Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/c142161b-bc50-3232-8608-d801f24844d6.roa
File: c142161b-bc50-3232-8608-d801f24844d6.roa (raw, json)
Hash identifier: GsrlPx22RBNpZe+F+YECMAq+shu/MSIesVjs7x9vKhk=
Subject key identifier: 13:B9:48:B9:12:EE:65:C8:BB:8B:8D:E1:3F:C4:D1:4A:FC:38:91:34
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F43285841105393FD2716E5E5BD156EC0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/c142161b-bc50-3232-8608-d801f24844d6.roa
Signing time: Sat 25 Feb 2023 12:00:00 +0000
ROA not before: Sat 25 Feb 2023 12:00:00 +0000
ROA not after: Sun 07 Jan 2024 05:00:00 +0000
asID: 200179
IP address blocks: 104.167.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:10:53:93:fd:27:16:e5:e5:bd:15:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Feb 25 12:00:00 2023 GMT
Not After : Jan 7 05:00:00 2024 GMT
Subject: CN=318a3d12-1af6-4747-93c8-649de7335cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:28:06:5a:b5:3a:81:75:55:a4:36:47:ef:
0a:80:36:a7:a4:13:3f:a5:86:a8:14:4c:73:9b:e2:
84:c5:3d:07:9b:f3:11:3a:03:e8:f0:79:14:61:84:
8d:b1:0c:84:4c:9f:a1:ed:40:63:bf:d6:82:a5:19:
52:ea:8b:10:93:98:01:e0:3f:ae:00:5b:2a:fd:09:
0e:e7:af:a9:f2:b3:b7:3b:bb:21:db:0d:19:e9:d4:
d4:8a:81:48:78:fe:1e:9b:c9:c2:33:bf:6b:a3:d6:
4f:97:a9:97:e6:ad:3d:78:e9:63:34:64:09:d6:b0:
7d:1f:19:22:e5:4b:b1:ca:20:0d:31:7a:fc:dd:31:
25:63:65:c4:8b:d6:75:3c:57:0a:a0:09:db:9a:a9:
c7:a0:a4:49:67:0e:e7:36:72:cf:70:37:3e:9f:5c:
50:72:f9:6b:72:3f:d9:8b:9e:f9:3c:ac:c5:1b:c9:
8c:ba:39:65:14:26:d6:db:b5:65:dd:3a:15:6b:c4:
f0:f6:cd:9a:3c:26:de:08:43:f3:ea:61:df:fb:50:
48:01:39:c7:db:59:01:71:ec:e2:00:9e:9e:9c:db:
61:13:19:32:a4:aa:7e:35:86:79:fd:eb:54:5d:1d:
72:01:aa:f5:ca:0d:c8:36:34:c7:8b:ac:1a:f2:5c:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:48:B9:12:EE:65:C8:BB:8B:8D:E1:3F:C4:D1:4A:FC:38:91:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/c142161b-bc50-3232-8608-d801f24844d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.167.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:16:7a:79:7c:08:ab:a4:1e:20:ca:6b:d9:b3:62:64:2c:9a:
12:65:b2:b3:4d:36:2b:ff:72:28:23:8e:20:82:e4:2e:90:f1:
26:79:22:21:3d:c2:36:ee:dc:5d:12:2c:a8:06:42:8a:05:dc:
eb:35:40:87:2c:fb:e6:9e:95:47:a9:b9:6c:e7:43:e3:c9:20:
f3:58:f9:9d:7f:53:91:a1:7b:66:14:a8:e0:7e:3c:b4:fa:03:
53:85:f4:bb:f2:03:51:24:f7:c8:5d:71:ec:12:db:e5:d9:6d:
10:a9:99:5b:f9:7e:e1:72:73:31:ef:27:fe:f6:ac:57:4a:ba:
94:e8:b0:12:3b:ca:16:79:d1:57:6c:6a:d5:ab:41:e9:68:02:
fd:23:65:1c:a6:a3:3d:2e:2d:58:18:44:01:0b:9d:0c:fb:42:
bd:03:95:86:c6:68:29:25:47:c3:ea:d4:89:b8:66:0d:77:3e:
13:90:90:82:f6:b2:8c:06:97:0e:ef:f9:0c:ab:de:7b:ca:f3:
b0:d5:c1:9c:a2:aa:41:fb:57:9b:a1:cb:dd:b3:01:6a:38:4c:
f0:b0:55:00:c6:1d:19:77:c3:d6:eb:8a:50:48:66:c1:c0:dd:
99:41:03:38:a8:54:42:e4:89:62:95:80:a0:38:64:11:c2:9c:
94:34:65:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEEQU5P9Jxbl5b0VbsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTIzMDIyNTEyMDAwMFoXDTI0MDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MzE4YTNkMTItMWFmNi00NzQ3LTkzYzgtNjQ5ZGU3MzM1Y2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSQoBlq1OoF1VaQ2R+8KgDanpBM/pYaoFExz
m+KExT0Hm/MROgPo8HkUYYSNsQyETJ+h7UBjv9aCpRlS6osQk5gB4D+uAFsq/QkO
56+p8rO3O7sh2w0Z6dTUioFIeP4em8nCM79ro9ZPl6mX5q09eOljNGQJ1rB9Hxki
5UuxyiANMXr83TElY2XEi9Z1PFcKoAnbmqnHoKRJZw7nNnLPcDc+n1xQcvlrcj/Z
i575PKzFG8mMujllFCbW27Vl3ToVa8Tw9s2aPCbeCEPz6mHf+1BIATnH21kBcezi
AJ6enNthExkypKp+NYZ5/etUXR1yAar1yg3INjTHi6wa8lwwGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBO5SLkS7mXIu4uN4T/E0Ur8OJE0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvYzE0MjE2MWItYmM1MC0z
MjMyLTg2MDgtZDgwMWYyNDg0NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMWenl8CKukHiDKa9mzYmQsmhJlsrNNNiv/cigjjiCC5C6Q8SZ5IiE9
wjbu3F0SLKgGQooF3Os1QIcs++aelUepuWznQ+PJIPNY+Z1/U5Ghe2YUqOB+PLT6
A1OF9LvyA1Ek98hdcewS2+XZbRCpmVv5fuFyczHvJ/72rFdKupTosBI7yhZ50Vds
atWrQeloAv0jZRymoz0uLVgYRAELnQz7Qr0DlYbGaCklR8Pq1Im4Zg13PhOQkIL2
sowGlw7v+Qyr3nvK87DVwZyiqkH7V5uhy92zAWo4TPCwVQDGHRl3w9brilBIZsHA
3ZlBAzioVELkiWKVgKA4ZBHCnJQ0ZR0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:21 2024 by rpki-client on console-ams.rpki-client.org