Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02068736-1735-3de9-b345-8ea495cd4a3b.roa
File: 02068736-1735-3de9-b345-8ea495cd4a3b.roa (raw, json)
Hash identifier: RCzd5lGi/ZWXvq7e0mWFRlN0n7MuYl0RvjYNvdncjfQ=
Subject key identifier: 82:E7:93:2F:75:18:F9:FC:25:79:51:D7:3F:8D:73:8F:EF:8C:2A:0A
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858391DFFE3F6FD37CADC6AADA800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02068736-1735-3de9-b345-8ea495cd4a3b.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Sun 04 Jun 2023 04:00:00 +0000
asID: 35554
IP address blocks: 142.252.39.0/24 maxlen: 24
142.252.17.0/24 maxlen: 24
142.252.27.0/24 maxlen: 24
23.230.161.0/24 maxlen: 24
23.230.28.0/24 maxlen: 24
23.230.127.0/24 maxlen: 24
23.230.149.0/24 maxlen: 24
142.252.7.0/24 maxlen: 24
142.252.23.0/24 maxlen: 24
142.252.36.0/24 maxlen: 24
142.252.58.0/24 maxlen: 24
142.252.93.0/24 maxlen: 24
142.252.95.0/24 maxlen: 24
142.252.143.0/24 maxlen: 24
142.252.163.0/24 maxlen: 24
142.252.165.0/24 maxlen: 24
142.252.166.0/24 maxlen: 24
142.252.169.0/24 maxlen: 24
142.252.176.0/24 maxlen: 24
142.252.182.0/24 maxlen: 24
142.252.185.0/24 maxlen: 24
142.252.197.0/24 maxlen: 24
142.252.202.0/24 maxlen: 24
142.252.206.0/24 maxlen: 24
172.121.106.0/24 maxlen: 24
172.121.110.0/24 maxlen: 24
172.121.135.0/24 maxlen: 24
172.121.140.0/24 maxlen: 24
172.121.146.0/24 maxlen: 24
172.121.154.0/24 maxlen: 24
172.121.233.0/24 maxlen: 24
172.121.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:1d:ff:e3:f6:fd:37:ca:dc:6a:ad:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Jun 4 04:00:00 2023 GMT
Subject: CN=49304bb5-39e1-4097-b8cd-ed8dd7e9d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:84:2e:62:33:fd:fc:4b:f2:0e:62:d9:e8:
25:5d:bf:fd:af:cc:eb:3f:48:ba:09:42:63:65:b6:
3f:8d:4f:e2:33:ce:e0:20:9f:a9:a3:f5:a9:b2:87:
51:f7:7e:25:20:6c:2d:15:4f:04:c6:7e:a3:12:49:
e2:36:c5:04:ea:b5:01:9e:95:b7:a3:1d:8a:15:92:
f0:45:b0:d3:b0:4f:b2:33:d3:89:f6:79:a0:08:a7:
50:1b:73:47:27:13:34:0b:3c:07:f3:f6:b2:48:5e:
f6:4d:37:09:d2:00:3b:5d:24:10:67:96:bb:88:e5:
7e:65:37:b7:5f:5f:f3:cc:f5:86:ca:79:93:43:6b:
3f:47:5b:01:e9:33:44:7e:28:13:8e:6e:68:ff:22:
82:6a:37:fb:d5:c7:b0:1b:f1:4f:35:af:f2:28:d1:
db:be:a3:5b:47:e5:aa:89:af:7b:73:96:6c:89:17:
3b:53:8a:b9:2a:99:b8:0b:b4:94:b3:d7:9e:29:f2:
fd:95:c3:af:62:88:6d:4a:77:a1:4e:5d:cc:1b:56:
85:95:07:69:42:aa:07:53:59:6c:21:85:27:34:30:
df:ea:d0:7d:f2:26:ee:af:9c:6c:0e:2a:9f:fb:e6:
7d:87:d9:b3:a1:f5:ca:cd:ea:68:4b:f0:22:49:f3:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:93:2F:75:18:F9:FC:25:79:51:D7:3F:8D:73:8F:EF:8C:2A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02068736-1735-3de9-b345-8ea495cd4a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.28.0/24
23.230.127.0/24
23.230.149.0/24
23.230.161.0/24
142.252.7.0/24
142.252.17.0/24
142.252.23.0/24
142.252.27.0/24
142.252.36.0/24
142.252.39.0/24
142.252.58.0/24
142.252.93.0/24
142.252.95.0/24
142.252.143.0/24
142.252.163.0/24
142.252.165.0-142.252.166.255
142.252.169.0/24
142.252.176.0/24
142.252.182.0/24
142.252.185.0/24
142.252.197.0/24
142.252.202.0/24
142.252.206.0/24
172.121.106.0/24
172.121.110.0/24
172.121.135.0/24
172.121.140.0/24
172.121.146.0/24
172.121.154.0/24
172.121.233.0/24
172.121.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:79:92:78:2d:cf:63:d5:1d:f9:50:70:2e:7a:88:77:3a:62:
69:e6:b8:21:47:50:f8:b2:1a:e4:04:6a:69:f0:9c:19:a8:82:
42:f3:1c:d4:32:96:69:cc:f8:88:3a:34:a3:d5:d1:d6:2f:05:
93:ea:e1:22:6e:52:a4:34:9c:6c:0e:ec:ea:4a:1b:ce:9e:2c:
83:cf:5e:92:c4:55:b8:a1:88:4d:ab:b9:6f:74:e0:65:ad:56:
78:60:80:6c:b6:92:c9:c6:2f:c7:30:29:a5:22:c5:e1:64:5e:
5e:4c:89:a5:78:cb:9c:34:ed:1d:94:21:c2:dd:60:3a:0a:48:
f6:68:c6:68:98:12:7d:28:63:a6:a0:ea:ce:51:6e:69:fb:14:
4d:00:21:3a:32:f8:b4:53:2f:77:94:d6:6f:65:6c:cc:51:40:
4d:38:92:7b:29:21:88:5e:a1:6e:a0:40:fc:e7:11:e4:d5:76:
25:3a:89:aa:1e:17:70:6e:c4:21:cd:e8:89:81:7b:fb:8a:bf:
32:52:46:0d:14:a8:9d:6a:39:b3:c9:4c:19:20:55:0c:63:96:
c9:f4:93:56:ed:37:fb:89:6c:27:67:f9:8d:50:61:23:7a:48:
64:46:6c:bf:ad:0b:a3:b0:12:5d:e8:c2:aa:a7:86:90:54:3c:
06:80:b8:c3
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWDkd/+P2/TfK3GqtqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTIzMDYwNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDkzMDRiYjUtMzllMS00MDk3LWI4Y2QtZWQ4ZGQ3ZTlkODE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J+ELmIz/fxL8g5i2eglXb/9r8zrP0i6CUJj
ZbY/jU/iM87gIJ+po/WpsodR934lIGwtFU8Exn6jEkniNsUE6rUBnpW3ox2KFZLw
RbDTsE+yM9OJ9nmgCKdQG3NHJxM0CzwH8/aySF72TTcJ0gA7XSQQZ5a7iOV+ZTe3
X1/zzPWGynmTQ2s/R1sB6TNEfigTjm5o/yKCajf71cewG/FPNa/yKNHbvqNbR+Wq
ia97c5ZsiRc7U4q5Kpm4C7SUs9eeKfL9lcOvYohtSnehTl3MG1aFlQdpQqoHU1ls
IYUnNDDf6tB98ibur5xsDiqf++Z9h9mzofXKzepoS/AiSfO5eQIDAQABo4IEFjCC
BBIwHQYDVR0OBBYEFILnky91GPn8JXlR1z+Nc4/vjCoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDIwNjg3MzYtMTczNS0z
ZGU5LWIzNDUtOGVhNDk1Y2Q0YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBAAX
5hwDBAAX5n8DBAAX5pUDBAAX5qEDBACO/AcDBACO/BEDBACO/BcDBACO/BsDBACO
/CQDBACO/CcDBACO/DoDBACO/F0DBACO/F8DBACO/I8DBACO/KMwDAMEAI78pQME
AI78pgMEAI78qQMEAI78sAMEAI78tgMEAI78uQMEAI78xQMEAI78ygMEAI78zgME
AKx5agMEAKx5bgMEAKx5hwMEAKx5jAMEAKx5kgMEAKx5mgMEAKx56QMEAKx58DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAseZJ4Lc9j1R35UHAueoh3OmJp5rghR1D4shrkBGpp8JwZqIJC8xzU
MpZpzPiIOjSj1dHWLwWT6uEiblKkNJxsDuzqShvOniyDz16SxFW4oYhNq7lvdOBl
rVZ4YIBstpLJxi/HMCmlIsXhZF5eTImleMucNO0dlCHC3WA6Ckj2aMZomBJ9KGOm
oOrOUW5p+xRNACE6Mvi0Uy93lNZvZWzMUUBNOJJ7KSGIXqFuoED85xHk1XYlOomq
HhdwbsQhzeiJgXv7ir8yUkYNFKidajmzyUwZIFUMY5bJ9JNW7Tf7iWwnZ/mNUGEj
ekhkRmy/rQujsBJd6MKqp4aQVDwGgLjD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:48 2023 by rpki-client on console-ams.rpki-client.org