Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/211cf8da-f678-3d02-a8a6-1c2fd96390f8.roa
File: 211cf8da-f678-3d02-a8a6-1c2fd96390f8.roa (raw, json)
Hash identifier: 8+ntlLDvWcZR6rn5OFsEht2ykmqXTvRAINDhjCN+eik=
Subject key identifier: EF:D1:40:F6:01:B0:4A:61:DD:42:0F:EA:FF:05:5B:BB:B9:A9:21:FA
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7B7570542C775EF845AF000
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/211cf8da-f678-3d02-a8a6-1c2fd96390f8.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 209.107.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b7:57:05:42:c7:75:ef:84:5a:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1fc8fb47-9358-47b7-9b45-3f10258705f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:58:95:ed:fc:04:64:ea:81:6c:fa:7b:39:
78:33:ea:4e:6c:79:a2:67:5e:c2:9b:03:0b:90:34:
97:c7:e9:ac:03:83:36:16:25:d1:d3:9d:d9:bd:5b:
f5:3b:ad:a5:8d:99:6c:f1:cd:f3:e7:52:c7:46:c1:
96:4e:75:4c:d4:89:e8:8f:05:0a:26:eb:e6:a2:0a:
0d:bf:31:53:2b:9d:af:20:93:fd:45:15:94:4b:a2:
e7:98:5c:91:41:a1:40:58:e7:5b:00:d6:4b:d7:17:
a9:81:18:6b:31:b0:55:f5:4f:36:db:a9:23:1b:55:
ad:83:fa:ce:12:18:45:67:89:12:2b:a9:ed:59:2d:
62:e8:3d:63:b0:fb:cd:68:0c:b3:46:09:9b:79:da:
3a:9e:85:33:b1:8c:c6:32:7a:ca:cd:72:4d:c9:09:
e9:24:8a:5c:23:23:b7:ac:e4:bc:78:bf:18:29:2c:
30:a6:68:e2:97:fb:be:eb:34:14:44:fd:bb:72:2b:
a3:0a:b4:17:e5:0d:ab:fd:78:9a:55:34:c5:dd:4d:
e6:50:5d:38:59:85:e0:f2:31:af:bb:3b:5a:c0:c3:
01:57:79:8d:af:ec:69:c5:dc:8c:0f:93:9f:51:44:
f9:65:8a:f8:e3:0b:41:e6:ba:4c:73:67:67:11:1d:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:40:F6:01:B0:4A:61:DD:42:0F:EA:FF:05:5B:BB:B9:A9:21:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/211cf8da-f678-3d02-a8a6-1c2fd96390f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:7f:f1:09:29:60:9a:fd:6a:36:e7:90:86:fb:48:c3:ab:04:
db:f5:78:8a:6a:31:4a:c9:17:5d:0a:8f:ff:b4:6f:24:ef:85:
b9:38:32:38:8b:fd:45:7e:82:54:b8:e2:56:ff:f9:85:9a:30:
21:de:25:35:a1:18:3b:58:f7:65:88:8d:89:14:72:fb:44:0d:
37:e2:a9:15:02:79:25:1d:b2:92:28:89:d3:4c:ef:6d:c8:fc:
8c:51:56:85:92:c6:b4:4f:72:8c:f3:5a:a9:f1:8a:45:41:51:
ca:c2:7d:21:f1:71:8d:e7:81:f1:9d:c7:8e:44:60:2f:72:b4:
a8:18:de:01:b3:db:fa:d8:4d:37:23:83:74:eb:06:1c:51:b1:
33:1f:a2:84:f2:8a:88:73:9a:94:51:47:df:16:dc:4b:e1:77:
d1:9a:74:8a:e0:39:63:fc:aa:27:4a:5f:46:75:a3:64:a9:33:
fa:aa:e1:ad:17:90:d2:10:92:79:ca:ca:1c:bc:2e:84:97:38:
a5:59:ad:cf:b4:d2:35:6a:e2:7d:fc:ab:3c:fb:eb:80:ad:5b:
eb:85:5d:6e:6f:a1:4c:f1:5e:da:77:df:0a:7d:af:f1:ec:5b:
bc:0c:4c:a6:19:65:a2:3e:18:68:0c:8e:33:d2:ae:fc:ec:79:
de:82:ee:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnt1cFQsd174Ra8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWZjOGZiNDctOTM1OC00N2I3LTliNDUtM2YxMDI1ODcwNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAhYle38BGTqgWz6ezl4M+pObHmiZ17CmwML
kDSXx+msA4M2FiXR053ZvVv1O62ljZls8c3z51LHRsGWTnVM1InojwUKJuvmogoN
vzFTK52vIJP9RRWUS6LnmFyRQaFAWOdbANZL1xepgRhrMbBV9U8226kjG1Wtg/rO
EhhFZ4kSK6ntWS1i6D1jsPvNaAyzRgmbedo6noUzsYzGMnrKzXJNyQnpJIpcIyO3
rOS8eL8YKSwwpmjil/u+6zQURP27ciujCrQX5Q2r/XiaVTTF3U3mUF04WYXg8jGv
uztawMMBV3mNr+xpxdyMD5OfUUT5ZYr44wtB5rpMc2dnER2KUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/RQPYBsEph3UIP6v8FW7u5qSH6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMjExY2Y4ZGEtZjY3OC0z
ZDAyLWE4YTYtMWMyZmQ5NjM5MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Wu8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAV/8QkpYJr9ajbnkIb7SMOrBNv1eIpqMUrJF10Kj/+0byTvhbk4MjiL
/UV+glS44lb/+YWaMCHeJTWhGDtY92WIjYkUcvtEDTfiqRUCeSUdspIoidNM723I
/IxRVoWSxrRPcozzWqnxikVBUcrCfSHxcY3ngfGdx45EYC9ytKgY3gGz2/rYTTcj
g3TrBhxRsTMfooTyiohzmpRRR98W3Evhd9GadIrgOWP8qidKX0Z1o2SpM/qq4a0X
kNIQknnKyhy8LoSXOKVZrc+00jVq4n38qzz764CtW+uFXW5voUzxXtp33wp9r/Hs
W7wMTKYZZaI+GGgMjjPSrvzsed6C7o0=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org