Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c9f41925-2a01-3115-a163-367419094a68.roa
File: c9f41925-2a01-3115-a163-367419094a68.roa (raw, json)
Hash identifier: NKX3vJqBDDnnTuqkfCCPTIlvYt1sRYRyINirWnkDalo=
Subject key identifier: 6C:AC:56:45:AD:CD:9D:89:4D:A1:CF:D5:12:A4:58:F7:3B:7C:31:F3
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328583D912910BDFC57F5049FE3D980
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c9f41925-2a01-3115-a163-367419094a68.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Mon 24 Apr 2023 04:00:00 +0000
asID: 21859
IP address blocks: 23.251.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:91:29:10:bd:fc:57:f5:04:9f:e3:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Apr 24 04:00:00 2023 GMT
Subject: CN=13aedc31-281e-405d-a7ff-ab2e29afbf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:3e:58:25:2f:1b:14:f6:18:e4:36:ea:f2:
9c:63:c8:b4:ec:03:d4:0d:d4:c4:92:ce:16:d2:6d:
b6:2b:e0:cd:10:4d:d3:75:c7:27:49:07:7c:cf:9c:
e4:1b:38:d1:a7:12:db:52:96:99:38:59:ac:ea:58:
0e:49:75:c1:0b:9f:48:72:9a:fe:67:e1:26:9e:4b:
bb:0e:a9:e9:bc:66:bf:ae:96:6d:9d:47:d9:9f:ef:
d5:39:68:62:73:08:1e:90:19:b7:54:51:0c:36:47:
6d:05:7d:89:56:57:fb:f4:76:57:c7:71:56:d9:5e:
cd:7a:32:59:ba:18:c7:d6:6b:8e:52:65:d3:4f:56:
8c:5e:66:26:a6:e3:e1:91:5c:e2:95:77:80:e4:42:
48:5d:52:18:31:be:a9:5c:5a:16:59:68:07:25:97:
99:0c:a3:31:6c:c1:77:a8:32:44:d5:56:a4:fb:db:
d8:fc:60:6f:21:8b:2c:76:8e:d9:42:27:63:21:52:
1f:5a:84:ae:8d:44:50:b0:62:6d:42:bc:ca:0c:a0:
1e:f4:03:56:a3:aa:3a:74:34:d1:c3:11:0c:8a:7a:
81:98:35:fb:a0:78:2c:5c:41:8b:c9:e7:a2:5e:e3:
3f:a2:1f:29:4f:55:27:40:c7:89:2d:0d:ce:e2:70:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:56:45:AD:CD:9D:89:4D:A1:CF:D5:12:A4:58:F7:3B:7C:31:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c9f41925-2a01-3115-a163-367419094a68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:77:a0:4f:39:7b:ff:8e:60:05:7b:e8:7c:c1:a0:09:8a:0e:
ab:01:34:7e:e2:e1:f1:a6:97:76:1c:34:df:3c:f5:91:e5:84:
7e:5a:10:59:e7:cf:0e:7f:89:b7:27:7b:05:04:20:bf:2c:ce:
17:01:f6:92:a4:fa:4f:0d:a2:97:58:48:a7:4a:59:69:54:67:
81:83:48:72:6b:6a:aa:fb:6d:bd:99:f0:f3:11:11:b0:73:a5:
14:07:e0:11:16:c2:f3:6f:97:f7:78:38:6a:72:69:da:36:ff:
12:bb:8b:9d:0b:6f:d7:33:5d:fe:13:86:f1:f8:82:22:fb:36:
38:5d:20:60:a9:4e:d0:89:ec:47:fc:12:8d:59:5e:d3:00:32:
6c:34:e5:a2:11:95:de:d6:13:cc:63:f8:87:cc:5a:2a:d8:05:
de:58:56:d1:04:6e:29:4e:31:69:d6:85:03:36:40:1c:22:75:
c4:89:3c:2c:be:fe:81:f4:a4:fc:ee:97:d1:26:d4:a8:dc:63:
f8:46:1e:63:b6:41:1c:0f:f8:38:20:51:9c:d7:1d:a5:6f:52:
ed:bf:38:6d:e9:ae:fb:a8:04:62:02:2a:8c:3f:b5:2f:9f:6e:
a0:0a:4a:e9:82:0d:4e:4d:11:4a:91:d3:b9:8e:c2:27:5b:c1:
45:35:67:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2RKRC9/Ff1BJ/j2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTIyMDMyNDA0MDAwMFoXDTIzMDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MTNhZWRjMzEtMjgxZS00MDVkLWE3ZmYtYWIyZTI5YWZiZjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymU+WCUvGxT2GOQ26vKcY8i07APUDdTEks4W
0m22K+DNEE3TdccnSQd8z5zkGzjRpxLbUpaZOFms6lgOSXXBC59Icpr+Z+Emnku7
DqnpvGa/rpZtnUfZn+/VOWhicwgekBm3VFEMNkdtBX2JVlf79HZXx3FW2V7NejJZ
uhjH1muOUmXTT1aMXmYmpuPhkVzilXeA5EJIXVIYMb6pXFoWWWgHJZeZDKMxbMF3
qDJE1Vak+9vY/GBvIYssdo7ZQidjIVIfWoSujURQsGJtQrzKDKAe9ANWo6o6dDTR
wxEMinqBmDX7oHgsXEGLyeeiXuM/oh8pT1UnQMeJLQ3O4nAQ0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGysVkWtzZ2JTaHP1RKkWPc7fDHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzlmNDE5MjUtMmEwMS0z
MTE1LWExNjMtMzY3NDE5MDk0YTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/sgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIx3oE85e/+OYAV76HzBoAmKDqsBNH7i4fGml3YcNN889ZHlhH5aEFnn
zw5/ibcnewUEIL8szhcB9pKk+k8NopdYSKdKWWlUZ4GDSHJraqr7bb2Z8PMREbBz
pRQH4BEWwvNvl/d4OGpyado2/xK7i50Lb9czXf4ThvH4giL7NjhdIGCpTtCJ7Ef8
Eo1ZXtMAMmw05aIRld7WE8xj+IfMWirYBd5YVtEEbilOMWnWhQM2QBwidcSJPCy+
/oH0pPzul9Em1KjcY/hGHmO2QRwP+DggUZzXHaVvUu2/OG3prvuoBGICKow/tS+f
bqAKSumCDU5NEUqR07mOwidbwUU1Z4Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:52 2024 by rpki-client on console-ams.rpki-client.org