Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/610b3888-9aad-396e-a578-c227373e5860.roa
File: 610b3888-9aad-396e-a578-c227373e5860.roa (raw, json)
Hash identifier: BYErQWP8VaQTkfJJPWXokOrk+9PUXQFgKC4cTS6QkPU=
Subject key identifier: 83:7C:BA:F8:CF:55:6A:35:59:CC:4D:3D:8C:30:43:1A:E4:16:FB:FC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858442F940476D9616D4AA54075C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/610b3888-9aad-396e-a578-c227373e5860.roa
Signing time: Tue 12 Dec 2023 02:00:16 +0000
ROA not before: Tue 12 Dec 2023 02:00:16 +0000
ROA not after: Mon 11 Mar 2024 01:00:16 +0000
asID: 9009
IP address blocks: 104.250.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2f:94:04:76:d9:61:6d:4a:a5:40:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 12 02:00:16 2023 GMT
Not After : Mar 11 01:00:16 2024 GMT
Subject: CN=5e7c40b7-929f-4281-9277-1a7a9c5e133d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:af:e2:09:ef:7d:9c:5d:f5:dd:b8:4f:76:
fc:9a:e1:90:c3:f9:85:dd:b0:24:56:17:ad:f8:ff:
79:c4:d0:a9:1f:55:15:c3:72:1e:7b:d7:05:2c:27:
e0:f3:a4:36:1a:b9:34:25:0e:4e:d2:27:03:f9:b2:
60:df:c5:bb:cb:5a:d1:89:26:ef:a0:44:e7:03:4a:
ac:bc:d2:53:66:5e:66:88:06:67:d1:7e:82:5b:10:
10:1b:f7:62:97:8d:c1:d8:e2:f2:21:05:95:78:18:
f5:81:a6:7e:64:85:e4:32:94:d1:4a:bb:d6:03:dc:
cc:3a:a5:69:c6:50:c2:ba:7e:61:39:be:0a:7d:2c:
b1:4a:ec:8e:f8:7b:c2:79:17:c8:ab:58:be:ad:51:
9e:c3:a7:21:a3:89:1d:e2:06:a3:11:62:c4:f5:63:
4d:62:4a:33:d5:bb:b2:fe:f1:12:ea:17:18:16:1c:
6e:67:ce:70:4e:3b:50:92:fd:d9:fa:2a:8e:bd:96:
31:38:7f:96:1b:57:63:6c:90:b7:6e:84:0a:15:53:
f6:b4:8e:12:db:68:13:04:ae:07:c8:f6:d1:d6:3d:
19:19:ca:9e:7b:d3:57:04:37:26:67:86:01:0f:76:
5c:5c:f8:46:27:47:2a:71:83:f5:c9:8c:29:61:71:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:BA:F8:CF:55:6A:35:59:CC:4D:3D:8C:30:43:1A:E4:16:FB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/610b3888-9aad-396e-a578-c227373e5860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0a:6f:25:cb:97:fd:36:35:ce:aa:a6:22:35:03:ac:93:0c:
d5:be:3a:72:9d:ba:0e:3a:45:0e:c3:b4:9b:da:07:7a:0f:3c:
0a:4a:47:f4:89:fd:ed:79:50:c6:ed:29:72:50:3a:ac:76:82:
8e:ad:a4:e5:ea:78:bd:fe:b5:ad:05:7a:9b:6b:f7:7c:1a:65:
2c:52:6b:fc:df:da:44:f4:44:38:9e:1e:04:f8:a4:41:7c:3d:
5a:fd:41:40:d2:51:42:4c:75:d8:8f:f9:e2:89:46:38:8c:1b:
91:4c:7d:cd:3b:87:c2:74:51:93:d8:ae:e0:01:a8:ff:7b:c5:
28:9d:3d:f4:0a:21:96:bc:8d:48:e7:7a:03:06:31:fd:ed:c8:
6b:79:fe:88:14:4a:66:ab:0c:ec:48:c2:01:3f:d1:53:19:00:
db:33:c6:95:5c:61:50:eb:9a:c5:65:6b:d9:94:4c:7a:d8:ef:
a9:91:40:75:3b:6e:c8:ae:3b:68:26:00:f2:33:0f:74:d6:17:
17:ce:70:7a:99:31:64:2a:01:dc:0f:90:8e:e3:b8:a4:c6:7d:
b6:b3:06:8f:a4:78:96:09:7f:1c:04:16:54:7a:b9:40:98:41:
7c:14:9d:44:d4:1e:95:70:c3:db:3a:12:51:9f:31:3d:ec:ec:
d3:33:b1:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQvlAR22WFtSqVAdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMTIxMjAyMDAxNloXDTI0MDMxMTAxMDAxNlowLzEtMCsGA1UEAxMk
NWU3YzQwYjctOTI5Zi00MjgxLTkyNzctMWE3YTljNWUxMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+qv4gnvfZxd9d24T3b8muGQw/mF3bAkVhet
+P95xNCpH1UVw3Iee9cFLCfg86Q2Grk0JQ5O0icD+bJg38W7y1rRiSbvoETnA0qs
vNJTZl5miAZn0X6CWxAQG/dil43B2OLyIQWVeBj1gaZ+ZIXkMpTRSrvWA9zMOqVp
xlDCun5hOb4KfSyxSuyO+HvCeRfIq1i+rVGew6cho4kd4gajEWLE9WNNYkoz1buy
/vES6hcYFhxuZ85wTjtQkv3Z+iqOvZYxOH+WG1djbJC3boQKFVP2tI4S22gTBK4H
yPbR1j0ZGcqee9NXBDcmZ4YBD3ZcXPhGJ0cqcYP1yYwpYXEjTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIN8uvjPVWo1WcxNPYwwQxrkFvv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjEwYjM4ODgtOWFhZC0z
OTZlLWE1NzgtYzIyNzM3M2U1ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkKbyXLl/02Nc6qpiI1A6yTDNW+OnKdug46RQ7DtJvaB3oPPApKR/SJ
/e15UMbtKXJQOqx2go6tpOXqeL3+ta0Feptr93waZSxSa/zf2kT0RDieHgT4pEF8
PVr9QUDSUUJMddiP+eKJRjiMG5FMfc07h8J0UZPYruABqP97xSidPfQKIZa8jUjn
egMGMf3tyGt5/ogUSmarDOxIwgE/0VMZANszxpVcYVDrmsVla9mUTHrY76mRQHU7
bsiuO2gmAPIzD3TWFxfOcHqZMWQqAdwPkI7juKTGfbazBo+keJYJfxwEFlR6uUCY
QXwUnUTUHpVww9s6ElGfMT3s7NMzsQs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org