Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/2b8ff9ff-6539-325b-bdc9-0796d45c8c70.roa
File: 2b8ff9ff-6539-325b-bdc9-0796d45c8c70.roa (raw, json)
Hash identifier: +mtkF31JStMf7bAKQvKKFOQt8PuQaNf5iSp6myEUq8M=
Subject key identifier: 54:AB:0C:19:12:84:84:B1:BC:C8:33:74:85:3A:38:D4:B1:62:17:1F
Certificate issuer: /CN=cb7393ae-ce6f-4290-b73b-77b4ab015a2b
Certificate serial: 010D0C9F432858450BBCA18CD0D68C268D05A780
Authority key identifier: 82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/2b8ff9ff-6539-325b-bdc9-0796d45c8c70.roa
Signing time: Wed 28 Feb 2024 22:40:02 +0000
ROA not before: Wed 28 Feb 2024 22:40:02 +0000
ROA not after: Tue 28 May 2024 21:40:02 +0000
asID: 16509
IP address blocks: 198.72.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:0b:bc:a1:8c:d0:d6:8c:26:8d:05:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7393ae-ce6f-4290-b73b-77b4ab015a2b
Validity
Not Before: Feb 28 22:40:02 2024 GMT
Not After : May 28 21:40:02 2024 GMT
Subject: CN=bf6b7e3e-617a-48d3-9481-c4a53975f159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:68:9c:b3:36:7c:78:82:d7:a6:09:f6:ca:
db:68:72:98:84:90:9b:82:eb:c8:ac:b7:4e:f6:55:
a0:5a:0a:86:3b:4c:57:97:cf:90:23:f1:57:8b:8b:
81:7c:fa:29:67:51:6a:49:9f:5b:c5:e6:85:9c:f2:
f7:66:65:73:96:d2:6f:77:14:ba:9a:a0:d2:da:35:
c4:f5:d7:83:34:49:57:9a:ed:94:e7:c2:09:71:63:
b8:71:be:04:29:96:12:44:62:07:97:92:14:bc:9c:
8a:e6:e4:e2:32:e9:24:72:5d:e5:cf:6f:41:72:da:
86:8d:d6:15:c3:18:d9:d3:44:08:02:b5:d1:f6:60:
68:a9:f3:12:45:e2:d1:ad:b4:f7:8e:24:b4:50:99:
1f:4b:cc:e7:9a:56:1a:b7:d7:01:ca:7d:f3:18:3b:
31:4b:df:13:2e:f1:73:b1:48:0b:91:71:a7:64:98:
25:1c:b0:e5:d9:3c:49:48:1a:20:48:30:b5:0d:92:
ba:5e:40:f4:8d:ef:39:10:d5:24:92:f8:fa:e8:96:
bd:d8:55:92:7b:fb:c0:99:ca:00:45:6d:17:5d:60:
b5:b6:f3:3c:14:87:79:d5:47:e0:91:b1:7c:f2:0a:
14:2d:9e:21:eb:3b:dc:41:e2:fb:85:b8:8c:95:33:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:0C:19:12:84:84:B1:BC:C8:33:74:85:3A:38:D4:B1:62:17:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/2b8ff9ff-6539-325b-bdc9-0796d45c8c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.crl
X509v3 Authority Key Identifier:
keyid:82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.72.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c2:ed:81:37:f0:84:66:f2:d5:ce:e4:d0:e4:df:18:df:ac:
cf:0d:64:3b:c3:6d:b1:f0:51:cf:e3:d7:1f:ed:e7:4e:1f:94:
50:80:ab:55:33:8b:08:ee:7b:89:76:e4:e5:b5:05:b4:14:44:
f8:8a:1a:04:87:73:af:7b:61:da:ab:e4:b9:ba:75:90:85:61:
5a:0a:b9:a9:80:f0:43:7c:38:6e:34:13:d7:d4:d1:59:48:10:
78:de:24:35:f4:2b:91:4d:31:96:ee:f2:92:d4:64:72:ee:fc:
f1:d8:53:c3:81:b2:e5:66:fa:de:44:c1:fa:d3:77:67:53:67:
e6:38:41:12:9f:fd:46:30:4f:cd:5d:cc:04:91:0a:67:56:e1:
70:e3:23:92:2a:6d:3b:d8:7f:51:e0:5e:1e:25:0e:46:ac:a0:
0d:9f:58:6b:cb:9d:5f:3f:cd:43:ec:d1:71:30:d4:9d:b1:b2:
fd:9f:43:06:ff:be:6c:23:bc:0c:64:b0:51:30:a7:ca:48:3d:
28:66:44:59:cb:7b:07:c9:f1:62:98:21:cf:d8:c7:25:7e:06:
4b:b8:c8:68:3b:ba:54:b6:cd:bf:24:38:b5:e9:d1:3c:a4:2f:
77:d4:1a:e5:e7:df:62:4c:a7:61:2a:dc:9d:ed:9e:da:ef:32:
d2:c3:43:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEULvKGM0NaMJo0Fp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I3MzkzYWUtY2U2Zi00MjkwLWI3M2ItNzdiNGFiMDE1
YTJiMB4XDTI0MDIyODIyNDAwMloXDTI0MDUyODIxNDAwMlowLzEtMCsGA1UEAxMk
YmY2YjdlM2UtNjE3YS00OGQzLTk0ODEtYzRhNTM5NzVmMTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL1onLM2fHiC16YJ9srbaHKYhJCbguvIrLdO
9lWgWgqGO0xXl8+QI/FXi4uBfPopZ1FqSZ9bxeaFnPL3ZmVzltJvdxS6mqDS2jXE
9deDNElXmu2U58IJcWO4cb4EKZYSRGIHl5IUvJyK5uTiMukkcl3lz29BctqGjdYV
wxjZ00QIArXR9mBoqfMSReLRrbT3jiS0UJkfS8znmlYat9cByn3zGDsxS98TLvFz
sUgLkXGnZJglHLDl2TxJSBogSDC1DZK6XkD0je85ENUkkvj66Ja92FWSe/vAmcoA
RW0XXWC1tvM8FId51UfgkbF88goULZ4h6zvcQeL7hbiMlTO6IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSrDBkShISxvMgzdIU6ONSxYhcfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYjcz
OTNhZS1jZTZmLTQyOTAtYjczYi03N2I0YWIwMTVhMmIvMmI4ZmY5ZmYtNjUzOS0z
MjViLWJkYzktMDc5NmQ0NWM4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2I3MzkzYWUtY2U2Zi00MjkwLWI3
M2ItNzdiNGFiMDE1YTJiL2NiNzM5M2FlLWNlNmYtNDI5MC1iNzNiLTc3YjRhYjAx
NWEyYi5jcmwwHwYDVR0jBBgwFoAUgj/psUFwlBvHhBogAiEromifZkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jYjczOTNhZS1jZTZmLTQyOTAtYjczYi03N2I0
YWIwMTVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExkhQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErC7YE38IRm8tXO5NDk3xjfrM8NZDvDbbHwUc/j1x/t504flFCAq1Uz
iwjue4l25OW1BbQURPiKGgSHc697Ydqr5Lm6dZCFYVoKuamA8EN8OG40E9fU0VlI
EHjeJDX0K5FNMZbu8pLUZHLu/PHYU8OBsuVm+t5EwfrTd2dTZ+Y4QRKf/UYwT81d
zASRCmdW4XDjI5IqbTvYf1HgXh4lDkasoA2fWGvLnV8/zUPs0XEw1J2xsv2fQwb/
vmwjvAxksFEwp8pIPShmRFnLewfJ8WKYIc/YxyV+Bku4yGg7ulS2zb8kOLXp0Tyk
L3fUGuXn32JMp2Eq3J3tntrvMtLDQxg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:12 2024 by rpki-client on console-fra.rpki-client.org