Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/5aad1e5a-4425-3d66-9c6a-b0b542ef7205.roa
File: 5aad1e5a-4425-3d66-9c6a-b0b542ef7205.roa (raw, json)
Hash identifier: eEoW0nAm7HSDhna9cZAdgxp+1eKRNY27qXwnrRDv9zk=
Subject key identifier: 7D:1D:7C:61:07:1F:0A:1D:C3:70:67:E8:B2:6A:CA:F7:7F:37:C7:4E
Certificate issuer: /CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963
Certificate serial: 010D0C9F4328584214A838CCBA69DC53CEF64B00
Authority key identifier: 6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/5aad1e5a-4425-3d66-9c6a-b0b542ef7205.roa
Signing time: Fri 02 Jun 2023 01:00:17 +0000
ROA not before: Fri 02 Jun 2023 01:00:17 +0000
ROA not after: Thu 31 Aug 2023 01:00:17 +0000
asID: 33294
IP address blocks: 216.180.0.0/19 maxlen: 19
140.82.224.0/21 maxlen: 21
2606:7440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:14:a8:38:cc:ba:69:dc:53:ce:f6:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963
Validity
Not Before: Jun 2 01:00:17 2023 GMT
Not After : Aug 31 01:00:17 2023 GMT
Subject: CN=008fbc69-816a-42ae-a353-782447c6916d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:e5:7d:68:29:9a:17:aa:a1:e1:e1:47:90:
e4:ab:05:f0:8c:cc:e5:20:df:80:61:16:7f:98:6a:
3b:d0:30:51:5c:63:e5:fe:96:da:4d:14:b4:7c:43:
44:de:58:9f:44:7f:4e:1d:46:1d:7d:c1:1c:eb:ba:
53:40:0d:38:6d:af:00:70:2f:32:a5:79:65:7f:c6:
d5:0d:f1:b0:6a:36:3a:97:89:ca:d0:e6:50:ed:93:
19:5f:6d:10:2b:6d:6b:7b:a0:3c:3d:2b:a3:03:d2:
8d:da:b7:84:9f:32:2d:a6:3b:91:22:86:68:3d:cc:
55:89:ac:7e:58:5b:e5:a5:f7:3b:81:1c:e9:23:68:
aa:16:0a:c7:2f:eb:4e:52:09:9e:08:07:ce:e6:6c:
98:10:2b:90:ba:1e:82:78:bd:02:d3:1f:4f:6e:60:
24:f7:39:1c:46:53:ae:81:40:a7:0a:4f:f8:61:d5:
10:e9:93:03:31:59:52:e4:1f:62:1c:31:c3:ed:c9:
89:9a:fb:fd:b5:17:08:8a:e8:b8:0f:61:51:49:2f:
7b:8f:70:7f:e5:8d:37:ae:49:86:12:82:d0:75:85:
29:2b:9f:df:91:38:00:c7:7c:93:b2:11:73:f7:e9:
78:24:54:bf:3f:8e:24:c8:d0:1a:35:c4:79:c7:64:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:7C:61:07:1F:0A:1D:C3:70:67:E8:B2:6A:CA:F7:7F:37:C7:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/5aad1e5a-4425-3d66-9c6a-b0b542ef7205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.crl
X509v3 Authority Key Identifier:
keyid:6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer
sbgp-ipAddrBlock: critical
IPv4:
140.82.224.0/21
216.180.0.0/19
IPv6:
2606:7440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:35:b9:c7:be:38:65:da:6c:20:e9:ee:a1:93:a9:75:12:87:
2e:21:93:0e:bb:76:cc:10:a5:b9:83:20:82:a5:7e:aa:82:0f:
f3:71:bf:06:46:37:b6:cf:95:27:12:38:75:8b:8d:d2:af:29:
a6:45:ab:c9:9b:6e:bd:3c:9d:0f:2b:c5:3a:51:de:79:c2:32:
bd:ae:87:09:68:a9:e2:29:ee:af:6c:e4:0f:fc:af:45:32:c9:
80:ee:d5:bd:45:10:58:58:24:c8:49:bb:68:8a:14:df:d6:22:
d2:2f:38:80:a3:01:ad:07:0b:e9:50:67:07:d9:d8:75:73:a9:
4d:c1:72:b5:14:19:69:f9:0e:ec:c9:ea:cc:c9:68:dc:3b:25:
7e:2a:72:35:e5:ee:31:64:f1:9d:5c:b8:da:f4:b3:4e:73:db:
e8:f0:82:d5:12:dc:a4:19:79:1d:1d:9d:84:2f:06:0c:80:1f:
ef:0b:9a:cc:d2:db:e9:75:f4:da:8f:8c:b8:f8:8c:57:28:3d:
b7:36:33:02:75:70:80:ff:92:28:f9:93:9a:f0:90:9b:0e:33:
6e:56:32:d6:3f:b5:43:bf:b3:6a:75:99:cb:7e:51:aa:4d:dc:
d1:e1:16:9c:3b:67:41:84:96:90:14:cb:4a:0b:15:c7:17:c1:
e4:30:ca:42
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEIUqDjMumncU872SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FkZjk0YWYtMGE4MS00ZjlhLWI3ZWMtMWIyNTdiMGYw
OTYzMB4XDTIzMDYwMjAxMDAxN1oXDTIzMDgzMTAxMDAxN1owLzEtMCsGA1UEAxMk
MDA4ZmJjNjktODE2YS00MmFlLWEzNTMtNzgyNDQ3YzY5MTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+3lfWgpmheqoeHhR5DkqwXwjMzlIN+AYRZ/
mGo70DBRXGPl/pbaTRS0fENE3lifRH9OHUYdfcEc67pTQA04ba8AcC8ypXllf8bV
DfGwajY6l4nK0OZQ7ZMZX20QK21re6A8PSujA9KN2reEnzItpjuRIoZoPcxViax+
WFvlpfc7gRzpI2iqFgrHL+tOUgmeCAfO5myYECuQuh6CeL0C0x9PbmAk9zkcRlOu
gUCnCk/4YdUQ6ZMDMVlS5B9iHDHD7cmJmvv9tRcIiui4D2FRSS97j3B/5Y03rkmG
EoLQdYUpK5/fkTgAx3yTshFz9+l4JFS/P44kyNAaNcR5x2T9hwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFH0dfGEHHwodw3Bn6LJqyvd/N8dOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWRm
OTRhZi0wYTgxLTRmOWEtYjdlYy0xYjI1N2IwZjA5NjMvNWFhZDFlNWEtNDQyNS0z
ZDY2LTljNmEtYjBiNTQyZWY3MjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FkZjk0YWYtMGE4MS00ZjlhLWI3
ZWMtMWIyNTdiMGYwOTYzLzdhZGY5NGFmLTBhODEtNGY5YS1iN2VjLTFiMjU3YjBm
MDk2My5jcmwwHwYDVR0jBBgwFoAUa2WCtQOOiuvL6CE3+T3awVO5EeUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YWRmOTRhZi0wYTgxLTRmOWEtYjdlYy0xYjI1
N2IwZjA5NjMuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDjFLgAwQF
2LQAMA0EAgACMAcDBQAmBnRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFM1uce+OGXabCDp7qGTqXUShy4h
kw67dswQpbmDIIKlfqqCD/NxvwZGN7bPlScSOHWLjdKvKaZFq8mbbr08nQ8rxTpR
3nnCMr2uhwloqeIp7q9s5A/8r0UyyYDu1b1FEFhYJMhJu2iKFN/WItIvOICjAa0H
C+lQZwfZ2HVzqU3BcrUUGWn5DuzJ6szJaNw7JX4qcjXl7jFk8Z1cuNr0s05z2+jw
gtUS3KQZeR0dnYQvBgyAH+8LmszS2+l19NqPjLj4jFcoPbc2MwJ1cID/kij5k5rw
kJsOM25WMtY/tUO/s2p1mct+UapN3NHhFpw7Z0GElpAUy0oLFccXweQwykI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:00 2024 by rpki-client on console-fra.rpki-client.org