Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a6eb6f0d-2dc5-3787-a280-0fe711cfd82f.roa
File: a6eb6f0d-2dc5-3787-a280-0fe711cfd82f.roa (raw, json)
Hash identifier: nKUezD6PlHJapzQn1pocFDuB/qL9DQopFjir9uFOS78=
Subject key identifier: 95:B4:29:DA:12:B5:AF:EA:9B:B7:8D:99:9C:74:14:C8:13:13:0C:BD
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584316E4A038CE7FCBE243186000
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a6eb6f0d-2dc5-3787-a280-0fe711cfd82f.roa
Signing time: Sat 02 Sep 2023 13:00:30 +0000
ROA not before: Sat 02 Sep 2023 13:00:30 +0000
ROA not after: Fri 01 Dec 2023 14:00:30 +0000
asID: 207190
IP address blocks: 198.44.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:16:e4:a0:38:ce:7f:cb:e2:43:18:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Sep 2 13:00:30 2023 GMT
Not After : Dec 1 14:00:30 2023 GMT
Subject: CN=4269d0f6-2fff-4765-ae0f-62d2184a48bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:98:52:05:4d:b4:64:05:01:b0:de:b7:ae:
97:18:a3:30:c2:7c:97:69:c0:f1:a0:23:b8:7e:29:
0a:d2:bb:04:fe:c3:19:a6:33:cf:16:bd:ed:27:1f:
50:76:89:c7:41:f9:0d:3c:19:ad:4f:ed:2a:e3:60:
f3:79:7e:a5:d7:d5:80:49:66:d8:71:dd:94:c6:1f:
4e:45:a2:32:15:5d:39:21:7c:8d:c2:9a:a3:ef:b6:
83:4e:00:73:f1:57:61:93:1e:90:1e:53:a5:c6:96:
c1:bc:7c:21:a7:cc:fe:ae:9b:21:e1:e0:e4:59:0a:
3b:d1:3e:92:f6:8d:18:5b:07:2f:49:2a:e5:17:56:
ed:21:65:4c:59:7b:7a:e4:0c:e7:b8:20:e5:7d:01:
9c:92:9d:ef:80:66:fa:c0:b2:e8:53:02:71:01:a8:
4e:ad:3f:9c:9d:cc:7b:9e:79:11:c6:d0:37:f2:7f:
c2:02:6d:10:88:2f:4c:84:bd:ad:78:8c:ac:6d:24:
6e:0d:89:40:a0:e9:4d:d2:23:28:c3:4e:a7:21:b0:
de:46:d9:be:0c:9d:33:95:40:80:f3:fa:44:60:9d:
b8:12:08:da:a0:14:ca:8c:0e:23:fa:36:d1:b4:63:
de:79:f0:4d:eb:ba:c8:41:d5:5e:ba:c7:88:f0:4b:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:29:DA:12:B5:AF:EA:9B:B7:8D:99:9C:74:14:C8:13:13:0C:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a6eb6f0d-2dc5-3787-a280-0fe711cfd82f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:34:00:c6:15:9d:ef:18:0e:ac:92:d7:03:0a:3e:cd:dd:1a:
ea:5d:70:a0:21:6b:b8:18:02:1d:b9:a2:fa:48:cf:a6:fa:83:
47:96:92:c3:63:1b:a2:44:e5:c7:f8:2a:b1:7a:7d:69:73:e6:
f7:36:95:79:1e:1d:78:8e:ae:51:08:a3:94:aa:38:5e:f5:6d:
79:ce:9a:3c:40:f6:43:4a:ba:d2:65:ab:10:19:1a:8f:02:de:
8b:5f:99:54:91:01:bd:b6:96:0b:46:0d:94:04:e6:ea:fe:e4:
69:6f:a2:11:a7:43:c4:e1:9b:6c:5b:0e:71:fa:71:d8:01:0d:
9e:1e:f9:a7:29:79:42:78:41:f7:84:fb:59:5c:81:19:5a:b1:
ca:79:98:73:9e:fb:40:91:8e:72:93:db:1e:9d:8f:f3:a1:db:
2f:7d:3b:ee:ff:6d:53:41:ca:10:15:a1:ed:a7:61:fc:b8:61:
8f:b2:ac:37:8e:ef:8f:f9:e6:c3:f2:fb:8b:a2:e0:de:a7:e6:
27:d5:d7:3c:a2:27:29:b3:93:70:35:79:10:d0:a5:f4:8d:13:
a4:57:94:56:8c:6d:96:33:2a:87:a4:c9:41:13:9a:93:ae:5f:
f7:42:4d:ea:db:40:9f:d4:82:10:f1:6c:ff:2d:d3:55:06:fb:
32:56:aa:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMW5KA4zn/L4kMYYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTIzMDkwMjEzMDAzMFoXDTIzMTIwMTE0MDAzMFowLzEtMCsGA1UEAxMk
NDI2OWQwZjYtMmZmZi00NzY1LWFlMGYtNjJkMjE4NGE0OGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78OYUgVNtGQFAbDet66XGKMwwnyXacDxoCO4
fikK0rsE/sMZpjPPFr3tJx9QdonHQfkNPBmtT+0q42DzeX6l19WASWbYcd2Uxh9O
RaIyFV05IXyNwpqj77aDTgBz8Vdhkx6QHlOlxpbBvHwhp8z+rpsh4eDkWQo70T6S
9o0YWwcvSSrlF1btIWVMWXt65AznuCDlfQGckp3vgGb6wLLoUwJxAahOrT+cncx7
nnkRxtA38n/CAm0QiC9MhL2teIysbSRuDYlAoOlN0iMow06nIbDeRtm+DJ0zlUCA
8/pEYJ24EgjaoBTKjA4j+jbRtGPeefBN67rIQdVeuseI8EtFgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJW0KdoSta/qm7eNmZx0FMgTEwy9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYTZlYjZmMGQtMmRjNS0z
Nzg3LWEyODAtMGZlNzExY2ZkODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiyjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJM0AMYVne8YDqyS1wMKPs3dGupdcKAha7gYAh25ovpIz6b6g0eWksNj
G6JE5cf4KrF6fWlz5vc2lXkeHXiOrlEIo5SqOF71bXnOmjxA9kNKutJlqxAZGo8C
3otfmVSRAb22lgtGDZQE5ur+5GlvohGnQ8Thm2xbDnH6cdgBDZ4e+acpeUJ4QfeE
+1lcgRlascp5mHOe+0CRjnKT2x6dj/Oh2y99O+7/bVNByhAVoe2nYfy4YY+yrDeO
74/55sPy+4ui4N6n5ifV1zyiJymzk3A1eRDQpfSNE6RXlFaMbZYzKoekyUETmpOu
X/dCTerbQJ/UghDxbP8t01UG+zJWqgU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:05 2024 by rpki-client on console-fra.rpki-client.org