Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/68fb2e40-c843-31db-a696-69ece5344ccb.roa
File: 68fb2e40-c843-31db-a696-69ece5344ccb.roa (raw, json)
Hash identifier: FcDPeD3T5JzAWLqbLOJmYfTLRKrcmt8bn9UZ5aQkSzs=
Subject key identifier: 7A:64:6F:E6:4F:1A:79:33:D6:51:EB:11:8C:0C:36:0F:3C:B3:BA:3B
Certificate issuer: /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial: 010D0C9F4328576D51CC73C042CFC1730CBC58ED
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/68fb2e40-c843-31db-a696-69ece5344ccb.roa
Signing time: Wed 01 Jul 2020 23:35:36 +0000
ROA not before: Wed 01 Jul 2020 04:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 216.211.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0c:bc:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
Validity
Not Before: Jul 1 04:00:00 2020 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=99ef856d-e5cc-43a0-81ab-83aeb5532ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:25:1e:f1:af:55:b1:df:c0:e1:cd:b7:1b:
c8:08:ed:49:b7:4a:1e:7f:ee:b5:4e:85:ec:4f:e5:
35:88:3d:99:44:e1:35:ee:77:19:77:7c:47:fd:b5:
60:d8:7e:54:0c:cd:28:96:41:3f:c8:8d:f3:4e:0f:
73:df:b0:25:82:ed:98:8b:c8:1c:dd:6d:86:e4:17:
14:f9:03:65:c9:b1:5e:df:3d:00:9b:e2:04:d3:ea:
49:bd:80:c4:37:c1:e5:2d:8c:84:73:8a:65:09:c8:
e0:05:20:11:46:65:67:fd:b8:c1:57:02:7b:b7:2f:
84:5c:1e:13:c5:b0:60:eb:7b:93:b8:f2:d0:9f:ac:
fd:49:5a:33:da:8d:87:85:64:3f:93:a3:86:67:73:
ac:32:74:7b:f2:17:8a:ac:0e:cc:5f:59:a0:d9:85:
e0:6f:69:22:f3:73:c6:ce:14:3c:3e:15:3a:06:37:
63:6a:83:4a:ca:a9:d4:99:5a:62:a6:6d:c1:93:e1:
90:0d:11:6e:ce:37:63:3d:12:88:f1:66:93:18:c9:
ca:39:ad:cd:fd:fc:54:eb:00:1c:63:a4:0d:24:68:
76:96:6e:57:5e:c9:cd:2d:19:6f:9b:bc:02:27:f1:
a6:ea:e0:a8:15:94:6a:3a:1a:37:dc:a7:54:1b:d0:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:6F:E6:4F:1A:79:33:D6:51:EB:11:8C:0C:36:0F:3C:B3:BA:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/68fb2e40-c843-31db-a696-69ece5344ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl
X509v3 Authority Key Identifier:
keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
sbgp-ipAddrBlock: critical
IPv4:
216.211.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:02:19:09:95:65:7f:2b:40:bf:c1:5e:af:a0:99:a7:e7:c5:
63:39:65:10:1a:85:3b:c3:d7:15:99:3f:a4:a4:5a:d5:b5:95:
02:d4:c2:28:73:45:bd:2e:c2:d5:19:84:3d:47:03:aa:a1:43:
9c:c3:08:60:6b:37:a4:c0:a8:bb:0b:4b:3b:8f:f6:5e:15:12:
bb:8e:d1:74:67:53:f8:a9:79:10:bd:77:b9:eb:51:02:e7:8c:
a8:80:1c:21:15:c6:c4:6b:81:e1:7d:38:29:c7:ac:5c:7d:13:
53:61:28:8e:be:04:d7:fc:51:11:86:c2:2d:0b:f8:05:88:ba:
1d:0f:98:83:8f:67:4a:c1:19:d6:5f:9f:c9:ea:9c:e3:3f:85:
b7:14:97:fc:93:ae:e6:46:53:9d:9c:bc:7f:41:d7:e2:5d:e8:
a5:1f:bd:d6:3b:1c:a8:f9:bb:55:08:a4:94:d5:f3:a1:66:fa:
a2:e9:ac:3d:fe:48:f1:6d:6d:11:c9:4d:aa:e6:fe:27:9e:a1:
86:8c:82:b7:a8:da:ac:45:91:8f:58:e8:c8:88:67:bb:ec:c3:
36:88:92:e7:f7:e5:fb:df:36:80:67:9d:54:5f:70:97:99:72:
08:ed:50:ad:83:3b:93:29:bb:ff:b0:a6:23:6b:7f:26:4b:08:
7a:27:3e:99
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcwy8WO0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGQ5MWY1MDVhLTBiNzgtNGJjNC1hODU3LWY4NmQzNDE2MzIw
MjAeFw0yMDA3MDEwNDAwMDBaFw0yMjEwMDQwNDAwMDBaMC8xLTArBgNVBAMTJDk5
ZWY4NTZkLWU1Y2MtNDNhMC04MWFiLTgzYWViNTUzMmJhMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANqkJR7xr1Wx38DhzbcbyAjtSbdKHn/utU6F7E/l
NYg9mUThNe53GXd8R/21YNh+VAzNKJZBP8iN804Pc9+wJYLtmIvIHN1thuQXFPkD
ZcmxXt89AJviBNPqSb2AxDfB5S2MhHOKZQnI4AUgEUZlZ/24wVcCe7cvhFweE8Ww
YOt7k7jy0J+s/UlaM9qNh4VkP5OjhmdzrDJ0e/IXiqwOzF9ZoNmF4G9pIvNzxs4U
PD4VOgY3Y2qDSsqp1JlaYqZtwZPhkA0Rbs43Yz0SiPFmkxjJyjmtzf38VOsAHGOk
DSRodpZuV17JzS0Zb5u8AifxpurgqBWUajoaN9ynVBvQuo0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR6ZG/mTxp5M9ZR6xGMDDYPPLO6OzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDkxZjUw
NWEtMGI3OC00YmM0LWE4NTctZjg2ZDM0MTYzMjAyLzY4ZmIyZTQwLWM4NDMtMzFk
Yi1hNjk2LTY5ZWNlNTM0NGNjYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Q5MWY1MDVhLTBiNzgtNGJjNC1hODU3
LWY4NmQzNDE2MzIwMi9kOTFmNTA1YS0wYjc4LTRiYzQtYTg1Ny1mODZkMzQxNjMy
MDIuY3JsMB8GA1UdIwQYMBaAFLSrucaFQustg+gBWy9Kie3rpxnpMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZDkxZjUwNWEtMGI3OC00YmM0LWE4NTctZjg2ZDM0
MTYzMjAyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANjTojBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAWwIZCZVlfytAv8Fer6CZp+fFYzllEBqFO8PXFZk/pKRa1bWVAtTCKHNFvS7C
1RmEPUcDqqFDnMMIYGs3pMCouwtLO4/2XhUSu47RdGdT+Kl5EL13uetRAueMqIAc
IRXGxGuB4X04KcesXH0TU2Eojr4E1/xREYbCLQv4BYi6HQ+Yg49nSsEZ1l+fyeqc
4z+FtxSX/JOu5kZTnZy8f0HX4l3opR+91jscqPm7VQiklNXzoWb6oumsPf5I8W1t
EclNqub+J56hhoyCt6jarEWRj1joyIhnu+zDNoiS5/fl+982gGedVF9wl5lyCO1Q
rYM7kym7/7CmI2t/JksIeic+mQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:23 2023 by rpki-client on console-fra.rpki-client.org