Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9021811-37e0-3695-b688-c0d61c1f7f8e.roa
File: b9021811-37e0-3695-b688-c0d61c1f7f8e.roa (raw, json)
Hash identifier: oLXiQNmFRqrrznwmxZg40yfMGVVOa9wgjbqmXKz+IBM=
Subject key identifier: C7:DA:EE:C4:C6:F7:FA:F9:B5:4A:D9:42:2E:31:52:E6:18:00:E0:A5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858421A3D9483E6D79B412B50BC00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9021811-37e0-3695-b688-c0d61c1f7f8e.roa
Signing time: Sun 04 Jun 2023 01:00:17 +0000
ROA not before: Sun 04 Jun 2023 01:00:17 +0000
ROA not after: Sat 02 Sep 2023 01:00:17 +0000
asID: 40676
IP address blocks: 172.94.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:1a:3d:94:83:e6:d7:9b:41:2b:50:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 4 01:00:17 2023 GMT
Not After : Sep 2 01:00:17 2023 GMT
Subject: CN=c9960f09-b3a7-48ac-8d01-536c5ce8c963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:20:65:54:97:95:ad:c4:93:b2:02:2a:00:
0e:90:9f:1a:02:0e:4b:ca:0b:b0:a4:8e:10:e4:81:
0c:b5:31:ec:10:b6:5b:98:ec:95:4a:29:38:6c:43:
11:cf:87:7a:7b:40:a0:9c:dc:35:ea:78:a4:e4:14:
87:18:7a:83:a5:61:43:84:c7:e0:7b:76:5a:1b:7a:
7d:68:ce:f9:f8:5b:d3:13:29:19:c3:d3:b2:43:87:
6a:8a:c7:a0:04:8c:77:12:72:3c:1b:a6:be:de:dc:
79:73:e5:18:22:6f:bf:a3:54:67:3a:1e:03:63:19:
59:ce:76:a2:dd:df:83:23:4b:36:e2:4a:8d:c9:b2:
ec:b3:ce:40:db:82:d1:8e:94:93:14:db:a5:f7:8e:
5c:28:97:f3:16:bb:10:a1:c9:e9:6f:42:e2:f0:de:
46:5c:39:b4:0a:64:2b:fc:0a:ad:be:42:38:d0:69:
8b:fb:80:df:5b:a6:2f:0a:d2:ff:74:b4:06:a9:f1:
13:33:5f:e1:64:82:ac:e4:5d:86:5f:03:8c:ab:ab:
89:dc:73:c6:87:d8:71:c1:92:78:54:59:cc:9f:be:
3c:89:a7:6c:9a:88:86:1a:6b:fd:ab:34:ac:9c:00:
ed:bd:cd:76:1b:36:0b:bf:a6:c7:b1:e5:25:cc:41:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:EE:C4:C6:F7:FA:F9:B5:4A:D9:42:2E:31:52:E6:18:00:E0:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9021811-37e0-3695-b688-c0d61c1f7f8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:b7:1f:cb:16:26:09:e5:8e:df:61:a0:33:63:b9:91:fc:34:
02:b0:e5:79:e6:9c:cc:87:44:6d:99:26:10:1b:09:85:61:76:
31:3b:d3:a1:09:c0:a3:cb:5c:85:6d:fa:9e:3d:07:a4:36:4d:
14:1a:15:48:7c:45:95:0a:2a:be:d9:70:4a:ea:cc:d5:4b:0c:
4f:e1:2e:0b:dc:c8:d1:95:bf:5c:35:ab:8b:fa:af:1e:d8:eb:
44:c0:c8:14:b6:51:e1:5e:4c:b9:39:61:e6:98:7f:dc:73:e6:
9d:c7:7b:bf:3d:97:83:b4:a7:17:b7:06:35:90:80:5e:41:4f:
74:fa:18:ac:e6:5d:d6:9c:62:8c:66:a1:d1:9c:51:c4:81:94:
c1:92:4f:96:48:47:ca:55:94:1e:7e:6b:d1:ea:b9:d1:2f:cc:
a1:e1:ed:3c:c9:a5:56:09:e7:db:25:16:50:51:64:a1:61:7b:
c2:a8:34:6a:6a:11:52:ec:cd:8a:fe:d4:59:a6:3c:8c:35:7a:
38:99:52:39:27:cc:0b:4c:e1:c6:37:2a:f6:bb:24:ea:69:1b:
9f:7f:9b:e8:7e:b4:c2:0f:14:c9:aa:81:4a:fe:b0:1c:f2:e8:
49:aa:12:cf:d0:1c:52:1d:f4:75:15:1e:af:77:a2:df:6b:34:
d6:2f:a4:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIaPZSD5tebQStQvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDYwNDAxMDAxN1oXDTIzMDkwMjAxMDAxN1owLzEtMCsGA1UEAxMk
Yzk5NjBmMDktYjNhNy00OGFjLThkMDEtNTM2YzVjZThjOTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN4gZVSXla3Ek7ICKgAOkJ8aAg5LyguwpI4Q
5IEMtTHsELZbmOyVSik4bEMRz4d6e0CgnNw16nik5BSHGHqDpWFDhMfge3ZaG3p9
aM75+FvTEykZw9OyQ4dqisegBIx3EnI8G6a+3tx5c+UYIm+/o1RnOh4DYxlZznai
3d+DI0s24kqNybLss85A24LRjpSTFNul945cKJfzFrsQocnpb0Li8N5GXDm0CmQr
/AqtvkI40GmL+4DfW6YvCtL/dLQGqfETM1/hZIKs5F2GXwOMq6uJ3HPGh9hxwZJ4
VFnMn748iadsmoiGGmv9qzSsnADtvc12GzYLv6bHseUlzEE38wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfa7sTG9/r5tUrZQi4xUuYYAOClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjkwMjE4MTEtMzdlMC0z
Njk1LWI2ODgtYzBkNjFjMWY3ZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu3H8sWJgnljt9hoDNjuZH8NAKw5XnmnMyHRG2ZJhAbCYVhdjE706EJ
wKPLXIVt+p49B6Q2TRQaFUh8RZUKKr7ZcErqzNVLDE/hLgvcyNGVv1w1q4v6rx7Y
60TAyBS2UeFeTLk5YeaYf9xz5p3He789l4O0pxe3BjWQgF5BT3T6GKzmXdacYoxm
odGcUcSBlMGST5ZIR8pVlB5+a9HqudEvzKHh7TzJpVYJ59slFlBRZKFhe8KoNGpq
EVLszYr+1FmmPIw1ejiZUjknzAtM4cY3Kva7JOppG59/m+h+tMIPFMmqgUr+sBzy
6EmqEs/QHFId9HUVHq93ot9rNNYvpJI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org