Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea431da3-f283-3c06-8e66-4a18ad5fd847.roa
File: ea431da3-f283-3c06-8e66-4a18ad5fd847.roa (raw, json)
Hash identifier: SWVjuUF/ztK8S19pH/i0+rPeWr2cCRZWQ5tUPlkNspY=
Subject key identifier: C9:9F:28:85:E3:EE:3E:C4:7E:1B:CF:6E:A5:68:D5:88:4E:B5:1F:E9
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F9BB4AF0C07A271176740
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea431da3-f283-3c06-8e66-4a18ad5fd847.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 5738
IP address blocks: 72.15.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:9b:b4:af:0c:07:a2:71:17:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=5dee75b9-86f8-45dc-8392-9d566d7b174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:a2:45:fc:99:d5:7c:c2:64:b2:66:90:20:
ed:29:46:4a:8e:4e:19:85:14:ec:8c:11:d9:eb:f6:
66:2f:10:13:b7:bc:88:46:0b:3d:42:80:cf:43:a7:
76:cc:23:c3:9e:60:1d:83:ef:7e:c2:8f:5a:2f:9e:
63:db:f6:63:b5:ad:2d:b5:e3:13:9d:ba:bc:f2:ee:
3f:93:ce:44:00:4e:97:fd:57:f8:a1:84:dd:0f:f0:
e7:7f:9f:7e:3c:ad:06:20:39:a8:4c:ed:d3:d9:e0:
4f:6b:96:b3:7f:4b:7e:23:7c:23:52:a5:94:7a:f2:
54:9c:26:70:5e:04:7f:3c:e6:12:13:e0:fe:73:f5:
a5:b6:0b:65:9f:9e:e7:6b:70:e2:b1:73:4e:b4:4c:
14:60:18:3c:ef:6d:d0:fe:94:fb:1c:ab:74:86:9a:
f5:e9:5d:46:e3:c8:e5:c1:4f:eb:7f:6b:c4:79:7a:
ff:64:98:ef:56:ee:39:81:f8:d4:fc:de:46:11:3c:
0f:bb:15:31:2b:5a:6f:c6:01:5a:ce:e4:87:da:ba:
80:4a:08:a1:37:e7:44:ec:13:2a:11:c6:99:87:03:
f7:e4:64:ef:47:99:62:c6:05:dd:09:81:2d:a4:35:
d8:04:b6:cb:45:92:4d:11:78:d5:72:61:a0:98:85:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:28:85:E3:EE:3E:C4:7E:1B:CF:6E:A5:68:D5:88:4E:B5:1F:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ea431da3-f283-3c06-8e66-4a18ad5fd847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.15.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:9a:bf:cd:c9:b0:08:72:42:50:7a:c2:b4:64:22:73:17:05:
15:96:32:d6:90:68:81:ff:0d:db:3a:5a:14:e5:4e:69:8f:e7:
f2:b1:f6:2b:ef:4a:2a:6d:1a:d8:b6:52:ce:57:3d:e0:a4:b3:
84:70:60:1b:d9:fa:b4:37:ee:b8:61:15:97:67:da:9f:1b:f4:
4e:6c:e5:a7:7e:ce:d9:b9:86:87:44:32:3a:38:43:b5:af:8e:
a5:b0:09:2f:78:e7:c6:91:84:03:a6:58:2a:aa:0e:aa:f1:ec:
c6:24:67:42:38:59:ca:a1:26:64:a2:f5:f6:30:17:bc:b4:6a:
97:7f:b9:e3:c8:27:e1:44:ee:c2:67:05:26:4e:96:be:bd:b4:
8e:4a:b4:77:4e:6e:cc:2a:17:8d:0a:30:69:bc:f1:df:32:d5:
a0:df:c5:e3:83:92:0d:c9:e1:0b:68:1d:97:0a:f4:36:da:44:
2b:8a:4c:b5:1b:26:bd:15:53:ce:05:99:53:55:bd:2f:65:81:
dd:41:e7:8e:52:10:56:6f:78:bb:5e:b0:14:93:0c:cf:8f:d5:
85:81:0b:97:f9:1c:01:1e:82:3d:0c:78:a4:0f:d9:eb:42:53:
ac:80:06:89:05:52:7f:d2:f6:75:40:ce:49:06:ba:55:0b:1d:
2d:f4:c4:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB3L5u0rwwHonEXZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTIzMDEwMzEyMDAwMFoXDTI0MDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NWRlZTc1YjktODZmOC00NWRjLTgzOTItOWQ1NjZkN2IxNzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsSiRfyZ1XzCZLJmkCDtKUZKjk4ZhRTsjBHZ
6/ZmLxATt7yIRgs9QoDPQ6d2zCPDnmAdg+9+wo9aL55j2/Zjta0tteMTnbq88u4/
k85EAE6X/Vf4oYTdD/Dnf59+PK0GIDmoTO3T2eBPa5azf0t+I3wjUqWUevJUnCZw
XgR/POYSE+D+c/Wltgtln57na3DisXNOtEwUYBg8723Q/pT7HKt0hpr16V1G48jl
wU/rf2vEeXr/ZJjvVu45gfjU/N5GETwPuxUxK1pvxgFazuSH2rqASgihN+dE7BMq
EcaZhwP35GTvR5lixgXdCYEtpDXYBLbLRZJNEXjVcmGgmIUlKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmfKIXj7j7EfhvPbqVo1YhOtR/pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZWE0MzFkYTMtZjI4My0z
YzA2LThlNjYtNGExOGFkNWZkODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSA8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaav83JsAhyQlB6wrRkInMXBRWWMtaQaIH/Dds6WhTlTmmP5/Kx9ivv
SiptGti2Us5XPeCks4RwYBvZ+rQ37rhhFZdn2p8b9E5s5ad+ztm5hodEMjo4Q7Wv
jqWwCS9458aRhAOmWCqqDqrx7MYkZ0I4WcqhJmSi9fYwF7y0apd/uePIJ+FE7sJn
BSZOlr69tI5KtHdObswqF40KMGm88d8y1aDfxeODkg3J4QtoHZcK9DbaRCuKTLUb
Jr0VU84FmVNVvS9lgd1B545SEFZveLtesBSTDM+P1YWBC5f5HAEegj0MeKQP2etC
U6yABokFUn/S9nVAzkkGulULHS30xIk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org