Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/974a93e9-0d9e-3a7e-96c3-db67dceeb2a1.roa
File: 974a93e9-0d9e-3a7e-96c3-db67dceeb2a1.roa (raw, json)
Hash identifier: HAM4oYXxEblaSWZM1wm8ZwEa1wIXfztbJqycUod8rUI=
Subject key identifier: A2:3F:2E:C6:AC:9C:16:2F:9C:C3:D3:53:F1:96:F4:94:99:38:A7:5B
Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial: 010D0C9F432858446E646DC0B420D943871C6BC0
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/974a93e9-0d9e-3a7e-96c3-db67dceeb2a1.roa
Signing time: Wed 03 Jan 2024 14:00:21 +0000
ROA not before: Wed 03 Jan 2024 14:00:21 +0000
ROA not after: Tue 02 Apr 2024 13:00:21 +0000
asID: 1239
IP address blocks: 216.170.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6e:64:6d:c0:b4:20:d9:43:87:1c:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Validity
Not Before: Jan 3 14:00:21 2024 GMT
Not After : Apr 2 13:00:21 2024 GMT
Subject: CN=c0dfcc78-0f2e-4de9-9e08-ca1510ea7d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:e9:87:99:21:63:8b:c8:1d:41:9b:d0:6a:
27:d0:11:04:a5:4a:88:7a:e6:aa:ba:71:5b:83:92:
9d:76:65:3e:b0:5a:e9:f4:5b:b9:38:08:0f:4f:61:
9d:ff:08:a3:ee:c7:60:20:c2:ef:50:ac:b7:88:65:
f1:ed:74:b2:63:22:8a:f5:77:2e:1b:06:4f:e2:03:
f3:72:e0:0d:56:ad:ad:25:3a:fa:4b:b4:d2:bb:a9:
c8:f3:a9:99:3f:46:c7:4a:10:c8:e6:44:63:f5:97:
90:e9:e1:2f:75:69:04:4e:3c:8b:16:67:06:f0:4c:
e6:e1:1f:b4:67:36:31:9d:09:1c:28:35:23:9c:93:
1b:e1:f3:3e:5e:ac:5b:6a:94:e9:fa:12:3d:f5:0b:
e6:8b:2d:a2:ba:b7:de:ad:cb:1c:3f:31:e5:91:ed:
1a:ad:e8:30:8a:d2:ea:dc:fd:8d:77:74:50:72:f0:
71:a0:0b:45:9f:1a:87:8b:e7:b4:25:01:f4:42:de:
a6:ab:8a:e1:b6:ae:c6:6f:b7:53:ff:b9:66:fd:cf:
c1:22:7f:fb:5b:f2:84:2f:1f:10:22:a7:cf:d7:b4:
22:8b:ec:9a:f3:02:c6:d7:6e:4a:05:dd:ad:ef:01:
d2:2d:5d:3f:84:2e:17:4f:bd:4c:ea:a4:cc:a8:63:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:2E:C6:AC:9C:16:2F:9C:C3:D3:53:F1:96:F4:94:99:38:A7:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/974a93e9-0d9e-3a7e-96c3-db67dceeb2a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl
X509v3 Authority Key Identifier:
keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:b9:7b:68:e0:81:a1:25:a7:bb:6f:20:31:75:8c:25:ab:41:
f4:9e:dc:58:69:ea:7f:cc:5b:6a:01:fb:32:d4:9b:32:46:9b:
d5:3d:4b:50:2b:eb:af:c2:33:76:0a:16:6f:41:9b:e6:c1:d6:
ca:e4:90:75:a5:b0:77:74:24:d7:d8:a6:87:e1:fb:48:d8:00:
1c:be:8c:91:5c:b9:96:03:64:19:d6:8d:df:59:d9:e2:1b:58:
3a:6d:ca:a1:ac:91:c6:b8:80:81:f7:81:cf:69:3c:9d:bd:6e:
ed:4c:55:f7:2c:90:89:9b:51:03:7f:83:50:dc:41:50:a6:1e:
2a:c5:68:e8:91:cf:d9:34:7d:09:ec:5d:5c:74:cd:f8:82:af:
7b:7c:a8:da:56:66:ca:ab:a1:d9:55:2a:39:0b:af:f9:a9:35:
5b:f5:16:d9:33:7c:e0:45:63:6d:f0:4e:26:2b:a9:b1:ab:01:
14:c7:b0:2e:de:2c:6a:10:3a:d6:a8:fc:e2:c8:e0:72:74:ed:
61:a1:90:20:cc:bb:61:79:78:0d:b4:23:85:78:43:de:d1:0f:
9d:a8:70:7f:4d:ee:4a:27:de:f2:1b:f7:d5:c2:a7:de:1b:0f:
b1:51:54:ef:9d:ea:f3:5c:9c:ab:87:d2:a3:c6:d5:2e:5f:bd:
de:fb:e9:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERuZG3AtCDZQ4cca8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw
NWI4MB4XDTI0MDEwMzE0MDAyMVoXDTI0MDQwMjEzMDAyMVowLzEtMCsGA1UEAxMk
YzBkZmNjNzgtMGYyZS00ZGU5LTllMDgtY2ExNTEwZWE3ZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQbph5khY4vIHUGb0Gon0BEEpUqIeuaqunFb
g5KddmU+sFrp9Fu5OAgPT2Gd/wij7sdgIMLvUKy3iGXx7XSyYyKK9XcuGwZP4gPz
cuANVq2tJTr6S7TSu6nI86mZP0bHShDI5kRj9ZeQ6eEvdWkETjyLFmcG8Ezm4R+0
ZzYxnQkcKDUjnJMb4fM+XqxbapTp+hI99Qvmiy2iurfercscPzHlke0aregwitLq
3P2Nd3RQcvBxoAtFnxqHi+e0JQH0Qt6mq4rhtq7Gb7dT/7lm/c/BIn/7W/KELx8Q
IqfP17Qii+ya8wLG125KBd2t7wHSLV0/hC4XT71M6qTMqGMupQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKI/LsasnBYvnMPTU/GW9JSZOKdbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl
OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvOTc0YTkzZTktMGQ5ZS0z
YTdlLTk2YzMtZGI2N2RjZWViMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4
YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4
MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5
OTVjODA1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACe5e2jggaElp7tvIDF1jCWrQfSe3Fhp6n/MW2oB+zLUmzJGm9U9S1Ar
66/CM3YKFm9Bm+bB1srkkHWlsHd0JNfYpofh+0jYABy+jJFcuZYDZBnWjd9Z2eIb
WDptyqGskca4gIH3gc9pPJ29bu1MVfcskImbUQN/g1DcQVCmHirFaOiRz9k0fQns
XVx0zfiCr3t8qNpWZsqrodlVKjkLr/mpNVv1FtkzfOBFY23wTiYrqbGrARTHsC7e
LGoQOtao/OLI4HJ07WGhkCDMu2F5eA20I4V4Q97RD52ocH9N7kon3vIb99XCp94b
D7FRVO+d6vNcnKuH0qPG1S5fvd776cA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:02 2024 by rpki-client on console-fra.rpki-client.org