Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3b04171f-4dce-3af1-a1e8-24ebe1b40d96.roa
File: 3b04171f-4dce-3af1-a1e8-24ebe1b40d96.roa (raw, json)
Hash identifier: jg0izgDgdDRwkn80kVczCHvgoq3f8rkIr2dygtBnlvI=
Subject key identifier: A0:73:03:27:9A:C6:90:9C:B2:9D:2B:C1:A6:B5:8F:34:C8:86:15:EC
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285841F7B81F066AB38F654591BE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3b04171f-4dce-3af1-a1e8-24ebe1b40d96.roa
Signing time: Mon 22 May 2023 16:13:58 +0000
ROA not before: Mon 22 May 2023 16:13:58 +0000
ROA not after: Sun 20 Aug 2023 16:13:58 +0000
asID: 61317
IP address blocks: 173.214.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:f7:b8:1f:06:6a:b3:8f:65:45:91:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: May 22 16:13:58 2023 GMT
Not After : Aug 20 16:13:58 2023 GMT
Subject: CN=1e452360-ee95-4297-ba36-4cd29ea7a4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:ea:79:de:09:2e:69:79:58:17:42:20:39:
73:19:61:4c:09:d5:19:05:04:76:d0:a1:89:36:4e:
af:1a:61:76:ab:e3:90:c6:8e:c7:cf:83:d1:ba:29:
56:53:cc:51:4e:db:fa:64:f0:87:6e:a9:94:25:7a:
4a:89:a8:9f:d6:e6:f5:0a:f6:8d:a4:2c:08:17:88:
6d:1d:da:43:e1:14:88:90:e8:71:7a:e9:62:06:f7:
9d:65:50:27:c2:21:ab:93:63:59:ad:88:61:fb:7c:
cc:06:45:1e:b0:cc:4b:ab:6c:d1:55:48:4f:3b:bc:
e7:5a:bf:88:bd:21:0f:fa:1b:c2:8e:14:7a:e2:52:
fd:64:2d:dc:0e:24:3b:00:3f:d5:05:f4:07:0a:19:
a1:0a:22:27:92:92:a2:60:fd:f6:75:69:53:60:0e:
29:82:75:af:21:ef:2a:ea:1b:c4:9c:7c:49:f8:6a:
b9:76:ff:2e:94:27:4c:a1:54:f7:48:ac:2b:a8:12:
b3:10:69:18:ed:ad:4d:f1:fe:6d:3f:a1:f2:66:9c:
1e:05:a9:a5:f4:55:dc:10:50:11:f7:0b:35:5b:db:
c8:83:4c:71:a6:cb:97:cc:ed:0e:76:d6:38:77:4e:
ef:e7:f8:f5:e6:bc:b4:1e:35:c1:5a:94:21:28:3a:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:03:27:9A:C6:90:9C:B2:9D:2B:C1:A6:B5:8F:34:C8:86:15:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3b04171f-4dce-3af1-a1e8-24ebe1b40d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.214.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:2c:65:0c:6e:7b:fd:ba:05:71:ea:0c:1c:5d:e6:c8:16:1f:
05:c9:47:c8:3c:c2:c6:c8:2a:d2:f2:87:c7:e6:1b:3e:1e:e7:
e9:fd:de:45:bc:cd:f3:2a:c2:0f:e7:62:85:30:c0:e8:6d:7c:
0f:fe:22:03:08:9f:e7:8b:a8:cb:8c:f0:a5:16:67:ab:aa:63:
20:0a:63:0f:2a:7d:26:9e:2a:a5:d5:d1:fc:7d:8b:78:01:10:
71:c5:80:8e:56:e6:ae:34:3a:ae:45:ff:57:9c:7b:5c:cd:39:
f9:dd:d4:05:42:03:0e:08:00:3c:ba:52:ba:9c:12:0c:9d:d1:
6f:8d:f2:df:53:5d:3a:de:82:68:8d:4a:2a:c5:c1:a4:28:8f:
00:2e:7f:6e:4c:93:83:77:9c:cd:e0:d9:c2:87:d8:91:48:92:
e8:e6:fb:2e:45:eb:d7:dc:33:5d:5b:75:83:62:8b:46:93:7b:
76:14:5e:4a:27:ba:eb:b2:85:06:27:35:50:af:bc:46:07:23:
da:69:12:39:76:cb:eb:2f:b1:9b:5a:1b:bb:8b:4a:af:af:43:
4e:4c:bd:47:a7:c0:41:46:44:da:0c:80:d3:33:da:25:57:6d:
c9:80:53:27:9d:4d:6c:60:42:e0:eb:77:ae:c0:66:3f:9e:65:
ee:50:89:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEH3uB8GarOPZUWRvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMDUyMjE2MTM1OFoXDTIzMDgyMDE2MTM1OFowLzEtMCsGA1UEAxMk
MWU0NTIzNjAtZWU5NS00Mjk3LWJhMzYtNGNkMjllYTdhNGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytrqed4JLml5WBdCIDlzGWFMCdUZBQR20KGJ
Nk6vGmF2q+OQxo7Hz4PRuilWU8xRTtv6ZPCHbqmUJXpKiaif1ub1CvaNpCwIF4ht
HdpD4RSIkOhxeuliBvedZVAnwiGrk2NZrYhh+3zMBkUesMxLq2zRVUhPO7znWr+I
vSEP+hvCjhR64lL9ZC3cDiQ7AD/VBfQHChmhCiInkpKiYP32dWlTYA4pgnWvIe8q
6hvEnHxJ+Gq5dv8ulCdMoVT3SKwrqBKzEGkY7a1N8f5tP6HyZpweBaml9FXcEFAR
9ws1W9vIg0xxpsuXzO0OdtY4d07v5/j15ry0HjXBWpQhKDoHvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBzAyeaxpCcsp0rwaa1jzTIhhXsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2IwNDE3MWYtNGRjZS0z
YWYxLWExZTgtMjRlYmUxYjQwZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArda4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABssZQxue/26BXHqDBxd5sgWHwXJR8g8wsbIKtLyh8fmGz4e5+n93kW8
zfMqwg/nYoUwwOhtfA/+IgMIn+eLqMuM8KUWZ6uqYyAKYw8qfSaeKqXV0fx9i3gB
EHHFgI5W5q40Oq5F/1ece1zNOfnd1AVCAw4IADy6UrqcEgyd0W+N8t9TXTregmiN
SirFwaQojwAuf25Mk4N3nM3g2cKH2JFIkujm+y5F69fcM11bdYNii0aTe3YUXkon
uuuyhQYnNVCvvEYHI9ppEjl2y+svsZtaG7uLSq+vQ05MvUenwEFGRNoMgNMz2iVX
bcmAUyedTWxgQuDrd67AZj+eZe5Qibg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:00 2024 by rpki-client on console-fra.rpki-client.org