Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/953b4aca-cacf-3ea6-b120-49bbeb378244.roa
File: 953b4aca-cacf-3ea6-b120-49bbeb378244.roa (raw, json)
Hash identifier: WdDqs2vFaEHOfSvYt3CdoQ6SP9mdQGUfutIYWUjs7hM=
Subject key identifier: 59:3A:54:DA:4C:88:F4:89:DC:82:2F:7C:9C:1C:51:AE:18:DF:6F:A0
Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
Certificate serial: 010D0C9F4328576D51CC73C042CFC17260CE1189
Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/953b4aca-cacf-3ea6-b120-49bbeb378244.roa
Signing time: Fri 29 May 2020 14:20:17 +0000
ROA not before: Fri 29 May 2020 04:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 41095
IP address blocks: 98.158.96.0/20 maxlen: 24
104.254.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:60:ce:11:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
Validity
Not Before: May 29 04:00:00 2020 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=28f6c860-51a0-4c37-89da-b57e80094e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:a6:2a:33:fc:e3:e1:fa:78:79:8b:08:1a:
26:92:c9:3b:63:dd:49:ac:96:50:15:3f:41:9f:c7:
69:ce:47:ac:28:ea:78:60:03:a6:af:b4:de:9a:c6:
5e:9d:1f:b6:05:ab:97:37:d4:e3:24:bf:5e:15:ac:
78:89:43:72:c4:52:6f:68:e8:64:b6:5b:87:cf:1a:
a2:69:34:20:a7:52:21:55:3d:38:1e:35:7d:ab:fc:
8e:54:8c:a8:0e:03:de:0f:42:ba:7c:43:5b:62:ed:
19:57:dd:89:8e:89:8c:08:d6:40:51:f7:6b:4c:fd:
ed:74:a8:0a:b0:55:8b:e5:48:40:65:ac:ab:19:77:
e2:71:b1:cc:4e:fe:98:3e:c6:a6:da:30:21:6b:8f:
f4:50:3e:3b:16:41:bc:6b:25:d2:5b:23:52:51:a7:
ae:5f:7b:ea:c5:42:25:e7:f7:a8:5e:3c:cb:f6:4f:
41:78:84:34:89:7a:0d:18:74:ab:fc:23:87:05:66:
c1:6a:9d:3c:d0:ea:c4:ba:d3:90:f6:e2:87:06:86:
fb:e8:d8:56:6d:fc:b8:75:52:74:12:ce:41:55:28:
5f:f5:55:f4:9c:4f:8d:46:07:84:d5:0c:7e:6c:12:
ce:9a:a1:cf:3b:55:fd:ae:e9:3c:a5:94:43:bb:94:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:54:DA:4C:88:F4:89:DC:82:2F:7C:9C:1C:51:AE:18:DF:6F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/953b4aca-cacf-3ea6-b120-49bbeb378244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl
X509v3 Authority Key Identifier:
keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
sbgp-ipAddrBlock: critical
IPv4:
98.158.96.0/20
104.254.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:da:20:e0:0e:97:9d:6c:4f:f9:a3:51:20:51:2b:60:8b:54:
40:89:2b:6f:f1:b0:3c:bb:2f:0e:2f:08:81:80:37:e3:60:ab:
a3:11:b7:97:69:dd:88:24:6e:5c:af:fb:53:97:eb:23:e7:42:
f9:5c:44:ce:d2:f9:e1:ff:6d:61:b5:09:da:9c:cc:72:e6:ca:
af:4a:10:62:b0:2d:85:26:1a:6a:a9:d8:36:aa:9b:f7:03:d7:
7f:12:f0:1d:ce:15:ac:31:78:1c:98:85:bc:a8:45:4f:4f:1e:
b7:c1:d4:3b:37:0b:45:1e:d9:94:b9:cc:74:c2:53:f6:12:5c:
32:f3:99:1c:5a:90:1e:ef:54:b1:76:2c:19:b9:1a:63:73:a2:
bb:62:79:99:0a:ff:46:07:ec:0c:b1:e9:da:4e:aa:34:13:1f:
af:28:c2:69:59:ef:58:ba:64:7a:2e:9a:10:23:64:23:6f:6d:
ba:8c:d1:4b:a7:6c:25:7e:84:c9:32:e5:ba:95:be:81:77:c0:
1f:5d:ee:1f:c6:e4:22:66:f1:e0:41:2e:9b:49:7c:62:88:30:
e0:c4:a8:5a:c7:62:3e:72:c6:0a:5b:46:b5:93:e8:c5:9f:00:
9f:99:20:59:ad:d8:0d:63:4f:e9:4f:17:23:f2:7f:92:97:58:
4f:e6:61:9f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcmDOEYkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0MmU1
ZTAeFw0yMDA1MjkwNDAwMDBaFw0yMjA5MDEwNDAwMDBaMC8xLTArBgNVBAMTJDI4
ZjZjODYwLTUxYTAtNGMzNy04OWRhLWI1N2U4MDA5NGU5MDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALFipioz/OPh+nh5iwgaJpLJO2PdSayWUBU/QZ/H
ac5HrCjqeGADpq+03prGXp0ftgWrlzfU4yS/XhWseIlDcsRSb2joZLZbh88aomk0
IKdSIVU9OB41fav8jlSMqA4D3g9CunxDW2LtGVfdiY6JjAjWQFH3a0z97XSoCrBV
i+VIQGWsqxl34nGxzE7+mD7GptowIWuP9FA+OxZBvGsl0lsjUlGnrl976sVCJef3
qF48y/ZPQXiENIl6DRh0q/wjhwVmwWqdPNDqxLrTkPbihwaG++jYVm38uHVSdBLO
QVUoX/VV9JxPjUYHhNUMfmwSzpqhzztV/a7pPKWUQ7uUs90CAwEAAaOCA1swggNX
MB0GA1UdDgQWBBRZOlTaTIj0idyCL3ycHFGuGN9voDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2
NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQyZTVlLzk1M2I0YWNhLWNhY2YtM2Vh
Ni1iMTIwLTQ5YmJlYjM3ODI0NC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNk
LTFiYTAxYjA0MmU1ZS80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJl
NWUuY3JsMB8GA1UdIwQYMBaAFN4oaGtRcneEdYBV/9raF3TNcM5CMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFi
MDQyZTVlLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBGKeYAMEAmj+
fDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEAPdog4A6XnWxP+aNRIFErYItUQIkrb/GwPLsvDi8IgYA342CroxG3
l2ndiCRuXK/7U5frI+dC+VxEztL54f9tYbUJ2pzMcubKr0oQYrAthSYaaqnYNqqb
9wPXfxLwHc4VrDF4HJiFvKhFT08et8HUOzcLRR7ZlLnMdMJT9hJcMvOZHFqQHu9U
sXYsGbkaY3Oiu2J5mQr/RgfsDLHp2k6qNBMfryjCaVnvWLpkei6aECNkI29tuozR
S6dsJX6EyTLlupW+gXfAH13uH8bkImbx4EEum0l8Yogw4MSoWsdiPnLGCltGtZPo
xZ8An5kgWa3YDWNP6U8XI/J/kpdYT+Zhnw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:08 2023 by rpki-client on console-fra.rpki-client.org