Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f7069d0c-1118-3738-9810-319c55d375a7.roa
File: f7069d0c-1118-3738-9810-319c55d375a7.roa (raw, json)
Hash identifier: ZSWC/5HQluvLa5eDzG1dnx6KJAbczpkbdpJ6RF2Dt1s=
Subject key identifier: 53:6B:79:EA:4E:3B:08:49:E1:9D:DB:16:29:07:EE:3B:DB:6B:BD:2A
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285840772F8ECEB99F087C7EA08120
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f7069d0c-1118-3738-9810-319c55d375a7.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 14477
IP address blocks: 176.115.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:77:2f:8e:ce:b9:9f:08:7c:7e:a0:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=438190ed-b813-4a3b-88f6-8732b569824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:e6:4b:8e:1d:39:e2:a4:0d:58:58:ca:3d:
05:2e:d8:dd:f3:8e:92:f4:20:d0:fd:74:10:5b:69:
9e:26:df:43:3b:77:36:4f:32:51:71:0b:b8:6d:eb:
d1:f7:57:83:5d:02:6c:95:ba:ee:61:46:6f:5b:cf:
fb:92:16:94:69:49:86:f3:30:30:f8:a0:5a:ed:1c:
09:58:55:9c:03:35:e1:ce:51:45:bf:72:11:82:98:
e2:29:d8:bf:e0:c0:74:62:ba:1b:36:e9:2e:3c:63:
35:bc:01:cb:92:46:fa:6d:41:67:cd:35:a5:ab:6e:
74:73:de:f2:15:04:e4:1a:d3:8e:6b:b0:ac:90:65:
76:0d:f5:cd:b1:4a:23:79:7f:8f:a8:f9:0c:47:a2:
39:fd:5c:1d:fe:33:f7:62:e1:7d:45:2a:18:b5:cb:
d0:bb:25:59:27:12:34:bb:3b:16:6a:17:91:6f:ab:
8a:7c:a2:a9:3c:c8:c8:46:a6:ba:4b:63:a6:dc:b3:
9e:e1:d3:4f:94:94:f1:98:56:51:28:10:1d:9b:f9:
19:63:1c:c0:ca:0c:8a:22:23:69:56:f0:82:ef:a4:
94:9f:ba:60:03:20:60:e1:ca:70:3c:67:f3:35:e0:
2f:87:74:a5:3e:99:54:91:f5:6e:4f:c9:a3:60:41:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:79:EA:4E:3B:08:49:E1:9D:DB:16:29:07:EE:3B:DB:6B:BD:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/f7069d0c-1118-3738-9810-319c55d375a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
176.115.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:1a:e1:db:63:22:24:fb:dd:a0:ba:d6:fb:20:49:78:b9:7d:
e5:89:ff:27:74:3b:68:95:58:14:1b:a1:d3:5b:9c:79:a4:41:
27:a9:39:0b:43:62:21:b8:a0:c9:cc:ca:5f:42:e2:5f:02:a6:
4c:04:17:10:16:31:6c:51:cc:e9:05:5c:63:8d:cc:fe:86:69:
4b:52:0b:bd:5a:b0:37:7a:a7:88:70:0d:6e:40:d1:d4:6f:56:
96:8d:ee:24:fa:2a:80:89:84:cb:ba:cc:3e:7a:42:7f:6c:21:
d8:b6:32:65:bc:26:9a:13:5d:01:3b:71:18:9f:43:76:f2:f2:
fb:40:4c:9f:07:75:9d:66:08:c1:e1:5e:bb:de:d1:31:d8:d3:
26:5c:ae:16:dd:24:92:98:2d:61:86:ed:67:b1:7c:bf:94:7f:
c9:66:35:49:c5:8c:1b:f1:37:b2:e3:ed:b5:a3:81:07:20:b7:
04:f5:ce:a9:10:e6:64:b6:c8:f3:13:6d:8e:ff:75:1c:71:ac:
aa:5d:6b:09:e6:16:4f:c8:b8:b7:c1:12:2b:5f:00:a7:cd:4d:
0b:80:55:e5:61:b1:12:c6:63:f4:75:7a:ba:2f:52:da:b6:44:
41:b5:74:2e:fd:a9:65:2b:66:ee:17:a5:b2:a1:04:b5:17:07:
ce:de:00:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEB3L47OuZ8IfH6ggSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTIzMDEwMzEyMDAwMFoXDTI0MDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDM4MTkwZWQtYjgxMy00YTNiLTg4ZjYtODczMmI1Njk4MjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbbmS44dOeKkDVhYyj0FLtjd846S9CDQ/XQQ
W2meJt9DO3c2TzJRcQu4bevR91eDXQJslbruYUZvW8/7khaUaUmG8zAw+KBa7RwJ
WFWcAzXhzlFFv3IRgpjiKdi/4MB0YrobNukuPGM1vAHLkkb6bUFnzTWlq250c97y
FQTkGtOOa7CskGV2DfXNsUojeX+PqPkMR6I5/Vwd/jP3YuF9RSoYtcvQuyVZJxI0
uzsWaheRb6uKfKKpPMjIRqa6S2Om3LOe4dNPlJTxmFZRKBAdm/kZYxzAygyKIiNp
VvCC76SUn7pgAyBg4cpwPGfzNeAvh3SlPplUkfVuT8mjYEF7sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNreepOOwhJ4Z3bFikH7jvba70qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZjcwNjlkMGMtMTExOC0z
NzM4LTk4MTAtMzE5YzU1ZDM3NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4a4dtjIiT73aC61vsgSXi5feWJ/yd0O2iVWBQbodNbnHmkQSepOQtD
YiG4oMnMyl9C4l8CpkwEFxAWMWxRzOkFXGONzP6GaUtSC71asDd6p4hwDW5A0dRv
VpaN7iT6KoCJhMu6zD56Qn9sIdi2MmW8JpoTXQE7cRifQ3by8vtATJ8HdZ1mCMHh
Xrve0THY0yZcrhbdJJKYLWGG7WexfL+Uf8lmNUnFjBvxN7Lj7bWjgQcgtwT1zqkQ
5mS2yPMTbY7/dRxxrKpdawnmFk/IuLfBEitfAKfNTQuAVeVhsRLGY/R1erovUtq2
REG1dC79qWUrZu4XpbKhBLUXB87eADs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org