Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/ca3eccba-8f0b-3ed3-9ed6-9e22ca8bba41.roa
File: ca3eccba-8f0b-3ed3-9ed6-9e22ca8bba41.roa (raw, json)
Hash identifier: pMYOVoGTn0dPH8NAs+ZuyPFCV2QxeKtK6A0zjANAqDc=
Subject key identifier: A5:7E:D2:A3:AD:CC:E0:7C:D5:3C:08:5E:78:89:60:A6:7C:50:44:DE
Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial: 010D0C9F4328583CA538BD9222C75655BE696C00
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/ca3eccba-8f0b-3ed3-9ed6-9e22ca8bba41.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 400212
IP address blocks: 63.133.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a5:38:bd:92:22:c7:56:55:be:69:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=e19cd0cb-d620-4462-a989-a909aa325076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:a0:e3:1a:7d:1f:0f:ad:d5:57:65:76:a6:
52:06:e3:dc:ef:25:61:bc:0a:da:d9:0d:41:1a:0e:
46:0f:30:76:b1:58:57:94:0b:5f:ff:7c:da:41:76:
2b:3a:0c:d5:71:6b:bc:07:d3:a0:93:68:13:c6:b1:
ba:4e:96:8d:28:42:b9:05:50:99:57:02:ee:c7:9d:
cc:b8:d5:12:91:e6:cc:85:1e:b5:e1:7a:9b:4a:da:
44:ec:e5:d3:7e:f5:27:12:c7:75:27:c1:77:90:0b:
b7:9b:5d:0c:91:62:de:cc:28:7d:35:6c:48:1f:7b:
da:1a:8b:a6:71:67:89:3d:04:02:fb:3b:3d:19:57:
61:28:fa:f6:b0:e4:34:f2:cb:9c:fb:60:c1:da:c1:
a0:9a:e7:44:64:91:a3:ce:6d:41:3b:7e:f2:45:19:
12:42:6a:62:93:3b:af:fd:92:0d:65:88:10:5a:bd:
8f:24:be:ea:a9:0d:b9:3c:b8:cb:45:88:4e:10:6b:
fd:f2:ff:9d:2e:eb:a8:a0:32:a7:17:f3:6f:4d:7a:
89:7b:8e:7d:8a:f6:95:da:c7:78:ef:c8:e7:93:c3:
fc:e3:02:e8:54:d8:0d:72:c1:28:6b:42:2f:37:f3:
2c:d9:b9:f2:23:f8:a6:10:4f:38:2b:e9:58:83:3b:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:D2:A3:AD:CC:E0:7C:D5:3C:08:5E:78:89:60:A6:7C:50:44:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/ca3eccba-8f0b-3ed3-9ed6-9e22ca8bba41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
X509v3 Authority Key Identifier:
keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
sbgp-ipAddrBlock: critical
IPv4:
63.133.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:70:d9:e2:b9:2c:89:58:8c:24:88:d5:a2:f4:7e:a4:24:09:
ec:31:a9:8c:8d:0a:f4:f5:fa:31:35:b2:6d:d9:cb:b4:70:12:
c0:5d:57:e5:2c:7b:66:50:36:4c:9a:5c:ac:5f:5e:be:38:c3:
fb:03:c9:41:e8:d3:75:b0:0f:01:8d:76:d2:38:e4:d0:d2:cb:
87:1c:84:6b:e3:1f:fe:61:15:30:f0:ca:eb:b9:10:61:77:9b:
92:fa:1c:a5:af:4d:03:12:c7:8c:70:21:e4:99:14:c5:ff:26:
55:87:ff:36:5c:01:dd:bf:d6:1b:fb:ab:ae:1d:06:68:e1:c3:
f2:d1:34:cd:78:e6:72:e1:ce:8c:63:c6:af:b7:02:ca:87:25:
4e:47:e1:d5:59:d1:46:d0:88:11:00:86:8e:01:8b:53:53:b2:
d2:00:c8:05:cc:1f:3f:91:a3:5f:33:38:a3:ee:45:15:39:6f:
9e:2f:0b:0f:5e:74:cb:41:d0:9c:86:7a:09:9b:62:8d:25:79:
88:61:cd:cf:7a:44:75:89:a9:d2:47:f2:fd:0a:c9:f7:1f:75:
12:44:95:4c:b7:5a:9a:ed:7f:6c:cd:65:97:eb:9b:3c:2a:ad:
61:90:29:d7:b3:67:32:18:c3:69:44:3a:e8:05:c3:79:81:00:
e2:52:03:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDylOL2SIsdWVb5pbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl
Njc2MB4XDTIyMDExOTA1MDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZTE5Y2QwY2ItZDYyMC00NDYyLWE5ODktYTkwOWFhMzI1MDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy6g4xp9Hw+t1VdldqZSBuPc7yVhvAra2Q1B
Gg5GDzB2sVhXlAtf/3zaQXYrOgzVcWu8B9Ogk2gTxrG6TpaNKEK5BVCZVwLux53M
uNUSkebMhR614XqbStpE7OXTfvUnEsd1J8F3kAu3m10MkWLezCh9NWxIH3vaGoum
cWeJPQQC+zs9GVdhKPr2sOQ08suc+2DB2sGgmudEZJGjzm1BO37yRRkSQmpikzuv
/ZINZYgQWr2PJL7qqQ25PLjLRYhOEGv98v+dLuuooDKnF/NvTXqJe459ivaV2sd4
78jnk8P84wLoVNgNcsEoa0IvN/Ms2bnyI/imEE84K+lYgztguwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKV+0qOtzOB81TwIXniJYKZ8UETeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh
OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvY2EzZWNjYmEtOGYwYi0z
ZWQzLTllZDYtOWUyMmNhOGJiYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2
YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj
ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw
MjFlY2U2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP4XYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBw2eK5LIlYjCSI1aL0fqQkCewxqYyNCvT1+jE1sm3Zy7RwEsBdV+Us
e2ZQNkyaXKxfXr44w/sDyUHo03WwDwGNdtI45NDSy4cchGvjH/5hFTDwyuu5EGF3
m5L6HKWvTQMSx4xwIeSZFMX/JlWH/zZcAd2/1hv7q64dBmjhw/LRNM145nLhzoxj
xq+3AsqHJU5H4dVZ0UbQiBEAho4Bi1NTstIAyAXMHz+Ro18zOKPuRRU5b54vCw9e
dMtB0JyGegmbYo0leYhhzc96RHWJqdJH8v0KyfcfdRJElUy3Wprtf2zNZZfrmzwq
rWGQKdezZzIYw2lEOugFw3mBAOJSA+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:49 2024 by rpki-client on console-ams.rpki-client.org