Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/bca2fb84-659d-3d50-b215-45802146f05b.roa
File: bca2fb84-659d-3d50-b215-45802146f05b.roa (raw, json)
Hash identifier: IOeJtg2eTJeYNXLRR5x/rof18uYDscVuur+eYBZ005Q=
Subject key identifier: C0:A4:1A:75:18:10:87:E1:19:26:D8:70:0F:FC:E7:64:87:37:96:E4
Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c
Certificate serial: 010D0C9F432858429FD873590DF10EA6600CA900
Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/bca2fb84-659d-3d50-b215-45802146f05b.roa
Signing time: Fri 21 Jul 2023 21:34:55 +0000
ROA not before: Fri 21 Jul 2023 21:34:55 +0000
ROA not after: Thu 19 Oct 2023 21:34:55 +0000
asID: 397735
IP address blocks: 158.51.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:9f:d8:73:59:0d:f1:0e:a6:60:0c:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c
Validity
Not Before: Jul 21 21:34:55 2023 GMT
Not After : Oct 19 21:34:55 2023 GMT
Subject: CN=d1ab48b2-900b-4ec6-8ee9-d0ecc9baadac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:4e:01:ac:82:a1:7d:d3:71:7a:47:2c:c6:
b6:55:f5:33:22:69:87:c2:4a:ee:2d:75:48:d7:d2:
6d:12:42:70:81:c1:0d:8c:3e:16:7f:db:c3:99:05:
fd:a8:2c:fb:0c:eb:56:89:2c:d0:24:76:3d:8a:3d:
48:5d:58:70:08:ce:0c:1d:4d:9c:c5:f8:2d:96:1a:
3b:27:a4:c1:52:77:65:94:05:f6:8a:83:1d:8c:56:
68:33:d3:05:ca:e0:74:95:4f:49:98:cd:7b:9d:ff:
f6:c6:75:41:22:39:fd:14:d2:22:af:2f:af:a5:64:
10:9b:73:d9:e4:8d:f2:b8:d8:fb:2c:1b:35:00:f1:
03:9b:62:e0:f4:02:1b:9b:c6:98:63:84:6b:63:e9:
1a:ce:39:0c:07:5d:f5:ee:38:80:a8:3a:26:df:88:
64:a1:7f:fc:50:27:6c:8a:c5:4b:16:12:6b:cc:d2:
23:f8:c8:12:28:02:7c:be:57:93:bf:25:c3:d5:e4:
89:6d:cd:4c:34:a9:d9:bf:22:d2:9c:58:9d:d2:7e:
2d:e6:51:6a:c3:a9:58:b2:07:2c:fb:5f:6a:f4:fb:
dd:34:08:4e:49:2d:0c:92:43:77:c3:73:44:68:b6:
f5:26:74:be:ec:04:94:e4:56:3b:2a:7f:1c:48:90:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:1A:75:18:10:87:E1:19:26:D8:70:0F:FC:E7:64:87:37:96:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/bca2fb84-659d-3d50-b215-45802146f05b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl
X509v3 Authority Key Identifier:
keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:49:e0:39:48:7f:67:13:65:07:78:51:31:1d:f0:ef:2e:fc:
bc:bf:41:9e:77:a7:49:19:d7:67:65:e7:6a:55:1b:b6:ef:e9:
51:2f:10:01:4e:7f:13:5e:98:b8:bf:f5:80:f8:70:f4:9c:62:
89:4b:f3:aa:d1:28:52:7a:35:83:dd:75:0d:6a:b6:44:f8:60:
53:90:5b:b7:4b:e4:c5:61:91:e8:36:6a:09:0d:bc:0d:a4:3d:
34:6c:6d:e7:85:5f:4b:1c:9f:cc:d1:c0:bf:aa:dd:88:cc:eb:
06:de:fb:c7:d4:c4:8a:13:35:e3:f9:21:41:03:ad:e2:80:b9:
68:60:93:e3:6f:de:42:7f:4f:52:21:91:8a:76:3e:7d:77:af:
01:c0:0b:9c:a2:8e:6a:0f:6a:26:72:69:3b:f3:8b:6f:2b:4a:
c0:b6:9e:28:45:21:d2:c6:ab:56:51:ee:a3:9f:f6:58:82:21:
96:2a:43:7c:0b:aa:99:fa:32:77:04:49:3b:34:2b:81:7f:51:
89:04:63:9e:24:87:7e:5b:14:20:b3:d7:55:42:59:4b:f6:be:
86:27:c5:b1:45:80:76:32:2b:28:c1:fa:67:7b:c2:e6:db:fe:
c6:bb:67:2e:18:e3:38:83:28:98:d5:fe:d7:45:8e:e6:8f:f8:
fb:4a:b3:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKf2HNZDfEOpmAMqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz
ODBjMB4XDTIzMDcyMTIxMzQ1NVoXDTIzMTAxOTIxMzQ1NVowLzEtMCsGA1UEAxMk
ZDFhYjQ4YjItOTAwYi00ZWM2LThlZTktZDBlY2M5YmFhZGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1pOAayCoX3TcXpHLMa2VfUzImmHwkruLXVI
19JtEkJwgcENjD4Wf9vDmQX9qCz7DOtWiSzQJHY9ij1IXVhwCM4MHU2cxfgtlho7
J6TBUndllAX2ioMdjFZoM9MFyuB0lU9JmM17nf/2xnVBIjn9FNIiry+vpWQQm3PZ
5I3yuNj7LBs1APEDm2Lg9AIbm8aYY4RrY+kazjkMB1317jiAqDom34hkoX/8UCds
isVLFhJrzNIj+MgSKAJ8vleTvyXD1eSJbc1MNKnZvyLSnFid0n4t5lFqw6lYsgcs
+19q9PvdNAhOSS0MkkN3w3NEaLb1JnS+7ASU5FY7Kn8cSJDzxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCkGnUYEIfhGSbYcA/852SHN5bkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2
ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYmNhMmZiODQtNjU5ZC0z
ZDUwLWIyMTUtNDU4MDIxNDZmMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4
MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm
MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy
OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxJ4DlIf2cTZQd4UTEd8O8u/Ly/QZ53p0kZ12dl52pVG7bv6VEvEAFO
fxNemLi/9YD4cPScYolL86rRKFJ6NYPddQ1qtkT4YFOQW7dL5MVhkeg2agkNvA2k
PTRsbeeFX0scn8zRwL+q3YjM6wbe+8fUxIoTNeP5IUEDreKAuWhgk+Nv3kJ/T1Ih
kYp2Pn13rwHAC5yijmoPaiZyaTvzi28rSsC2nihFIdLGq1ZR7qOf9liCIZYqQ3wL
qpn6MncESTs0K4F/UYkEY54kh35bFCCz11VCWUv2voYnxbFFgHYyKyjB+md7wubb
/sa7Zy4Y4ziDKJjV/tdFjuaP+PtKsyM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org