Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/7fef6765-f75f-363b-8f4f-fd6876d51b1c.roa
File: 7fef6765-f75f-363b-8f4f-fd6876d51b1c.roa (raw, json)
Hash identifier: 4JMcMdbFChBzBlXdCD3ZV2Gdn/lAH8IZA8x4GFB1wdE=
Subject key identifier: 94:7D:95:86:71:D7:F9:9C:0A:1A:0A:53:13:B4:E8:E2:56:D4:7B:D0
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F4328583A70B9C38FA2E71A3521A50F40
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/7fef6765-f75f-363b-8f4f-fd6876d51b1c.roa
Signing time: Thu 08 Oct 2020 04:00:00 +0000
ROA not before: Thu 08 Oct 2020 04:00:00 +0000
ROA not after: Wed 04 Oct 2023 04:00:00 +0000
asID: 1239
IP address blocks: 163.123.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:70:b9:c3:8f:a2:e7:1a:35:21:a5:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: Oct 8 04:00:00 2020 GMT
Not After : Oct 4 04:00:00 2023 GMT
Subject: CN=b0c96b9b-d19e-4e42-80e4-2fe6e7c89472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:f4:a6:b4:38:a7:bb:89:09:c7:86:0f:21:
75:7d:7a:63:2f:54:d7:36:ce:a9:40:81:0d:4a:c0:
2a:e1:4b:e7:d1:74:c4:4b:e8:e3:a5:2d:49:1f:43:
e3:81:ee:f0:d8:fe:02:bf:9d:40:6f:14:5b:3d:bf:
83:b1:70:3a:96:63:85:dd:22:a2:3a:d8:e9:15:1e:
5b:1f:4f:57:37:f8:ba:da:59:7b:19:9d:09:23:8f:
73:e9:b9:5b:26:28:1e:73:66:47:01:5a:9f:48:45:
ea:ed:f3:43:6b:d8:8a:85:8c:1a:d4:0e:5d:49:9d:
f0:ef:53:f5:14:be:cf:29:05:d9:93:d4:4b:ec:01:
bc:89:bc:9a:2b:44:48:5a:7e:13:94:e1:e1:90:af:
65:f0:9d:2b:24:82:be:14:0c:57:54:1e:9c:a9:5c:
9d:65:a8:c0:d0:f8:77:65:2a:4a:0f:86:7c:fb:97:
1b:c2:ee:c7:83:37:d0:fb:0c:2d:55:5b:bf:3d:9c:
11:1e:16:de:e5:14:ad:e7:79:f9:19:85:c7:7c:76:
22:2b:8a:24:cc:05:b3:6e:ff:bc:5c:46:96:4c:14:
d7:1b:1e:1e:14:71:c1:28:8a:4f:c3:c0:72:a4:c3:
4d:66:ac:2f:07:19:31:4b:d7:bb:d8:16:19:67:29:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:95:86:71:D7:F9:9C:0A:1A:0A:53:13:B4:E8:E2:56:D4:7B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/7fef6765-f75f-363b-8f4f-fd6876d51b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:34:54:bb:63:7b:54:2b:a7:b8:c7:0c:6d:28:e9:bb:ab:d6:
43:93:62:72:91:34:e0:b5:b0:ed:05:32:c2:87:5d:02:75:33:
fe:8b:90:c2:e2:b6:e4:b2:e3:6f:8c:f9:fe:1d:c7:ae:6c:76:
28:4c:cb:98:a7:44:92:36:5d:41:6a:e3:56:11:6b:f4:dc:b5:
64:5c:ac:0b:80:28:e1:99:dd:33:c6:66:e1:80:49:ea:dd:48:
ea:07:1c:02:cd:49:8b:ad:ed:ea:ab:a6:71:59:68:77:ae:38:
fc:d7:45:8b:72:39:a5:3f:64:b9:59:95:df:2b:63:dd:4e:1f:
21:82:98:33:90:c0:35:ff:f7:32:8b:67:a1:71:97:a6:ae:4b:
8e:8a:f5:93:ce:47:2d:78:6c:e2:2b:69:4b:11:a2:df:01:f0:
f1:75:ed:55:a5:fb:48:7b:8d:07:a3:d8:66:92:60:2c:69:76:
ce:6c:29:8f:1e:7e:fe:d1:a1:9c:17:6d:d7:36:2e:ef:15:39:
62:1d:04:d0:32:f2:7e:32:a3:ef:9f:a2:4c:1c:7e:c6:7f:b3:
06:41:ad:7c:63:0c:c1:ea:f7:16:40:1c:41:56:ca:17:b4:18:
e6:ee:1a:e9:52:98:fa:3b:d3:1a:f6:02:0c:08:08:13:51:2b:
5f:c4:67:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpwucOPoucaNSGlD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5
ZmUwMB4XDTIwMTAwODA0MDAwMFoXDTIzMTAwNDA0MDAwMFowLzEtMCsGA1UEAxMk
YjBjOTZiOWItZDE5ZS00ZTQyLTgwZTQtMmZlNmU3Yzg5NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sP0prQ4p7uJCceGDyF1fXpjL1TXNs6pQIEN
SsAq4Uvn0XTES+jjpS1JH0Pjge7w2P4Cv51AbxRbPb+DsXA6lmOF3SKiOtjpFR5b
H09XN/i62ll7GZ0JI49z6blbJigec2ZHAVqfSEXq7fNDa9iKhYwa1A5dSZ3w71P1
FL7PKQXZk9RL7AG8ibyaK0RIWn4TlOHhkK9l8J0rJIK+FAxXVB6cqVydZajA0Ph3
ZSpKD4Z8+5cbwu7HgzfQ+wwtVVu/PZwRHhbe5RSt53n5GYXHfHYiK4okzAWzbv+8
XEaWTBTXGx4eFHHBKIpPw8BypMNNZqwvBxkxS9e72BYZZynflwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJR9lYZx1/mcChoKUxO06OJW1HvQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1
NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvN2ZlZjY3NjUtZjc1Zi0z
NjNiLThmNGYtZmQ2ODc2ZDUxYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz
YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1
OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh
ZmMwNTlmZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3uaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG00VLtje1Qrp7jHDG0o6bur1kOTYnKRNOC1sO0FMsKHXQJ1M/6LkMLi
tuSy42+M+f4dx65sdihMy5inRJI2XUFq41YRa/TctWRcrAuAKOGZ3TPGZuGASerd
SOoHHALNSYut7eqrpnFZaHeuOPzXRYtyOaU/ZLlZld8rY91OHyGCmDOQwDX/9zKL
Z6Fxl6auS46K9ZPORy14bOIraUsRot8B8PF17VWl+0h7jQej2GaSYCxpds5sKY8e
fv7RoZwXbdc2Lu8VOWIdBNAy8n4yo++fokwcfsZ/swZBrXxjDMHq9xZAHEFWyhe0
GObuGulSmPo70xr2AgwICBNRK1/EZ34=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:22 2024 by rpki-client on console-ams.rpki-client.org