Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa
File: d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa (raw, json)
Hash identifier: RzrI0m1LP2yN8DwQOhw98JPM+sf+nmILOn9dzGtmAuc=
Subject key identifier: 60:5C:26:96:29:1B:C2:6E:F1:F2:77:3D:A6:14:0B:12:56:2E:BA:FF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584324D9EDF7D7D04BB26E0CDC20
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa
Signing time: Thu 07 Sep 2023 13:00:23 +0000
ROA not before: Thu 07 Sep 2023 13:00:23 +0000
ROA not after: Wed 06 Dec 2023 14:00:23 +0000
asID: 3223
IP address blocks: 45.74.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:24:d9:ed:f7:d7:d0:4b:b2:6e:0c:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 7 13:00:23 2023 GMT
Not After : Dec 6 14:00:23 2023 GMT
Subject: CN=629dc11f-f603-4175-bbdd-01418cce14f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:32:91:c4:4d:e3:73:2e:61:4a:fe:54:fe:
15:3f:4e:a3:e9:ae:f5:8e:ff:95:ed:69:3b:3c:12:
52:1e:41:41:48:27:1c:71:90:d8:4c:87:9a:cf:ac:
b7:2d:1f:9c:ee:5e:da:ef:73:cf:d0:24:1c:6a:d0:
e4:b8:17:66:ef:e3:b6:2a:6b:d2:3f:25:de:1c:67:
9d:fc:5b:97:27:35:69:9e:60:7f:d2:5a:5a:95:6b:
b6:26:73:98:6e:69:57:10:5a:78:9a:8a:e4:a1:33:
9b:89:67:76:1d:65:af:1a:1f:86:31:10:cd:15:41:
81:44:dc:87:3f:9b:e0:e1:f1:a9:78:4e:be:6e:13:
98:ff:71:c6:7c:ba:e0:5c:29:4a:85:db:c9:8b:5c:
29:c3:68:23:7a:c3:41:42:6c:aa:5d:bc:9f:e4:a0:
3a:60:fc:dc:ff:98:5d:d6:34:47:ab:20:ef:3b:d2:
8b:7d:49:14:34:98:a5:3a:ef:11:4b:8d:0c:3c:65:
73:00:75:a3:72:e3:53:92:16:da:08:10:3e:d6:e4:
5b:52:c0:09:7e:57:7c:2e:57:32:3a:b9:f1:81:ef:
48:1c:e4:d8:1d:91:6b:df:03:90:36:c9:08:d4:87:
34:54:e6:dc:30:12:74:a7:a9:71:4b:30:0f:d5:45:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:26:96:29:1B:C2:6E:F1:F2:77:3D:A6:14:0B:12:56:2E:BA:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1e734af-d75d-35b2-94ea-2d4e3f772b5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:88:ec:e8:03:87:19:05:07:79:3a:0b:f7:a9:a9:1b:1f:94:
49:c3:43:91:ad:56:c3:42:1d:56:87:1c:02:53:aa:94:92:ea:
5c:67:a7:01:c9:41:5a:f6:a5:25:12:a7:24:5a:60:85:3f:9d:
46:c0:b9:1c:86:51:85:cf:71:f6:37:7b:68:eb:61:c7:23:f0:
bf:2f:6c:e2:1a:45:44:8b:4a:a6:78:70:7c:9f:c6:d1:87:9f:
75:ef:8a:76:a6:4f:97:b2:af:2e:dd:f5:3c:5d:fb:0a:63:87:
64:56:58:2e:4c:ac:52:4e:9d:d9:68:4c:78:bd:03:f6:31:71:
bf:75:91:82:32:1b:bc:55:76:f6:fc:08:b4:30:88:16:e8:66:
8f:2b:7f:19:72:90:e4:01:16:c0:21:45:57:c7:f9:ee:f7:23:
2e:74:c3:d8:42:e3:00:1f:43:aa:b0:ed:60:48:d3:b8:2c:20:
7b:68:5a:30:ce:7b:7b:f7:5b:54:a3:b6:54:49:cf:6e:c2:ae:
a8:5b:78:1c:c6:0e:a6:ad:cd:f0:40:a4:87:64:65:de:9d:63:
22:82:52:ac:bd:40:20:58:af:73:fb:74:34:e9:c4:38:85:00:
e7:23:1a:01:38:82:d1:29:1a:85:c4:df:38:3b:d0:25:34:34:
a1:30:82:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMk2e3319BLsm4M3CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDkwNzEzMDAyM1oXDTIzMTIwNjE0MDAyM1owLzEtMCsGA1UEAxMk
NjI5ZGMxMWYtZjYwMy00MTc1LWJiZGQtMDE0MThjY2UxNGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY0ykcRN43MuYUr+VP4VP06j6a71jv+V7Wk7
PBJSHkFBSCcccZDYTIeaz6y3LR+c7l7a73PP0CQcatDkuBdm7+O2KmvSPyXeHGed
/FuXJzVpnmB/0lpalWu2JnOYbmlXEFp4morkoTObiWd2HWWvGh+GMRDNFUGBRNyH
P5vg4fGpeE6+bhOY/3HGfLrgXClKhdvJi1wpw2gjesNBQmyqXbyf5KA6YPzc/5hd
1jRHqyDvO9KLfUkUNJilOu8RS40MPGVzAHWjcuNTkhbaCBA+1uRbUsAJfld8Llcy
Ornxge9IHOTYHZFr3wOQNskI1Ic0VObcMBJ0p6lxSzAP1UXZgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBcJpYpG8Ju8fJ3PaYUCxJWLrr/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDFlNzM0YWYtZDc1ZC0z
NWIyLTk0ZWEtMmQ0ZTNmNzcyYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaI7OgDhxkFB3k6C/epqRsflEnDQ5GtVsNCHVaHHAJTqpSS6lxnpwHJ
QVr2pSUSpyRaYIU/nUbAuRyGUYXPcfY3e2jrYccj8L8vbOIaRUSLSqZ4cHyfxtGH
n3XvinamT5eyry7d9Txd+wpjh2RWWC5MrFJOndloTHi9A/Yxcb91kYIyG7xVdvb8
CLQwiBboZo8rfxlykOQBFsAhRVfH+e73Iy50w9hC4wAfQ6qw7WBI07gsIHtoWjDO
e3v3W1SjtlRJz27CrqhbeBzGDqatzfBApIdkZd6dYyKCUqy9QCBYr3P7dDTpxDiF
AOcjGgE4gtEpGoXE3zg70CU0NKEwgpg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:59 2024 by rpki-client on console-fra.rpki-client.org