Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/570763d4-d4d8-3589-b6d7-4db1bae43d0e.roa
File: 570763d4-d4d8-3589-b6d7-4db1bae43d0e.roa (raw, json)
Hash identifier: psNBajx34MHVns8WDUrqArg0OEWw8oGxIMEX2cVCwpM=
Subject key identifier: 3F:6F:BC:BC:F3:3C:98:C6:59:47:8F:73:8F:EA:BE:37:04:F4:3C:AF
Certificate issuer: /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial: 010D0C9F43285845230F868EB1915FA6867334B6
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/570763d4-d4d8-3589-b6d7-4db1bae43d0e.roa
Signing time: Fri 08 Mar 2024 07:10:39 +0000
ROA not before: Fri 08 Mar 2024 07:10:39 +0000
ROA not after: Thu 06 Jun 2024 06:10:39 +0000
asID: 33548
IP address blocks: 209.54.32.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:23:0f:86:8e:b1:91:5f:a6:86:73:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
Validity
Not Before: Mar 8 07:10:39 2024 GMT
Not After : Jun 6 06:10:39 2024 GMT
Subject: CN=10cec862-8a55-4c2d-bddd-6e172c627cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:ac:15:76:0a:eb:f7:94:f6:54:c6:5e:8b:
cc:39:78:82:9d:0f:35:dd:27:03:7b:ff:96:07:8a:
c0:f8:d6:2a:02:1e:62:15:82:70:07:d4:99:f7:f8:
67:7c:f6:21:28:65:fe:55:f1:bd:87:7f:6b:a7:66:
5f:d2:90:20:2b:f7:05:a1:30:00:50:c6:f8:c3:7c:
a6:70:b9:60:38:dd:5d:2e:0a:ff:6c:ed:de:a6:12:
39:4c:f4:25:fd:12:fa:5a:bc:27:30:8f:30:9b:40:
96:e7:42:df:a0:85:87:b0:8c:a5:2c:ef:d5:b3:81:
0c:1d:7a:7a:75:6c:4a:1e:08:45:ef:eb:23:ef:16:
79:1a:72:8f:07:fd:b1:50:41:f0:86:cd:95:05:1d:
35:4d:b4:23:56:a4:08:d8:63:74:fc:cb:b0:99:4d:
13:08:c7:73:8b:cf:e4:a3:34:08:cf:72:f1:31:b3:
1c:bc:25:45:e4:2a:22:09:1f:f9:5f:ec:de:f6:04:
ee:c3:5d:e1:81:6d:dc:21:9e:6e:1e:02:b6:c2:b9:
33:97:55:6f:90:df:aa:9c:4d:66:54:78:5a:e9:ff:
40:00:2d:f8:4c:0a:22:e4:8e:23:bd:62:af:b7:ea:
e6:34:74:da:93:92:25:85:4a:71:0a:41:d0:d9:e4:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6F:BC:BC:F3:3C:98:C6:59:47:8F:73:8F:EA:BE:37:04:F4:3C:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/570763d4-d4d8-3589-b6d7-4db1bae43d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
X509v3 Authority Key Identifier:
keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:de:89:7f:93:f9:40:8a:bd:f3:82:55:14:94:92:46:41:d6:
86:13:c0:2c:be:b8:4d:d5:c7:a9:93:df:20:ed:7d:31:16:ee:
4f:cd:6d:d6:81:55:f5:7f:c2:b6:bf:e4:43:4d:5c:39:09:9c:
97:b5:f3:5b:0a:6b:a4:13:2f:4e:78:cc:41:96:b7:60:59:83:
05:0b:a0:87:26:40:67:ed:ec:7d:d9:24:1c:27:d2:50:f2:7a:
b8:22:7b:7f:4b:02:d9:ca:09:1d:cb:6e:db:10:00:3f:be:c7:
67:b6:c7:09:22:17:2e:8f:d9:f9:ab:25:45:1f:9c:c6:bd:ed:
0e:67:a6:18:22:a9:10:23:5b:fc:cf:07:7d:5b:ba:95:cc:a3:
c9:e0:99:72:b6:83:61:31:d0:90:f6:36:cf:1f:8b:5f:88:d0:
ad:e0:93:1e:36:b1:f8:f3:42:9b:e9:87:f3:2e:29:c2:5c:09:
f5:b0:df:88:5f:9f:2e:7e:dc:2b:7a:29:eb:42:0d:82:06:29:
81:c8:e2:0d:b5:be:64:4f:73:cd:f8:9a:62:a5:1a:97:d4:83:
7f:c1:ad:b5:c3:bb:ec:7f:32:60:0f:dc:59:d1:36:8a:f7:61:
5d:90:3a:32:ec:ac:10:ca:b7:58:da:3d:14:7c:f7:05:84:36:
df:5d:9a:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUjD4aOsZFfpoZzNLYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi
MDU2MB4XDTI0MDMwODA3MTAzOVoXDTI0MDYwNjA2MTAzOVowLzEtMCsGA1UEAxMk
MTBjZWM4NjItOGE1NS00YzJkLWJkZGQtNmUxNzJjNjI3Y2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFKsFXYK6/eU9lTGXovMOXiCnQ813ScDe/+W
B4rA+NYqAh5iFYJwB9SZ9/hnfPYhKGX+VfG9h39rp2Zf0pAgK/cFoTAAUMb4w3ym
cLlgON1dLgr/bO3ephI5TPQl/RL6WrwnMI8wm0CW50LfoIWHsIylLO/Vs4EMHXp6
dWxKHghF7+sj7xZ5GnKPB/2xUEHwhs2VBR01TbQjVqQI2GN0/MuwmU0TCMdzi8/k
ozQIz3LxMbMcvCVF5CoiCR/5X+ze9gTuw13hgW3cIZ5uHgK2wrkzl1VvkN+qnE1m
VHha6f9AAC34TAoi5I4jvWKvt+rmNHTak5IlhUpxCkHQ2eTs5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9vvLzzPJjGWUePc4/qvjcE9DyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3
ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvNTcwNzYzZDQtZDRkOC0z
NTg5LWI2ZDctNGRiMWJhZTQzZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh
YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2
YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5
OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDeiX+T+UCKvfOCVRSUkkZB1oYTwCy+uE3Vx6mT3yDtfTEW7k/NbdaB
VfV/wra/5ENNXDkJnJe181sKa6QTL054zEGWt2BZgwULoIcmQGft7H3ZJBwn0lDy
ergie39LAtnKCR3LbtsQAD++x2e2xwkiFy6P2fmrJUUfnMa97Q5nphgiqRAjW/zP
B31bupXMo8ngmXK2g2Ex0JD2Ns8fi1+I0K3gkx42sfjzQpvph/MuKcJcCfWw34hf
ny5+3Ct6KetCDYIGKYHI4g21vmRPc834mmKlGpfUg3/BrbXDu+x/MmAP3FnRNor3
YV2QOjLsrBDKt1jaPRR89wWENt9dmkg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:05 2024 by rpki-client on console-ams.rpki-client.org