Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4fce904d-0e45-309e-a669-a015b6e2abac.roa
File: 4fce904d-0e45-309e-a669-a015b6e2abac.roa (raw, json)
Hash identifier: Y7yEVVR8nKJZ6V4pcG3tMyf99qSkKqlQB7VyxAgyPcY=
Subject key identifier: 86:68:F4:A0:6C:EA:DA:34:C2:27:80:A6:7C:2F:AD:43:C4:F2:06:AF
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7A6D6300211C6878908C500
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4fce904d-0e45-309e-a669-a015b6e2abac.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 209.107.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:d6:30:02:11:c6:87:89:08:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4ce8abed-98a7-4f6c-b2d6-4c4efc798a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:b6:8d:0f:7f:28:ba:e2:66:58:ae:47:9b:
98:ff:d6:6d:be:78:b5:88:a9:00:fc:47:53:4b:ba:
2c:5a:22:84:92:9d:dc:81:3c:7e:7c:b5:eb:c4:06:
1e:99:1b:63:d9:27:7d:3d:d1:fb:46:71:65:af:4f:
0b:f6:63:8b:6c:15:83:e4:d5:37:ff:f4:bd:00:19:
1e:62:bb:7d:54:e9:6c:6d:5c:bb:1e:4a:ce:49:9e:
c9:2e:10:9e:c7:7f:05:88:f8:4e:52:76:dd:b9:d3:
00:ad:a9:19:d9:b7:70:a7:08:18:a1:d4:83:aa:ae:
28:5c:34:24:38:4b:8f:ce:e2:57:fc:29:1f:00:5e:
ab:84:21:6d:bf:50:9e:5c:6a:e6:55:b1:3e:94:23:
f7:64:18:78:c1:91:c7:11:b0:59:bf:8f:1b:98:29:
2f:c2:6a:b5:b1:9a:64:9f:6d:af:5b:d4:6a:0e:f8:
48:03:20:fa:d4:96:7d:80:44:e3:69:b7:4e:f2:8e:
1e:23:d7:6b:58:fc:50:f6:de:f0:d2:ef:98:95:2a:
ef:c1:2b:65:ff:55:84:9d:69:1f:08:a2:7c:9b:0f:
25:f1:0b:ab:7d:98:83:36:03:7e:1e:65:a1:a5:e7:
b2:5e:e0:e9:91:97:36:dc:61:70:1f:f0:8c:eb:5d:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:F4:A0:6C:EA:DA:34:C2:27:80:A6:7C:2F:AD:43:C4:F2:06:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/4fce904d-0e45-309e-a669-a015b6e2abac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:ac:ce:4a:f8:be:36:0a:73:dc:ea:a0:79:99:b4:4a:5c:0c:
9e:57:ef:2b:d4:45:fa:f3:83:c3:2c:6e:36:10:9d:1c:08:c2:
79:75:73:8d:23:70:7b:d8:04:dc:c1:ed:eb:be:a9:ba:a6:a2:
01:2e:29:4c:ea:40:78:ce:c8:0b:ab:e6:5f:e1:a5:73:a4:90:
0d:70:58:61:c6:b1:30:c4:71:6e:c4:92:3b:ec:cb:a2:09:2d:
df:0e:1f:bf:50:25:66:b1:c6:bc:b0:3a:58:00:50:0d:28:a4:
28:81:1e:9c:39:c5:36:49:1e:ee:4c:2e:ad:a1:6c:68:b6:53:
02:2d:2a:f8:d8:69:14:e5:7c:07:14:39:ac:cc:8c:fc:7a:16:
75:e9:1d:c6:74:78:83:85:a5:c9:c3:85:12:69:47:2d:a9:8c:
2a:ca:fe:a0:b5:60:39:22:94:d1:76:b9:8c:67:8f:3f:5b:e7:
32:32:f6:b1:cf:b5:e3:6e:f6:f1:92:1b:e5:70:da:d2:5d:dc:
6a:80:53:11:0d:a9:ff:89:4f:b0:e9:71:1c:81:14:b4:bb:f5:
82:fb:c8:1d:0c:c4:4d:9d:62:57:28:30:4a:12:9c:2c:2a:fd:
08:fe:ab:24:a9:d8:c3:e7:02:a2:d2:6e:92:20:3d:01:5c:15:
5a:66:63:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnptYwAhHGh4kIxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NGNlOGFiZWQtOThhNy00ZjZjLWIyZDYtNGM0ZWZjNzk4YTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpG2jQ9/KLriZliuR5uY/9Ztvni1iKkA/EdT
S7osWiKEkp3cgTx+fLXrxAYemRtj2Sd9PdH7RnFlr08L9mOLbBWD5NU3//S9ABke
Yrt9VOlsbVy7HkrOSZ7JLhCex38FiPhOUnbdudMArakZ2bdwpwgYodSDqq4oXDQk
OEuPzuJX/CkfAF6rhCFtv1CeXGrmVbE+lCP3ZBh4wZHHEbBZv48bmCkvwmq1sZpk
n22vW9RqDvhIAyD61JZ9gETjabdO8o4eI9drWPxQ9t7w0u+YlSrvwStl/1WEnWkf
CKJ8mw8l8QurfZiDNgN+HmWhpeeyXuDpkZc23GFwH/CM611v4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZo9KBs6to0wieApnwvrUPE8gavMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNGZjZTkwNGQtMGU0NS0z
MDllLWE2NjktYTAxNWI2ZTJhYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WuxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCszkr4vjYKc9zqoHmZtEpcDJ5X7yvURfrzg8MsbjYQnRwIwnl1c40j
cHvYBNzB7eu+qbqmogEuKUzqQHjOyAur5l/hpXOkkA1wWGHGsTDEcW7Ekjvsy6IJ
Ld8OH79QJWaxxrywOlgAUA0opCiBHpw5xTZJHu5MLq2hbGi2UwItKvjYaRTlfAcU
OazMjPx6FnXpHcZ0eIOFpcnDhRJpRy2pjCrK/qC1YDkilNF2uYxnjz9b5zIy9rHP
teNu9vGSG+Vw2tJd3GqAUxENqf+JT7DpcRyBFLS79YL7yB0MxE2dYlcoMEoSnCwq
/Qj+qySp2MPnAqLSbpIgPQFcFVpmY9Q=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org