Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/616ad2b1-2732-3556-af6b-6c1d4e7cd681.roa
File: 616ad2b1-2732-3556-af6b-6c1d4e7cd681.roa (raw, json)
Hash identifier: Wq+rdYOxPzlDo/UV9jdKXq4aFOBkYtmB/ik0W8UWHDM=
Subject key identifier: EB:11:BD:BA:CC:CD:3D:5D:5A:34:47:3D:97:80:39:E0:36:B8:BD:9F
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F4328576D51CC73C042CFC1713716FD9B
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/616ad2b1-2732-3556-af6b-6c1d4e7cd681.roa
Signing time: Wed 01 Apr 2020 18:53:05 +0000
ROA not before: Wed 01 Apr 2020 04:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 394893
IP address blocks: 209.112.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:37:16:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Apr 1 04:00:00 2020 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=51bf558e-fd28-4374-a83f-5171e13d184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:14:fc:d2:d8:af:ce:0e:92:4c:ee:d8:86:
82:cf:5a:39:c4:65:71:d4:bb:61:50:f0:8c:63:a6:
89:66:7b:f9:3a:24:07:b3:1c:13:d4:31:43:a6:c4:
4d:82:7c:30:29:22:95:a7:77:d3:2e:01:eb:8f:63:
7d:a7:e4:8a:c5:77:9b:a9:13:69:54:dc:06:80:d4:
6d:f9:9a:ff:fe:09:3f:36:47:43:6b:c5:34:89:c8:
97:46:38:23:6a:3a:45:cd:3a:a2:86:1d:e6:e0:e1:
e6:70:86:d2:cc:3b:d8:ae:61:c5:3f:38:c3:5e:70:
fd:6c:f8:46:80:27:ae:5b:54:2e:17:9b:de:de:7e:
0c:02:3d:5e:9a:63:b1:06:21:5d:9f:47:a3:7f:34:
63:13:eb:a7:c9:f2:2c:23:09:e4:34:f2:8b:b8:99:
86:ec:e8:d9:cf:0a:e1:08:5e:3f:e0:2c:62:2d:0a:
84:15:51:92:26:99:ca:32:59:6c:c3:ed:d4:43:2a:
c7:73:10:9c:fe:9b:d9:7c:3a:cb:26:9f:e8:7c:1a:
28:2b:f7:34:1a:15:04:f4:14:de:51:89:2e:41:db:
80:b7:19:0a:43:3d:5c:18:4e:5a:71:ac:bf:cd:f1:
8f:4a:75:36:9c:70:77:b6:47:de:3e:48:a9:02:ac:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:BD:BA:CC:CD:3D:5D:5A:34:47:3D:97:80:39:E0:36:B8:BD:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/616ad2b1-2732-3556-af6b-6c1d4e7cd681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e1:01:73:27:df:73:52:73:13:86:a1:42:4a:1c:fd:91:c1:
4e:f3:1f:e2:9c:bd:51:53:1b:7e:59:03:16:be:3e:b5:c2:92:
75:50:98:fe:6c:8b:c1:34:30:af:cf:ce:c9:b2:15:d4:a8:b6:
0d:79:29:33:6a:b5:24:7c:ff:da:7f:94:75:14:0c:bb:d8:bd:
55:5b:ad:92:9d:92:c6:a5:50:99:25:0d:43:67:4a:64:1a:71:
f6:f1:e3:48:f0:d0:db:86:84:98:10:af:3b:42:f2:77:f1:43:
a6:8d:52:4e:19:b7:ab:b8:cf:ee:58:14:99:58:84:27:a7:6c:
ed:43:a9:f3:33:57:1e:e6:fc:9a:c6:5d:93:24:a1:08:9a:c5:
bf:c8:96:fb:5b:18:ab:e9:93:1e:bc:f6:71:2a:70:c1:33:7c:
0f:61:d0:16:58:fe:3d:b0:2e:f4:e1:7d:3e:c8:f4:1e:6e:a7:
b8:9e:6a:d5:f7:7a:31:18:20:47:e0:de:23:ce:12:e4:05:46:
f8:09:df:1e:43:f5:4e:91:0b:8f:74:e7:5c:af:29:1d:f2:6f:
e6:ab:a9:c0:10:4e:6e:c4:e4:a1:7a:21:51:5f:0e:25:78:c4:
57:b0:57:46:40:dd:e0:ad:da:0f:f4:ae:ad:83:d2:45:53:ed:
2d:3c:28:58
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcTcW/ZswCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2MyZWRi
NDAeFw0yMDA0MDEwNDAwMDBaFw0yMjA3MDUwNDAwMDBaMC8xLTArBgNVBAMTJDUx
YmY1NThlLWZkMjgtNDM3NC1hODNmLTUxNzFlMTNkMTg0YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOPUFPzS2K/ODpJM7tiGgs9aOcRlcdS7YVDwjGOm
iWZ7+TokB7McE9QxQ6bETYJ8MCkilad30y4B649jfafkisV3m6kTaVTcBoDUbfma
//4JPzZHQ2vFNInIl0Y4I2o6Rc06ooYd5uDh5nCG0sw72K5hxT84w15w/Wz4RoAn
rltULheb3t5+DAI9XppjsQYhXZ9Ho380YxPrp8nyLCMJ5DTyi7iZhuzo2c8K4Qhe
P+AsYi0KhBVRkiaZyjJZbMPt1EMqx3MQnP6b2Xw6yyaf6HwaKCv3NBoVBPQU3lGJ
LkHbgLcZCkM9XBhOWnGsv83xj0p1Npxwd7ZH3j5IqQKsYzsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTrEb26zM09XVo0Rz2XgDngNri9nzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2
ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJlZGI0LzYxNmFkMmIxLTI3MzItMzU1
Ni1hZjZiLTZjMWQ0ZTdjZDY4MS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1
LTU1NWIwN2MyZWRiNC8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVk
YjQuY3JsMB8GA1UdIwQYMBaAFOEjae3TcOlz0wAAZcE4/LftsnkGMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3
YzJlZGI0LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANFwbTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAiuEBcyffc1JzE4ahQkoc/ZHBTvMf4py9UVMbflkDFr4+tcKSdVCY/myLwTQw
r8/OybIV1Ki2DXkpM2q1JHz/2n+UdRQMu9i9VVutkp2SxqVQmSUNQ2dKZBpx9vHj
SPDQ24aEmBCvO0Lyd/FDpo1SThm3q7jP7lgUmViEJ6ds7UOp8zNXHub8msZdkySh
CJrFv8iW+1sYq+mTHrz2cSpwwTN8D2HQFlj+PbAu9OF9Psj0Hm6nuJ5q1fd6MRgg
R+DeI84S5AVG+AnfHkP1TpELj3TnXK8pHfJv5qupwBBObsTkoXohUV8OJXjEV7BX
RkDd4K3aD/SurYPSRVPtLTwoWA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:07 2023 by rpki-client on console-ams.rpki-client.org