Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4da1e3f7-b9f8-3096-a3fd-7dd4065c3dcc.roa
File: 4da1e3f7-b9f8-3096-a3fd-7dd4065c3dcc.roa (raw, json)
Hash identifier: ouEY4rdDqs3hb3MEETLqjJz48h8ojffVlhhGe+gJ6jI=
Subject key identifier: 5F:FE:A5:45:7C:30:34:E2:C5:51:51:95:B9:E2:7F:0E:69:74:F4:D1
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F8F0696215C518B4912C0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4da1e3f7-b9f8-3096-a3fd-7dd4065c3dcc.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 14877
IP address blocks: 208.103.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:8f:06:96:21:5c:51:8b:49:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=1dad6e12-0123-4f4d-b732-f0fae577d8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:82:51:43:3d:bd:34:ee:54:6b:ad:6e:3e:
66:85:69:a9:fb:eb:8b:a4:c8:07:2e:c4:32:10:da:
52:8f:19:60:ce:b0:82:e5:fa:a3:f6:e1:dd:47:7b:
9b:dc:68:c9:1b:d3:41:a6:8f:47:70:4d:92:40:88:
7e:06:2d:cf:e6:b9:fd:b1:e9:be:8d:af:95:b4:69:
90:bc:8e:05:8e:cc:b7:ac:36:02:2f:be:ec:a7:a1:
33:ef:a5:f3:04:19:f5:6f:a1:18:37:49:2a:6f:48:
b8:65:cd:38:75:a2:3d:5b:13:e1:04:3c:82:50:ed:
c3:60:39:4f:16:2e:f5:9f:89:f7:59:d2:af:f5:86:
22:ad:e9:3d:a5:69:2e:f1:7e:95:5d:17:de:23:0a:
88:bb:df:8e:d1:42:15:89:51:67:20:71:69:49:be:
b1:db:97:c3:56:34:4d:55:56:7b:b8:d7:ce:45:46:
e0:ec:f5:78:bf:4d:41:cc:c9:1a:36:e5:48:a8:ca:
63:da:a3:32:4c:6c:9f:51:cb:47:a8:d0:24:d7:46:
b0:60:50:81:0b:ea:21:33:14:3b:61:a9:b3:ab:64:
95:9e:11:48:73:2a:3f:21:6d:46:25:40:19:51:69:
69:b5:51:d6:2a:fc:78:fe:ff:a3:92:87:d5:07:ac:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FE:A5:45:7C:30:34:E2:C5:51:51:95:B9:E2:7F:0E:69:74:F4:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4da1e3f7-b9f8-3096-a3fd-7dd4065c3dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:3c:c2:8f:22:68:95:da:13:3d:55:9b:5d:68:f5:70:db:f5:
a0:ba:5f:c5:ca:a2:36:2e:d5:77:84:86:71:b5:35:c0:84:84:
31:22:53:38:39:6d:97:0b:d4:f5:2e:d2:21:49:af:cb:86:69:
fe:f3:97:6e:5e:9c:c5:bd:53:80:99:11:b0:e7:9e:6b:47:50:
98:7b:b7:5a:5c:e3:f9:75:1b:db:1e:8b:03:7d:c2:48:e4:b9:
5a:76:00:83:ab:28:3c:c4:14:a9:b8:ec:81:31:d7:f7:1a:20:
26:6f:77:b1:97:2f:fb:d3:78:8b:05:29:03:e3:93:fd:09:30:
ca:a5:e5:6f:20:c8:66:07:87:c3:ef:90:64:38:23:4e:01:0e:
5c:b3:e3:1d:fb:17:02:e4:3d:65:15:18:37:f7:97:15:f2:28:
73:5c:5a:45:c8:8e:05:08:a1:18:9c:d3:bd:ba:8d:94:c7:5b:
5e:19:61:0e:83:4e:d4:f3:00:b8:2d:4a:0d:42:58:24:25:a5:
ba:d5:8f:c7:1d:80:cc:f9:23:10:bf:4c:de:a9:b8:17:07:8e:
b2:66:4e:88:98:c9:ce:a7:f4:92:07:25:d7:1b:d9:8f:2f:cd:
ae:33:5d:04:89:c7:1f:5c:86:56:26:72:51:b4:31:f0:d6:bd:
33:7b:ee:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB3L48GliFcUYtJEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTIzMDEwMzEyMDAwMFoXDTI0MDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MWRhZDZlMTItMDEyMy00ZjRkLWI3MzItZjBmYWU1NzdkOGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSGCUUM9vTTuVGutbj5mhWmp++uLpMgHLsQy
ENpSjxlgzrCC5fqj9uHdR3ub3GjJG9NBpo9HcE2SQIh+Bi3P5rn9sem+ja+VtGmQ
vI4Fjsy3rDYCL77sp6Ez76XzBBn1b6EYN0kqb0i4Zc04daI9WxPhBDyCUO3DYDlP
Fi71n4n3WdKv9YYirek9pWku8X6VXRfeIwqIu9+O0UIViVFnIHFpSb6x25fDVjRN
VVZ7uNfORUbg7PV4v01BzMkaNuVIqMpj2qMyTGyfUctHqNAk10awYFCBC+ohMxQ7
Yamzq2SVnhFIcyo/IW1GJUAZUWlptVHWKvx4/v+jkofVB6w4fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/+pUV8MDTixVFRlbnifw5pdPTRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNGRhMWUzZjctYjlmOC0z
MDk2LWEzZmQtN2RkNDA2NWMzZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ge8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMU8wo8iaJXaEz1Vm11o9XDb9aC6X8XKojYu1XeEhnG1NcCEhDEiUzg5
bZcL1PUu0iFJr8uGaf7zl25enMW9U4CZEbDnnmtHUJh7t1pc4/l1G9seiwN9wkjk
uVp2AIOrKDzEFKm47IEx1/caICZvd7GXL/vTeIsFKQPjk/0JMMql5W8gyGYHh8Pv
kGQ4I04BDlyz4x37FwLkPWUVGDf3lxXyKHNcWkXIjgUIoRic0726jZTHW14ZYQ6D
TtTzALgtSg1CWCQlpbrVj8cdgMz5IxC/TN6puBcHjrJmToiYyc6n9JIHJdcb2Y8v
za4zXQSJxx9chlYmclG0MfDWvTN77rE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org