Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/efa0c2bf-bfb8-3856-a2c6-767590930aa8.roa
File: efa0c2bf-bfb8-3856-a2c6-767590930aa8.roa (raw, json)
Hash identifier: D5lMy2jT2Y/UM6C5Mo1eHOxQfDB2kfIWKpFGF4XYVAA=
Subject key identifier: 05:77:FA:78:F5:2B:0F:FB:2B:4D:EC:4F:92:A9:5E:0B:E2:C2:04:FD
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285841FA0CAA24E828EEDE6819BB80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/efa0c2bf-bfb8-3856-a2c6-767590930aa8.roa
Signing time: Tue 23 May 2023 12:15:56 +0000
ROA not before: Tue 23 May 2023 12:15:56 +0000
ROA not after: Mon 21 Aug 2023 12:15:56 +0000
asID: 9009
IP address blocks: 172.111.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:fa:0c:aa:24:e8:28:ee:de:68:19:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: May 23 12:15:56 2023 GMT
Not After : Aug 21 12:15:56 2023 GMT
Subject: CN=85b2a55a-763f-47f0-81e5-06a3ae1e9536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:23:c1:b4:d5:20:69:2d:c3:2b:e1:dd:9d:
96:4d:c4:84:17:aa:fc:07:4e:d6:11:7f:dc:f9:d7:
f7:df:68:9b:d9:82:73:8e:6d:75:79:a2:73:68:73:
10:c8:06:8d:82:5a:f9:c7:cc:ed:76:5f:59:40:73:
70:cf:ca:54:7f:5d:d8:a6:0e:06:12:83:ad:c3:54:
35:ae:eb:e9:0f:77:0e:53:c7:fd:bb:36:f6:fd:ee:
95:be:51:ca:d0:81:af:07:d2:15:a2:f1:70:ce:f4:
e7:c3:e9:80:f7:b9:5a:a2:aa:59:47:ed:c2:86:8e:
6e:12:bd:fc:40:3a:d6:d3:30:b8:77:84:33:a4:a4:
f8:c1:02:2c:a6:1d:6c:64:d0:72:1c:22:82:54:9d:
57:ef:e1:87:ce:5c:a5:f4:39:eb:7b:0b:63:da:66:
28:9c:8d:62:4f:db:43:62:b4:39:bd:36:a6:de:b3:
49:06:05:b1:80:8d:44:01:4e:fd:03:19:f2:5a:e6:
08:05:87:63:7c:9b:fd:70:64:bb:40:e1:2d:ad:ff:
85:0e:21:13:be:58:af:2a:07:f4:53:ac:50:b1:58:
81:ca:5e:29:df:0c:cf:c1:92:2e:2f:ee:48:ba:79:
73:30:75:9e:89:48:33:d1:1c:be:77:6f:16:55:a6:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:FA:78:F5:2B:0F:FB:2B:4D:EC:4F:92:A9:5E:0B:E2:C2:04:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/efa0c2bf-bfb8-3856-a2c6-767590930aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:08:e3:ae:2a:3e:c7:62:c7:d9:97:38:62:fc:2d:64:6b:c1:
6b:3d:46:20:40:75:33:8e:1e:82:eb:71:09:21:95:90:94:fa:
f0:77:fe:c3:1b:54:67:e0:fd:eb:40:53:e5:5f:02:77:84:2d:
8d:94:20:4b:26:f3:34:45:6d:7e:d6:0e:00:59:b2:6e:b9:76:
03:b3:24:0f:28:e0:94:85:ca:10:76:b8:6a:6c:fa:c3:88:dd:
fe:d4:a0:0e:73:3e:3c:2e:17:ab:7e:57:66:55:fc:9d:ff:3a:
42:77:30:d8:98:22:3b:85:ec:56:90:20:7a:35:c8:33:5b:0a:
eb:15:b8:b7:a0:e4:ac:62:db:ab:2c:87:1a:91:0f:2d:b6:57:
b3:a7:7e:9d:20:ed:50:f4:ab:7a:6a:e4:bc:1f:96:de:b3:fc:
b9:32:60:84:0f:cf:56:19:e4:f2:3f:c7:c4:2b:e3:9c:92:f4:
82:c4:53:1b:b2:25:19:29:80:69:87:76:ed:16:7a:1f:4d:07:
d1:f1:1d:75:5b:9e:31:9b:25:8a:af:fb:db:44:4e:da:2b:0c:
54:36:1a:fb:33:bf:51:ae:7b:99:75:6d:1e:4f:fe:71:92:f5:
92:6b:94:48:52:0d:06:1f:97:60:f4:01:1f:4d:7e:f5:de:18:
5c:a7:b5:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEH6DKok6Cju3mgZu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDUyMzEyMTU1NloXDTIzMDgyMTEyMTU1NlowLzEtMCsGA1UEAxMk
ODViMmE1NWEtNzYzZi00N2YwLTgxZTUtMDZhM2FlMWU5NTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTMjwbTVIGktwyvh3Z2WTcSEF6r8B07WEX/c
+df332ib2YJzjm11eaJzaHMQyAaNglr5x8ztdl9ZQHNwz8pUf13Ypg4GEoOtw1Q1
ruvpD3cOU8f9uzb2/e6VvlHK0IGvB9IVovFwzvTnw+mA97laoqpZR+3Cho5uEr38
QDrW0zC4d4QzpKT4wQIsph1sZNByHCKCVJ1X7+GHzlyl9Dnrewtj2mYonI1iT9tD
YrQ5vTam3rNJBgWxgI1EAU79AxnyWuYIBYdjfJv9cGS7QOEtrf+FDiETvlivKgf0
U6xQsViByl4p3wzPwZIuL+5IunlzMHWeiUgz0Ry+d28WVaZ1HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAV3+nj1Kw/7K03sT5KpXgviwgT9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWZhMGMyYmYtYmZiOC0z
ODU2LWEyYzYtNzY3NTkwOTMwYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAI464qPsdix9mXOGL8LWRrwWs9RiBAdTOOHoLrcQkhlZCU+vB3/sMb
VGfg/etAU+VfAneELY2UIEsm8zRFbX7WDgBZsm65dgOzJA8o4JSFyhB2uGps+sOI
3f7UoA5zPjwuF6t+V2ZV/J3/OkJ3MNiYIjuF7FaQIHo1yDNbCusVuLeg5Kxi26ss
hxqRDy22V7Onfp0g7VD0q3pq5Lwflt6z/LkyYIQPz1YZ5PI/x8Qr45yS9ILEUxuy
JRkpgGmHdu0Weh9NB9HxHXVbnjGbJYqv+9tETtorDFQ2Gvszv1Gue5l1bR5P/nGS
9ZJrlEhSDQYfl2D0AR9NfvXeGFyntbU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:48 2024 by rpki-client on console-ams.rpki-client.org