Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/8ae34762-a38e-3534-b893-7af69630002d.roa
File: 8ae34762-a38e-3534-b893-7af69630002d.roa (raw, json)
Hash identifier: G1EYgRWOVvRsGIP+cFb/HBZNtK3+LVHyg73Jsb0qMOk=
Subject key identifier: 5A:0C:E8:B2:0E:C5:D9:D6:8E:A5:4A:8D:68:69:F6:91:8A:B0:5A:A4
Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Certificate serial: 010D0C9F43285838C47E498633617AAAAC4C8C80
Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/8ae34762-a38e-3534-b893-7af69630002d.roa
Signing time: Fri 02 Oct 2020 04:00:00 +0000
ROA not before: Fri 02 Oct 2020 04:00:00 +0000
ROA not after: Wed 03 May 2023 04:00:00 +0000
asID: 35251
IP address blocks: 163.123.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:c4:7e:49:86:33:61:7a:aa:ac:4c:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Validity
Not Before: Oct 2 04:00:00 2020 GMT
Not After : May 3 04:00:00 2023 GMT
Subject: CN=63c2792d-647a-461f-a16d-d1affb339483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:6a:88:3f:ef:da:8e:52:ca:72:5c:c2:ca:
b4:90:ea:5c:0f:e6:19:06:1d:87:03:3a:0f:7f:c1:
69:b2:41:58:d3:ef:a0:10:d9:ba:8a:33:ea:20:35:
68:6d:68:b2:82:71:8a:8d:4c:e3:34:f3:27:df:ab:
56:39:b2:b4:69:a4:53:82:40:15:3d:02:08:b1:a3:
a6:67:4c:dd:c2:ec:d5:40:c1:b3:b3:43:1d:af:ad:
f6:5d:89:ea:e7:7d:06:0c:8e:1b:1c:43:e6:6e:8d:
9a:54:ef:52:43:5a:cf:9b:61:80:19:61:5d:ac:30:
ab:d6:12:c8:c7:3c:cd:dd:7a:02:af:5d:64:ac:5b:
ec:ce:ed:7f:b3:5e:8f:24:37:41:a7:49:04:69:00:
76:8d:7f:8f:7c:93:00:3a:82:94:03:bc:ee:ea:ea:
71:8f:23:15:82:89:fc:ac:7b:4b:da:d2:de:18:95:
e4:9c:1e:07:00:1f:c8:42:7a:89:4e:80:0e:1b:55:
46:49:f0:c9:68:48:40:2a:61:88:87:63:8b:c5:8c:
ed:f2:d4:57:46:6e:78:53:98:16:e3:d5:5b:e6:ac:
c1:07:4f:85:35:56:37:1d:6f:54:ae:df:54:cd:5a:
10:2d:d2:ce:6e:e1:be:53:72:41:79:ef:fb:b8:7b:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:E8:B2:0E:C5:D9:D6:8E:A5:4A:8D:68:69:F6:91:8A:B0:5A:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/8ae34762-a38e-3534-b893-7af69630002d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl
X509v3 Authority Key Identifier:
keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e0:8e:a3:ba:34:66:61:a0:e4:a3:c7:17:10:70:b3:7a:d2:
67:30:ca:4a:ac:ff:85:d4:8b:cd:fe:3e:8a:c5:62:3e:56:50:
8b:0b:9b:df:55:86:5f:db:bb:40:84:06:6a:40:5c:8a:3c:1f:
ce:25:4f:42:8a:08:7a:52:e1:40:08:22:3b:e5:74:74:8e:bf:
07:f1:8a:9c:e4:21:ec:b2:b4:39:58:24:68:d1:8d:22:38:a3:
7e:a7:57:bc:56:71:79:bc:44:54:c7:cb:4d:1a:f4:fd:fe:56:
5e:7f:41:bc:51:e2:ca:96:ab:0a:a6:58:74:7e:db:b1:5b:6f:
11:b3:a7:72:40:9c:96:58:66:ca:ed:a4:f1:55:3a:99:47:71:
f9:c2:d2:76:ec:a9:db:30:79:a3:9a:5e:37:60:c3:ec:75:f5:
32:09:72:53:24:20:df:a5:c6:a8:92:5e:40:b0:7e:4c:15:1d:
52:06:bd:96:14:14:5b:af:4e:a0:48:25:40:16:97:cd:67:2e:
2d:8a:a5:b5:95:c2:2d:07:32:f2:e6:d7:c7:fd:09:2f:ad:c8:
5d:42:67:9a:86:97:d8:a6:be:26:a1:87:d5:88:cd:73:c2:5d:
d8:0d:18:33:70:9e:8a:41:7f:af:e9:5c:e9:b6:10:30:4f:4c:
d8:c1:e4:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDjEfkmGM2F6qqxMjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE5YzBmZTUtOGFjNi00MmEyLTljMGEtNTA1MzRhYWEw
MWM1MB4XDTIwMTAwMjA0MDAwMFoXDTIzMDUwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NjNjMjc5MmQtNjQ3YS00NjFmLWExNmQtZDFhZmZiMzM5NDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlStqiD/v2o5SynJcwsq0kOpcD+YZBh2HAzoP
f8FpskFY0++gENm6ijPqIDVobWiygnGKjUzjNPMn36tWObK0aaRTgkAVPQIIsaOm
Z0zdwuzVQMGzs0Mdr632XYnq530GDI4bHEPmbo2aVO9SQ1rPm2GAGWFdrDCr1hLI
xzzN3XoCr11krFvszu1/s16PJDdBp0kEaQB2jX+PfJMAOoKUA7zu6upxjyMVgon8
rHtL2tLeGJXknB4HAB/IQnqJToAOG1VGSfDJaEhAKmGIh2OLxYzt8tRXRm54U5gW
49Vb5qzBB0+FNVY3HW9Urt9UzVoQLdLObuG+U3JBee/7uHtI1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoM6LIOxdnWjqVKjWhp9pGKsFqkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlj
MGZlNS04YWM2LTQyYTItOWMwYS01MDUzNGFhYTAxYzUvOGFlMzQ3NjItYTM4ZS0z
NTM0LWI4OTMtN2FmNjk2MzAwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5YzBmZTUtOGFjNi00MmEyLTlj
MGEtNTA1MzRhYWEwMWM1L2JhOWMwZmU1LThhYzYtNDJhMi05YzBhLTUwNTM0YWFh
MDFjNS5jcmwwHwYDVR0jBBgwFoAU+h7Anv0VMfFaXkG2fQcGq3byLAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYTljMGZlNS04YWM2LTQyYTItOWMwYS01MDUz
NGFhYTAxYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3v1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACngjqO6NGZhoOSjxxcQcLN60mcwykqs/4XUi83+PorFYj5WUIsLm99V
hl/bu0CEBmpAXIo8H84lT0KKCHpS4UAIIjvldHSOvwfxipzkIeyytDlYJGjRjSI4
o36nV7xWcXm8RFTHy00a9P3+Vl5/QbxR4sqWqwqmWHR+27FbbxGzp3JAnJZYZsrt
pPFVOplHcfnC0nbsqdsweaOaXjdgw+x19TIJclMkIN+lxqiSXkCwfkwVHVIGvZYU
FFuvTqBIJUAWl81nLi2KpbWVwi0HMvLm18f9CS+tyF1CZ5qGl9imviahh9WIzXPC
XdgNGDNwnopBf6/pXOm2EDBPTNjB5Jc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:07 2025 by rpki-client