Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/16b8476b-50f3-3463-89be-5388708b6dab.roa
File: 16b8476b-50f3-3463-89be-5388708b6dab.roa (raw, json)
Hash identifier: XNk9vquv8aG2B/RxSyjemMYQEGj8fdkkmuQywQIyx7c=
Subject key identifier: E6:9C:0D:D0:F4:92:B4:06:C4:37:11:AB:97:66:BB:FD:7D:35:91:EA
Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial: 010D0C9F43285843BC57A4C3A583301FD5E72880
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/16b8476b-50f3-3463-89be-5388708b6dab.roa
Signing time: Tue 31 Oct 2023 19:20:46 +0000
ROA not before: Tue 31 Oct 2023 19:20:46 +0000
ROA not after: Mon 29 Jan 2024 20:20:46 +0000
asID: 198949
IP address blocks: 199.64.88.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:bc:57:a4:c3:a5:83:30:1f:d5:e7:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Validity
Not Before: Oct 31 19:20:46 2023 GMT
Not After : Jan 29 20:20:46 2024 GMT
Subject: CN=218a039f-74fa-4099-8734-b371c60525f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:1b:11:99:5d:6b:0a:2e:03:13:83:7c:bd:
ed:4a:03:81:10:ce:50:84:f4:ff:9a:41:88:91:b2:
a2:0f:a9:6c:d0:87:50:80:23:f4:62:bd:e6:60:3c:
be:76:e6:2b:03:52:4a:da:23:75:6d:96:9d:37:4a:
ab:a5:7d:bc:8a:9d:b6:29:f7:28:3e:8e:97:36:af:
a4:fc:a0:de:b1:a2:fc:eb:a3:91:25:71:eb:4e:fa:
15:e2:13:a4:db:cb:40:45:ff:20:c0:c4:59:29:f3:
5d:58:61:6d:ff:ba:9a:be:fb:3e:65:f4:93:31:b6:
10:cb:6d:0f:b9:49:4e:c5:37:82:63:d4:69:69:d8:
15:dc:35:5b:44:07:a1:95:7f:38:62:ea:5f:64:9d:
88:2f:07:97:50:c3:ab:46:7c:ff:27:02:1b:8e:fd:
f9:19:b6:59:f3:5c:98:2c:e9:bf:8a:06:89:5a:cd:
b5:65:2d:c2:d9:a1:75:52:95:25:92:e1:a0:e5:b1:
54:eb:d6:14:ae:8a:87:9c:91:f5:e8:f3:2d:89:3a:
fd:3a:c6:dc:db:11:37:eb:ac:b7:6e:5d:75:41:32:
6b:ac:95:fd:a9:28:f9:e4:0f:92:a6:0f:1b:4f:61:
43:38:a2:3d:61:6e:09:4c:d7:4b:d7:3e:3d:1c:bf:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:0D:D0:F4:92:B4:06:C4:37:11:AB:97:66:BB:FD:7D:35:91:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/16b8476b-50f3-3463-89be-5388708b6dab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
X509v3 Authority Key Identifier:
keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.64.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:cd:aa:bf:d4:d7:bd:03:95:ad:04:d6:a0:e7:ef:76:64:a7:
29:cb:e9:e1:9f:3f:34:4b:e8:12:c2:1c:fa:16:a2:58:43:24:
7e:01:0d:64:82:92:b1:33:77:19:e2:36:9b:47:28:98:8d:d8:
8f:6d:79:52:b0:f5:cd:f5:b6:e6:20:80:20:a5:6d:dc:90:c1:
a0:94:3f:6b:ad:b2:40:17:3e:8a:91:64:15:ea:9c:8a:7d:20:
70:61:d4:ed:a0:6d:81:c8:1c:a2:c1:47:4d:be:99:2f:00:53:
be:5f:91:e0:8a:7c:8d:47:bc:b8:c9:43:3f:f3:95:76:1d:46:
14:0e:2e:3d:fd:26:dc:9d:0e:3b:a3:d1:cc:2e:c6:de:d9:eb:
93:61:45:84:d0:69:9b:25:90:ae:4c:f8:1d:34:64:e4:d8:10:
fc:f9:00:1f:b3:81:3c:ef:5a:4e:a6:21:fd:0d:e2:1b:81:17:
8c:81:8f:1d:d5:86:28:7b:3e:5f:41:07:7b:1a:06:93:51:b4:
ad:36:4b:bc:9a:21:fc:e4:24:95:f7:10:80:bd:a9:3d:e4:84:
09:ab:93:34:3b:8c:1f:02:eb:1c:53:55:80:8d:e5:3c:85:32:
0d:91:10:bc:67:7b:61:56:65:8e:b8:11:29:93:c2:08:83:0a:
54:f9:e8:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEO8V6TDpYMwH9XnKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTIzMTAzMTE5MjA0NloXDTI0MDEyOTIwMjA0NlowLzEtMCsGA1UEAxMk
MjE4YTAzOWYtNzRmYS00MDk5LTg3MzQtYjM3MWM2MDUyNWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikQbEZldawouAxODfL3tSgOBEM5QhPT/mkGI
kbKiD6ls0IdQgCP0Yr3mYDy+duYrA1JK2iN1bZadN0qrpX28ip22KfcoPo6XNq+k
/KDesaL866ORJXHrTvoV4hOk28tARf8gwMRZKfNdWGFt/7qavvs+ZfSTMbYQy20P
uUlOxTeCY9RpadgV3DVbRAehlX84YupfZJ2ILweXUMOrRnz/JwIbjv35GbZZ81yY
LOm/igaJWs21ZS3C2aF1UpUlkuGg5bFU69YUroqHnJH16PMtiTr9Osbc2xE366y3
bl11QTJrrJX9qSj55A+Spg8bT2FDOKI9YW4JTNdL1z49HL8nmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOacDdD0krQGxDcRq5dmu/19NZHqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMTZiODQ3NmItNTBmMy0z
NDYzLTg5YmUtNTM4ODcwOGI2ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0BYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjNqr/U170Dla0E1qDn73ZkpynL6eGfPzRL6BLCHPoWolhDJH4BDWSC
krEzdxniNptHKJiN2I9teVKw9c31tuYggCClbdyQwaCUP2utskAXPoqRZBXqnIp9
IHBh1O2gbYHIHKLBR02+mS8AU75fkeCKfI1HvLjJQz/zlXYdRhQOLj39JtydDjuj
0cwuxt7Z65NhRYTQaZslkK5M+B00ZOTYEPz5AB+zgTzvWk6mIf0N4huBF4yBjx3V
hih7Pl9BB3saBpNRtK02S7yaIfzkJJX3EIC9qT3khAmrkzQ7jB8C6xxTVYCN5TyF
Mg2RELxne2FWZY64ESmTwgiDClT56HU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:49 2024 by rpki-client on console-ams.rpki-client.org