e776ce-bef8-3400-bbb9-d421ff83bd02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:0f:41:ad:61:71:f3:d1:d2:a5:ba:0d:b0:1d:e1:e5:2e:f5:
89:5c:ac:a2:06:f5:2a:76:30:be:59:5b:74:f6:2a:60:a5:44:
b6:89:51:61:ee:8c:69:a9:b5:97:49:4f:3a:20:43:a6:f1:d4:
e3:36:74:63:8b:6c:26:36:65:f7:9e:1b:74:d0:c1:cc:fa:50:
1f:61:2e:94:55:7b:6f:bf:72:f0:b4:41:b9:a6:e7:f7:8d:6c:
52:43:e1:be:93:47:3d:c4:76:bd:6f:df:98:85:ed:7c:92:d8:
4c:e6:a9:53:61:83:e3:56:b6:c9:e7:6c:7c:1a:77:a7:22:9f:
97:2b:00:30:7c:67:81:62:9e:65:31:8d:7e:bf:ad:90:a7:71:
3d:09:e1:b9:6c:b3:55:46:ba:98:65:6a:e5:c4:4f:2f:d9:c1:
61:7b:99:d5:57:a6:78:e2:df:8e:b9:5d:15:24:51:ee:f9:c7:
62:86:29:49:c9:56:36:1e:7c:a3:5c:e6:22:20:48:d6:f0:45:
2f:e7:1b:35:8c:1a:ad:47:3b:62:8b:8b:ea:67:6e:c3:3d:b4:
82:85:6e:3b:3a:b7:82:2c:8c:e1:fc:a0:b8:5e:0a:c8:a5:3d:
38:d1:a0:e7:4d:5f:89:2f:d4:bd:d4:91:4a:ed:59:5d:fa:a5:
74:3f:af:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEK8KUCXnAm7wNynH34wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTIzMDgwMTAxMDAxN1oXDTIzMTAzMDAxMDAxN1owLzEtMCsGA1UEAxMk
ZmZlYWU0MWItZWY4Ni00NzY5LWIyYzktNzQ4OTBmNmJhNDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCADTTUqSJnIHY+VIE/33LfnMtpOggGNmH0p
VObD4nLqkrTSDrnPFWjNPZfI14w4wAAeRVixv7KxcHFy8rPkup1I7rRmV6Z941ZI
FAgzzG9u5uyfKqbUiKk6H35AacElhvuqaA3ijcOiKp8z3oAg0CczoOMzygSvTgL8
CHnUaiiZeAyQwJvf8pk12bbQTT3NsWBdZVr010SzQH0ZzhIdJlisG7vIXUp7BNah
Tr68C+OiwpgaFZE6P5GkDFYSUKdU6O5+xJWBb3N1p8z1VMw3TWZ7mV/EHUDTslVi
/clpPi3ytNknik3OkApTqf6sL5qnsJziPNcE+WMi4vGrADjHOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENxm1IvpXKfxIsA6BJ101pu6DFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNjZlNzc2Y2UtYmVmOC0z
NDAwLWJiYjktZDQyMWZmODNiZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8PQa1hcfPR0qW6DbAd4eUu9YlcrKIG9Sp2ML5ZW3T2KmClRLaJUWHu
jGmptZdJTzogQ6bx1OM2dGOLbCY2ZfeeG3TQwcz6UB9hLpRVe2+/cvC0Qbmm5/eN
bFJD4b6TRz3Edr1v35iF7XyS2EzmqVNhg+NWtsnnbHwad6cin5crADB8Z4FinmUx
jX6/rZCncT0J4blss1VGuphlauXETy/ZwWF7mdVXpnji3465XRUkUe75x2KGKUnJ
VjYefKNc5iIgSNbwRS/nGzWMGq1HO2KLi+pnbsM9tIKFbjs6t4IsjOH8oLheCsil
PTjRoOdNX4kv1L3UkUrtWV36pXQ/rxo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:48 2024 by rpki-client on console-ams.rpki-client.org