Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa
File: 1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa (raw, json)
Hash identifier: +M5f/rWohk/EEwqTgiAjVJxQf+BaLVKzDdafI2CSHrw=
Subject key identifier: 39:8E:63:A6:1F:16:88:72:D9:8D:EB:3F:5E:85:33:A5:5D:03:67:70
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285839626BCC977817DD1DE13BAA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Thu 29 Jun 2023 04:00:00 +0000
asID: 2914
IP address blocks: 129.250.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:62:6b:cc:97:78:17:dd:1d:e1:3b:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Jun 29 04:00:00 2023 GMT
Subject: CN=02f0f672-452c-4fcc-901c-bacd8693d387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:82:a7:cc:da:4e:d0:a9:63:76:54:ff:25:
cf:78:0d:1a:0d:b6:93:ca:38:ce:b4:39:4c:f3:bb:
0e:07:96:ca:91:f1:ab:68:48:2e:5c:5d:a4:29:80:
79:e1:ed:c0:d4:b6:de:a0:f8:2a:bc:89:df:c2:61:
ae:2c:7c:16:dc:76:d2:1e:b2:60:c6:67:85:d7:d2:
9b:20:28:62:4c:99:29:e5:8b:d0:c8:38:9d:a7:c7:
12:6e:b3:18:c9:7f:d1:13:ac:c1:bf:e4:5d:0b:89:
bf:cd:a0:90:e1:73:72:ad:de:7f:21:7a:de:96:03:
5f:e9:57:66:e7:e0:01:46:f7:2b:9b:e7:20:48:9b:
8a:d8:29:8f:91:a5:53:4d:b7:fa:bb:d2:11:a6:f8:
e3:b5:a9:7d:9c:9e:eb:64:0d:41:51:6d:77:11:53:
85:64:71:8c:7e:bc:f7:e2:ab:b3:f4:7e:d5:c3:16:
a1:70:0f:90:f4:44:9b:9d:15:8c:9e:8a:41:78:52:
0a:8b:25:4a:e4:32:32:86:ba:4b:c9:40:9c:65:b7:
50:5d:7b:89:28:06:79:66:4a:1a:a9:bf:34:e6:36:
de:0e:e5:de:21:a8:43:4b:d6:68:2a:5b:72:d4:3d:
83:c1:83:b0:de:46:ca:4a:b8:0f:91:6b:5c:36:2d:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:63:A6:1F:16:88:72:D9:8D:EB:3F:5E:85:33:A5:5D:03:67:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:a6:17:83:55:0d:50:72:de:f3:61:9c:11:4f:62:d2:95:1a:
63:66:61:30:3e:83:54:ea:dd:11:d7:e8:68:53:a3:d1:67:0c:
23:9b:a5:08:e7:24:d1:c6:0e:45:26:fd:99:23:2a:20:14:63:
6e:2c:6d:00:06:c1:d7:26:22:61:60:c1:d1:7c:36:79:15:d0:
8c:57:3b:a0:05:41:2e:51:c5:bc:72:ce:c7:0f:27:ad:91:e4:
c8:64:b2:96:29:55:3e:57:45:e8:05:f0:70:23:5a:59:7f:e0:
ca:a7:ab:42:4a:a7:6f:73:1a:43:2f:19:7e:53:df:f2:22:71:
19:e2:a6:3b:4a:20:b6:39:18:43:b5:b2:7d:b9:1e:e7:51:1c:
a4:ba:56:e2:04:75:fa:7e:d4:0f:6c:55:6d:61:d1:a1:2e:11:
cb:78:b7:e3:ea:3f:a8:dd:0b:4f:2a:df:71:e6:38:c0:20:f7:
d4:d9:32:f5:2f:a7:79:a5:a5:17:01:de:2d:cd:e4:a8:dd:d1:
a2:e3:be:5e:31:82:1d:26:36:2c:91:bd:1f:1d:5a:60:f6:f4:
a6:0d:56:95:b8:e2:fd:28:a7:bd:d9:b0:fa:2e:be:b1:7d:c5:
ed:7f:37:19:18:f1:3d:e4:b8:b8:ae:1f:0e:fd:26:6a:dc:21:
b9:c7:e7:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDlia8yXeBfdHeE7qgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDA0MDAwMFoXDTIzMDYyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MDJmMGY2NzItNDUyYy00ZmNjLTkwMWMtYmFjZDg2OTNkMzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF+Cp8zaTtCpY3ZU/yXPeA0aDbaTyjjOtDlM
87sOB5bKkfGraEguXF2kKYB54e3A1LbeoPgqvInfwmGuLHwW3HbSHrJgxmeF19Kb
IChiTJkp5YvQyDidp8cSbrMYyX/RE6zBv+RdC4m/zaCQ4XNyrd5/IXrelgNf6Vdm
5+ABRvcrm+cgSJuK2CmPkaVTTbf6u9IRpvjjtal9nJ7rZA1BUW13EVOFZHGMfrz3
4quz9H7VwxahcA+Q9ESbnRWMnopBeFIKiyVK5DIyhrpLyUCcZbdQXXuJKAZ5Zkoa
qb805jbeDuXeIahDS9ZoKlty1D2DwYOw3kbKSrgPkWtcNi3U1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmOY6YfFohy2Y3rP16FM6VdA2dwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWQ1Y2YzMzItODQwMy0z
ZDdkLWI5YTMtYmNkZWFjZGVlMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+mF4NVDVBy3vNhnBFPYtKVGmNmYTA+g1Tq3RHX6GhTo9FnDCObpQjn
JNHGDkUm/ZkjKiAUY24sbQAGwdcmImFgwdF8NnkV0IxXO6AFQS5RxbxyzscPJ62R
5MhkspYpVT5XRegF8HAjWll/4Mqnq0JKp29zGkMvGX5T3/IicRnipjtKILY5GEO1
sn25HudRHKS6VuIEdfp+1A9sVW1h0aEuEct4t+PqP6jdC08q33HmOMAg99TZMvUv
p3mlpRcB3i3N5Kjd0aLjvl4xgh0mNiyRvR8dWmD29KYNVpW44v0op73ZsPouvrF9
xe1/NxkY8T3kuLiuHw79JmrcIbnH50E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:16 2024 by rpki-client on console-fra.rpki-client.org