Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3217d04-53ac-365c-862b-1db9ba5d6d13.roa
File: a3217d04-53ac-365c-862b-1db9ba5d6d13.roa (raw, json)
Hash identifier: UheccL6jBOsBkuArmMVV3FxuY3c0XpeEaVdhflsYg+A=
Subject key identifier: 12:27:C0:8F:AF:DE:E4:15:EC:F0:B3:C6:02:F6:9E:4B:23:50:9C:2C
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7AEA484A6EFE395EC514B00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3217d04-53ac-365c-862b-1db9ba5d6d13.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 208.117.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ae:a4:84:a6:ef:e3:95:ec:51:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=5d92a756-8550-4946-8242-6475ff70728d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:f3:3c:17:94:45:90:1e:34:88:18:61:8d:
a1:b9:26:59:11:5b:71:03:cf:3a:6e:06:26:4f:86:
30:33:ea:52:ca:ed:76:ac:af:2d:c7:ed:41:06:5c:
d0:01:07:5e:24:b5:61:3e:0d:42:e4:57:ff:fa:02:
bd:78:88:1f:8b:84:83:3b:25:a9:1b:4f:ea:35:dd:
34:b6:81:c1:ef:c2:1b:af:68:81:e1:8b:7a:3c:8b:
93:3e:50:03:9d:ef:0b:6e:50:f3:b0:56:b6:89:aa:
09:80:e0:52:2e:66:15:dc:f6:0c:94:1f:52:d1:79:
16:8f:c0:d2:24:02:a5:53:1f:cb:84:5a:8e:5c:70:
8b:92:7f:e3:af:7f:34:8a:8a:d3:bf:ea:e5:22:12:
d8:cb:0f:dd:26:80:65:7b:77:38:00:2a:8c:9e:c4:
87:bb:72:7b:e3:c2:ea:a8:43:82:60:d9:77:0f:15:
ba:15:48:57:4b:79:69:ca:f8:ca:bb:13:e8:c6:95:
15:45:41:eb:17:e2:eb:7f:cb:ce:d4:26:c1:e4:8c:
ae:ef:0f:ed:5b:d4:bb:31:58:54:97:f5:59:fb:c1:
cc:0b:3b:a3:62:30:0d:7c:34:09:c6:ba:80:4f:86:
cc:0a:0f:9c:b3:2b:ef:c9:9d:09:5b:0c:83:91:a1:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:C0:8F:AF:DE:E4:15:EC:F0:B3:C6:02:F6:9E:4B:23:50:9C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3217d04-53ac-365c-862b-1db9ba5d6d13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:07:f7:08:01:46:dd:69:ac:57:32:ff:45:57:51:e4:de:0e:
08:1d:ce:bc:2f:b3:ad:56:ff:5f:3b:b9:10:d5:34:a4:52:c3:
fb:3c:ff:ea:3c:4d:36:87:73:ac:75:e8:38:ee:f2:5e:08:15:
db:d8:8f:d7:3d:80:d5:f8:65:cf:d4:6c:f3:6d:a5:16:99:55:
32:a0:2b:98:67:27:76:89:89:27:10:66:9b:c2:cd:0f:85:5f:
ec:97:98:84:26:a2:d8:c7:25:2c:bb:60:92:0a:e9:52:f4:11:
29:ca:e5:41:5d:a1:e6:85:9e:24:da:4c:47:1d:5b:5a:4d:e1:
f9:a9:fa:d0:20:79:86:8b:69:27:96:2f:4a:5b:a4:d9:eb:ba:
f6:6d:e8:04:e5:57:22:a6:d3:ca:b3:53:04:1d:14:41:40:e3:
8a:12:2d:03:53:55:f6:d3:fc:2f:dd:4c:fd:18:be:28:0f:f8:
44:74:2c:7b:d2:ed:7f:38:af:11:7d:ac:b0:ce:83:49:79:00:
a3:60:5e:ea:03:cd:f6:b0:46:40:41:49:1c:22:5f:b4:dd:f1:
8c:83:11:65:15:2c:8e:dd:9e:94:ba:43:85:38:39:d6:59:65:
50:b4:0d:b5:16:17:eb:3e:21:44:4d:1c:84:37:22:3b:3a:d3:
33:3a:a3:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnrqSEpu/jlexRSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NWQ5MmE3NTYtODU1MC00OTQ2LTgyNDItNjQ3NWZmNzA3MjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaPzPBeURZAeNIgYYY2huSZZEVtxA886bgYm
T4YwM+pSyu12rK8tx+1BBlzQAQdeJLVhPg1C5Ff/+gK9eIgfi4SDOyWpG0/qNd00
toHB78Ibr2iB4Yt6PIuTPlADne8LblDzsFa2iaoJgOBSLmYV3PYMlB9S0XkWj8DS
JAKlUx/LhFqOXHCLkn/jr380iorTv+rlIhLYyw/dJoBle3c4ACqMnsSHu3J748Lq
qEOCYNl3DxW6FUhXS3lpyvjKuxPoxpUVRUHrF+Lrf8vO1CbB5Iyu7w/tW9S7MVhU
l/VZ+8HMCzujYjANfDQJxrqAT4bMCg+csyvvyZ0JWwyDkaFoAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBInwI+v3uQV7PCzxgL2nksjUJwsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTMyMTdkMDQtNTNhYy0z
NjVjLTg2MmItMWRiOWJhNWQ2ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAH9wgBRt1prFcy/0VXUeTeDggdzrwvs61W/187uRDVNKRSw/s8/+o8
TTaHc6x16Dju8l4IFdvYj9c9gNX4Zc/UbPNtpRaZVTKgK5hnJ3aJiScQZpvCzQ+F
X+yXmIQmotjHJSy7YJIK6VL0ESnK5UFdoeaFniTaTEcdW1pN4fmp+tAgeYaLaSeW
L0pbpNnruvZt6ATlVyKm08qzUwQdFEFA44oSLQNTVfbT/C/dTP0YvigP+ER0LHvS
7X84rxF9rLDOg0l5AKNgXuoDzfawRkBBSRwiX7Td8YyDEWUVLI7dnpS6Q4U4OdZZ
ZVC0DbUWF+s+IURNHIQ3Ijs60zM6o3I=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org