Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d29d790-a264-397f-8e49-4fcacc355df7.roa
File: 8d29d790-a264-397f-8e49-4fcacc355df7.roa (raw, json)
Hash identifier: UCMKrRg37qsgBxZhX9ID0XMClwMMJko1/lDl/pFE4Z0=
Subject key identifier: 74:F7:E7:86:07:9B:35:2F:BD:1A:DD:0D:A7:75:FF:E0:75:AC:00:BF
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328583AA7AD2D0C2760010CEA3ACA40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d29d790-a264-397f-8e49-4fcacc355df7.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 64.9.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ad:2d:0c:27:60:01:0c:ea:3a:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=74e99295-3b2f-43ca-a300-498f00fe3f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:a7:1f:5a:6b:a6:97:70:98:12:04:be:1f:
c5:4f:c3:ed:c1:f3:8e:00:cc:2b:07:c2:b6:d1:a0:
92:42:0e:d9:b9:e7:22:22:3f:3e:b0:23:9a:ce:a6:
e4:fa:80:b9:b9:d4:62:ed:0c:c9:76:63:77:2a:df:
cf:c2:0b:a9:5e:f7:9e:51:b0:6a:4b:f5:d2:5a:95:
7f:95:61:c5:68:36:ae:91:56:f1:7b:e5:c6:0f:51:
e4:b7:5d:7b:56:0c:3a:fa:82:05:ec:19:bd:24:dc:
4b:d5:45:8e:50:63:3e:f3:a2:fb:7a:f3:ba:d6:0b:
90:0c:9e:f6:76:c1:03:15:c7:bf:66:a5:75:fc:95:
03:c7:3d:f0:98:d1:1a:ef:90:59:13:87:cd:b3:ea:
d3:8b:34:91:cd:d8:61:cc:bf:63:57:dc:04:75:cf:
26:22:26:23:4b:31:12:2b:56:be:37:91:99:a5:0b:
48:07:f6:66:5b:d2:63:d1:dd:5c:27:67:be:56:8b:
15:73:2a:8a:66:a1:95:df:1c:c8:5b:5e:fd:ed:a8:
f1:63:dd:17:dc:f1:71:02:b7:f9:ad:58:1d:45:53:
f4:9e:b4:85:ef:72:10:d6:a3:cf:85:4e:1d:27:ba:
70:6c:6a:c4:4e:7d:77:5e:3b:56:a2:a0:aa:d7:11:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:E7:86:07:9B:35:2F:BD:1A:DD:0D:A7:75:FF:E0:75:AC:00:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d29d790-a264-397f-8e49-4fcacc355df7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a9:0f:7a:61:20:f1:b7:d9:96:de:73:0e:04:a8:ca:52:e0:
a1:91:a3:94:02:48:2e:b3:56:81:9c:15:8a:72:0f:dd:18:ef:
d8:5a:00:1a:fb:67:09:55:25:2f:4e:ce:64:8f:c1:2d:b6:eb:
50:5f:23:62:84:53:65:66:e8:be:1a:dd:cd:16:c0:a0:20:03:
cd:64:1c:29:61:19:2d:28:3b:10:f8:b5:28:a5:36:e1:4b:1c:
26:dc:fb:76:85:3c:58:75:98:85:46:bd:e4:68:fe:1e:9b:34:
7c:ea:2b:ac:b6:d4:66:39:9b:36:f8:90:3d:48:db:7e:4c:f0:
63:60:0e:50:5c:eb:f8:39:59:0f:d4:70:ff:a2:e9:85:b3:3e:
05:83:70:04:84:ad:ff:2a:83:a0:00:7a:97:e3:c7:23:03:c5:
94:67:a6:00:d4:d4:6f:f9:de:9d:d1:29:fb:46:1b:25:a0:f1:
6d:c8:68:c9:ee:6a:bf:54:d0:be:ef:50:df:1a:90:c7:6b:ca:
54:47:75:93:8c:8d:cc:97:79:5d:5a:5d:44:21:65:dc:6b:d4:
74:b9:47:2e:f4:ee:b7:ee:cb:b0:53:40:f7:81:02:12:39:fa:
49:8c:00:6f:1c:98:0f:8b:a5:57:bf:f9:bc:93:2f:0d:15:c1:
2d:ff:b6:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrS0MJ2ABDOo6ykAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NzRlOTkyOTUtM2IyZi00M2NhLWEzMDAtNDk4ZjAwZmUzZjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC+nH1prppdwmBIEvh/FT8PtwfOOAMwrB8K2
0aCSQg7ZueciIj8+sCOazqbk+oC5udRi7QzJdmN3Kt/PwgupXveeUbBqS/XSWpV/
lWHFaDaukVbxe+XGD1Hkt117Vgw6+oIF7Bm9JNxL1UWOUGM+86L7evO61guQDJ72
dsEDFce/ZqV1/JUDxz3wmNEa75BZE4fNs+rTizSRzdhhzL9jV9wEdc8mIiYjSzES
K1a+N5GZpQtIB/ZmW9Jj0d1cJ2e+VosVcyqKZqGV3xzIW1797ajxY90X3PFxArf5
rVgdRVP0nrSF73IQ1qPPhU4dJ7pwbGrETn13XjtWoqCq1xGCOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHT354YHmzUvvRrdDad1/+B1rAC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOGQyOWQ3OTAtYTI2NC0z
OTdmLThlNDktNGZjYWNjMzU1ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWpD3phIPG32Zbecw4EqMpS4KGRo5QCSC6zVoGcFYpyD90Y79haABr7
ZwlVJS9OzmSPwS2261BfI2KEU2Vm6L4a3c0WwKAgA81kHClhGS0oOxD4tSilNuFL
HCbc+3aFPFh1mIVGveRo/h6bNHzqK6y21GY5mzb4kD1I235M8GNgDlBc6/g5WQ/U
cP+i6YWzPgWDcASErf8qg6AAepfjxyMDxZRnpgDU1G/53p3RKftGGyWg8W3IaMnu
ar9U0L7vUN8akMdrylRHdZOMjcyXeV1aXUQhZdxr1HS5Ry707rfuy7BTQPeBAhI5
+kmMAG8cmA+LpVe/+byTLw0VwS3/tm8=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:15 2023 by rpki-client on console-ams.rpki-client.org