Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/32cbad3c-138a-3c32-9438-214b6d56001d.roa
File: 32cbad3c-138a-3c32-9438-214b6d56001d.roa (raw, json)
Hash identifier: YJRkdAhqk/qmdtRhEyE7dlx7M9Q5iEmsyij56z0YOpc=
Subject key identifier: 4A:38:84:67:D8:07:9C:B8:FB:6F:F7:03:27:4E:58:1B:8A:F3:46:24
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858451901E8B7D25CAC53F4DAB780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/32cbad3c-138a-3c32-9438-214b6d56001d.roa
Signing time: Mon 04 Mar 2024 16:45:08 +0000
ROA not before: Mon 04 Mar 2024 16:45:08 +0000
ROA not after: Sun 02 Jun 2024 15:45:08 +0000
asID: 834
IP address blocks: 206.206.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:19:01:e8:b7:d2:5c:ac:53:f4:da:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 4 16:45:08 2024 GMT
Not After : Jun 2 15:45:08 2024 GMT
Subject: CN=d5e5ae0e-1ced-4f29-9d98-fc645f85f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:10:83:02:51:23:51:aa:b7:ab:31:68:82:
ed:0a:29:48:9b:ad:78:ce:47:90:22:ac:10:b3:5b:
8f:a1:70:6b:de:27:4a:f2:37:d8:0e:c7:01:4d:8b:
a0:e6:1d:cb:82:9b:ca:a1:14:78:cf:e0:cd:28:87:
ae:45:0c:64:89:50:d2:0e:f2:05:77:a6:b8:95:0e:
4b:55:74:1e:da:ab:4d:59:da:79:06:e6:c5:c1:37:
14:59:91:f6:39:ac:37:e9:86:51:82:42:67:10:98:
65:39:86:4a:35:5c:37:d6:7d:29:f0:c2:f5:b0:96:
49:c6:f8:be:25:a6:5a:66:c9:0b:49:61:33:c8:55:
f0:b4:b2:f9:08:fe:7d:f6:ed:8d:88:e7:fd:2c:68:
4d:05:f8:ce:af:94:99:57:90:4a:c7:71:c1:d3:84:
b3:6b:09:bb:6e:6d:98:dc:42:b9:8c:2f:4c:2e:6c:
1a:01:e2:aa:81:5f:ee:8c:72:4c:9e:58:ee:5e:8a:
fb:24:04:49:08:3f:b3:5b:3a:b7:13:91:17:11:f8:
23:6c:3f:18:31:46:5f:c0:3d:16:25:0e:df:ff:0b:
d9:d1:52:a1:11:b2:d8:85:89:91:d1:cc:58:02:9b:
73:e3:cf:b8:40:93:f7:1b:ec:1f:81:cf:c7:9a:f3:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:84:67:D8:07:9C:B8:FB:6F:F7:03:27:4E:58:1B:8A:F3:46:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/32cbad3c-138a-3c32-9438-214b6d56001d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e0:d5:e9:a9:63:ef:14:6b:79:71:4e:0d:79:bb:5e:32:7c:48:
8e:a9:b1:99:fe:ee:92:86:46:f6:05:c5:3d:17:81:c0:4f:ab:
56:a9:c0:4f:43:e0:bf:81:e6:5f:30:70:d7:b4:61:88:cc:2b:
c6:e9:c3:b1:7e:f7:51:38:e8:a4:a8:1d:ae:d0:8f:ab:0b:ec:
07:08:40:c3:3e:05:cc:13:e7:ab:de:72:75:60:47:20:66:d9:
dc:4d:21:79:a7:d8:5b:66:df:8f:82:3f:34:ad:34:e4:c9:9e:
47:d2:be:bb:bd:1b:03:3a:79:95:f1:9e:b3:34:a9:74:17:04:
fc:cc:e2:1f:95:74:44:08:a1:05:28:5a:6e:00:0c:ad:b4:d8:
58:5f:89:b4:93:b9:b1:80:c8:32:12:db:f7:13:58:df:17:19:
16:10:54:4c:14:bf:8b:df:ac:cc:0d:81:e2:7c:d7:f4:a6:e6:
9a:72:a2:3c:a4:9d:06:71:b3:be:87:7f:99:d8:2e:3b:0a:a4:
d6:fc:8d:a6:46:9d:3c:a6:42:8b:34:da:36:8d:4b:00:16:99:
ba:61:f5:da:a4:7e:3e:b4:4b:c5:51:e2:53:0b:0a:f9:0b:5a:
b6:e7:b3:bc:96:d9:70:f6:c0:ae:29:19:99:10:d1:c4:c3:54:
38:d4:bd:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUZAei30lysU/Tat4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMwNDE2NDUwOFoXDTI0MDYwMjE1NDUwOFowLzEtMCsGA1UEAxMk
ZDVlNWFlMGUtMWNlZC00ZjI5LTlkOTgtZmM2NDVmODVmODU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbUQgwJRI1Gqt6sxaILtCilIm614zkeQIqwQ
s1uPoXBr3idK8jfYDscBTYug5h3LgpvKoRR4z+DNKIeuRQxkiVDSDvIFd6a4lQ5L
VXQe2qtNWdp5BubFwTcUWZH2Oaw36YZRgkJnEJhlOYZKNVw31n0p8ML1sJZJxvi+
JaZaZskLSWEzyFXwtLL5CP599u2NiOf9LGhNBfjOr5SZV5BKx3HB04Szawm7bm2Y
3EK5jC9MLmwaAeKqgV/ujHJMnljuXor7JARJCD+zWzq3E5EXEfgjbD8YMUZfwD0W
JQ7f/wvZ0VKhEbLYhYmR0cxYAptz48+4QJP3G+wfgc/HmvM3LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEo4hGfYB5y4+2/3AydOWBuK80YkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMzJjYmFkM2MtMTM4YS0z
YzMyLTk0MzgtMjE0YjZkNTYwMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAODV6alj7xRreXFODXm7XjJ8SI6psZn+7pKGRvYFxT0XgcBPq1apwE9D
4L+B5l8wcNe0YYjMK8bpw7F+91E46KSoHa7Qj6sL7AcIQMM+BcwT56vecnVgRyBm
2dxNIXmn2Ftm34+CPzStNOTJnkfSvru9GwM6eZXxnrM0qXQXBPzM4h+VdEQIoQUo
Wm4ADK202FhfibSTubGAyDIS2/cTWN8XGRYQVEwUv4vfrMwNgeJ81/Sm5ppyojyk
nQZxs76Hf5nYLjsKpNb8jaZGnTymQos02jaNSwAWmbph9dqkfj60S8VR4lMLCvkL
Wrbns7yW2XD2wK4pGZkQ0cTDVDjUvfE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:16 2024 by rpki-client on console-ams.rpki-client.org