Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1b63d478-a43e-3c98-bbbd-520cad369d1c.roa
File: 1b63d478-a43e-3c98-bbbd-520cad369d1c.roa (raw, json)
Hash identifier: XToqjLjsfcY3XIhyF6Td0ZQhcyJ4r++ntaDAi/CtuZg=
Subject key identifier: F4:DE:AB:03:B3:0C:1B:7D:9D:20:82:0B:9D:7F:A3:78:7A:99:62:4E
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E484D4E9B4A359970D67D4E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1b63d478-a43e-3c98-bbbd-520cad369d1c.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 209.171.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:84:d4:e9:b4:a3:59:97:0d:67:d4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=94af5ebb-65f5-4c48-a91d-75c34a48b555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1e:cd:76:b0:84:de:c6:ad:3c:1d:5b:1b:1e:
30:8e:18:ea:de:a7:51:17:3e:4a:d4:22:63:2e:ba:
64:fb:d9:e7:5e:5d:d9:6d:36:ea:7f:b8:e3:94:46:
d9:d1:43:b9:01:99:e0:c8:c3:e6:06:8e:29:19:d6:
bb:2b:80:55:6c:12:cd:15:34:14:11:da:d6:64:1b:
25:10:d2:fc:17:4c:8a:99:35:5f:08:a0:4d:62:e2:
2f:42:f1:80:af:6f:90:dd:2f:b6:b1:95:97:c4:69:
d2:5b:c3:d3:02:57:a1:e6:43:ef:70:8f:f3:ef:f4:
ad:cd:a1:9d:03:0b:1e:77:19:55:7f:d0:ec:89:f7:
0e:7c:16:9e:fd:ce:f9:c0:a5:9b:2f:70:f9:ff:bb:
bf:5c:2b:af:c3:e3:88:12:42:cf:e2:49:a2:fe:91:
af:d2:08:c1:4d:3f:b7:16:95:ce:62:ea:86:37:41:
76:1f:61:f5:31:9b:bd:ee:16:c7:4c:4f:c7:58:b1:
d5:00:5e:35:91:5b:5a:6d:7a:69:5d:11:2e:9d:d5:
99:d2:2f:d3:3d:87:65:1f:5b:f3:33:43:c0:88:02:
c2:02:7f:9f:62:a8:84:36:ab:e6:72:a3:7b:5d:e9:
63:9d:4e:7f:78:cb:00:02:f8:68:72:d6:bd:20:75:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:AB:03:B3:0C:1B:7D:9D:20:82:0B:9D:7F:A3:78:7A:99:62:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1b63d478-a43e-3c98-bbbd-520cad369d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.171.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:7e:04:a3:d2:8d:a8:4f:89:45:36:22:27:b1:73:fe:9e:b3:
26:1d:df:1c:df:35:d0:76:3b:49:bb:7c:11:4c:f3:8c:a1:01:
fe:fb:3a:0d:e6:31:27:7a:17:6b:3f:30:42:cc:e3:83:53:4d:
1d:3f:30:ca:58:8e:f9:01:51:56:c4:fc:fb:11:03:d6:d2:ad:
a6:f7:ac:c8:ff:7e:65:e4:9e:17:b9:ab:c8:78:f0:d6:ef:1d:
62:fd:b0:9d:6a:e2:3c:de:19:ae:ae:39:f2:a4:3f:5a:f0:e9:
be:dd:eb:ac:ed:35:0c:db:45:57:dc:13:15:bc:7b:a7:e7:90:
95:a0:2a:cf:98:b6:86:45:41:26:6f:8c:c7:c1:2d:49:c4:8c:
d7:9d:20:0d:98:4c:66:1d:25:f0:bb:f7:e0:44:be:43:a2:38:
5f:bd:94:cd:dc:81:4e:a5:e8:74:a0:fa:38:f3:ce:87:da:4e:
4d:f5:e8:65:8c:26:98:ab:6d:e9:4d:4b:e3:48:c6:95:eb:47:
47:86:82:b7:74:fa:6f:cc:03:03:5c:03:fb:28:9d:ed:30:31:
67:dd:59:7b:e1:45:8d:31:ea:14:48:5b:7e:6e:19:fe:40:6f:
f8:10:d4:6a:92:35:11:e6:bf:a4:69:2c:2c:93:78:d2:54:6b:
db:69:81:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfkhNTptKNZlw1n1OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
OTRhZjVlYmItNjVmNS00YzQ4LWE5MWQtNzVjMzRhNDhiNTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h7NdrCE3satPB1bGx4wjhjq3qdRFz5K1CJj
Lrpk+9nnXl3ZbTbqf7jjlEbZ0UO5AZngyMPmBo4pGda7K4BVbBLNFTQUEdrWZBsl
ENL8F0yKmTVfCKBNYuIvQvGAr2+Q3S+2sZWXxGnSW8PTAleh5kPvcI/z7/StzaGd
AwsedxlVf9DsifcOfBae/c75wKWbL3D5/7u/XCuvw+OIEkLP4kmi/pGv0gjBTT+3
FpXOYuqGN0F2H2H1MZu97hbHTE/HWLHVAF41kVtabXppXREundWZ0i/TPYdlH1vz
M0PAiALCAn+fYqiENqvmcqN7XeljnU5/eMsAAvhocta9IHVi6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTeqwOzDBt9nSCCC51/o3h6mWJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWI2M2Q0NzgtYTQzZS0z
Yzk4LWJiYmQtNTIwY2FkMzY5ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ+BKPSjahPiUU2Iiexc/6esyYd3xzfNdB2O0m7fBFM84yhAf77Og3m
MSd6F2s/MELM44NTTR0/MMpYjvkBUVbE/PsRA9bSrab3rMj/fmXknhe5q8h48Nbv
HWL9sJ1q4jzeGa6uOfKkP1rw6b7d66ztNQzbRVfcExW8e6fnkJWgKs+YtoZFQSZv
jMfBLUnEjNedIA2YTGYdJfC79+BEvkOiOF+9lM3cgU6l6HSg+jjzzofaTk316GWM
JpirbelNS+NIxpXrR0eGgrd0+m/MAwNcA/sone0wMWfdWXvhRY0x6hRIW35uGf5A
b/gQ1GqSNRHmv6RpLCyTeNJUa9tpgYI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org