Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f5825e5f-f72b-39b6-82d1-2ad1d310a513.roa
File: f5825e5f-f72b-39b6-82d1-2ad1d310a513.roa (raw, json)
Hash identifier: 7EDRcoE96XttgNjhOCcZOmuNqPMiIK8/CQWpGKBXGBk=
Subject key identifier: 50:FF:32:22:96:37:8A:34:1E:08:7A:38:BD:8D:4C:65:57:67:44:38
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328583AA7B0AB98484E609CC5F52B80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f5825e5f-f72b-39b6-82d1-2ad1d310a513.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36492
IP address blocks: 209.107.184.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b0:ab:98:48:4e:60:9c:c5:f5:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b9cc07bd-0634-46b4-b52b-e4751bb00ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:36:09:4b:90:b5:07:0e:9d:93:aa:46:c5:
b1:18:ba:16:80:46:7d:86:fc:6e:d4:5a:76:cd:80:
df:2d:18:b6:1e:89:f8:fd:f4:e7:d7:d5:5e:67:ac:
30:4f:19:54:ab:b9:8d:9a:90:96:fc:a9:fb:1f:3c:
e6:f4:53:65:95:ae:af:a5:32:88:2d:7d:ab:b2:37:
04:1d:27:7c:ae:ab:90:57:71:43:eb:f5:fb:58:4a:
eb:f7:7a:7c:79:70:81:e5:8b:7a:ca:f0:82:2e:3a:
f7:47:11:d6:63:b0:50:64:68:91:c1:59:ad:f9:24:
3e:e0:87:45:75:27:76:19:57:a1:e7:c4:bf:9e:ee:
c1:f0:d0:61:d0:60:71:e0:9f:8a:b5:23:38:6b:48:
cb:34:60:dc:ca:1c:d1:72:2d:89:a4:bd:87:86:26:
e1:f7:69:ca:b1:bb:af:55:03:7b:d2:07:ea:10:a1:
67:79:0d:23:2a:ab:79:83:ab:ba:32:f5:1b:ac:ec:
50:f3:f5:16:b1:c9:b7:16:0e:4c:87:06:91:74:39:
d2:a5:e2:4e:34:97:f7:11:eb:25:fb:88:1d:39:97:
83:70:54:10:0b:95:e0:23:b7:f3:8f:c8:d4:89:0e:
58:3f:57:a5:bd:83:82:52:a4:83:73:96:98:33:f1:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FF:32:22:96:37:8A:34:1E:08:7A:38:BD:8D:4C:65:57:67:44:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/f5825e5f-f72b-39b6-82d1-2ad1d310a513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.184.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a8:db:43:b5:c8:39:d3:52:5a:a3:69:3e:b2:25:c9:f8:00:
09:d7:69:c6:61:3b:e2:39:d6:3e:48:2f:e1:48:e9:ba:e6:58:
de:48:3a:6a:43:68:c3:7d:03:3c:d8:d8:55:b6:95:ce:e7:67:
51:20:0b:b8:54:09:7b:03:d9:3b:87:fd:e9:bf:78:c4:24:4f:
72:2e:0a:1d:2a:00:c4:44:97:5c:e5:90:bb:53:87:21:2a:77:
44:fc:29:2a:46:7a:48:cf:3e:6c:2b:59:ed:e0:e4:0f:d1:f3:
73:d0:07:0b:9e:b5:d0:81:d5:fe:8b:cb:84:27:e1:97:aa:d5:
6c:90:d6:e2:57:03:f3:55:95:ba:98:40:f7:17:c8:a2:6c:4f:
f4:26:31:d3:ef:c9:c9:98:d6:0d:f3:c7:6a:4c:98:b5:b4:23:
93:39:d5:e6:11:9d:70:dd:9f:43:a9:37:7c:d3:5d:ef:46:9d:
c2:aa:e0:0c:97:0b:a7:14:13:7d:e3:a0:9c:a7:0f:93:9b:b4:
b9:51:3c:d5:ca:4c:dc:61:a1:18:df:f2:7b:ac:e8:0e:76:3e:
65:43:fa:f8:69:7d:82:8b:62:88:07:16:87:8d:96:0e:60:e7:
7f:b4:9d:de:19:7a:4c:6e:34:4d:59:af:2c:f9:d8:2d:a9:4f:
b3:2b:29:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsKuYSE5gnMX1K4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YjljYzA3YmQtMDYzNC00NmI0LWI1MmItZTQ3NTFiYjAwZWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFg2CUuQtQcOnZOqRsWxGLoWgEZ9hvxu1Fp2
zYDfLRi2Hon4/fTn19VeZ6wwTxlUq7mNmpCW/Kn7Hzzm9FNlla6vpTKILX2rsjcE
HSd8rquQV3FD6/X7WErr93p8eXCB5Yt6yvCCLjr3RxHWY7BQZGiRwVmt+SQ+4IdF
dSd2GVeh58S/nu7B8NBh0GBx4J+KtSM4a0jLNGDcyhzRci2JpL2Hhibh92nKsbuv
VQN70gfqEKFneQ0jKqt5g6u6MvUbrOxQ8/UWscm3Fg5MhwaRdDnSpeJONJf3Eesl
+4gdOZeDcFQQC5XgI7fzj8jUiQ5YP1elvYOCUqSDc5aYM/HMuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFD/MiKWN4o0Hgh6OL2NTGVXZ0Q4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZjU4MjVlNWYtZjcyYi0z
OWI2LTgyZDEtMmFkMWQzMTBhNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Wu4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAao20O1yDnTUlqjaT6yJcn4AAnXacZhO+I51j5IL+FI6brmWN5IOmpD
aMN9AzzY2FW2lc7nZ1EgC7hUCXsD2TuH/em/eMQkT3IuCh0qAMREl1zlkLtThyEq
d0T8KSpGekjPPmwrWe3g5A/R83PQBwuetdCB1f6Ly4Qn4Zeq1WyQ1uJXA/NVlbqY
QPcXyKJsT/QmMdPvycmY1g3zx2pMmLW0I5M51eYRnXDdn0OpN3zTXe9GncKq4AyX
C6cUE33joJynD5ObtLlRPNXKTNxhoRjf8nus6A52PmVD+vhpfYKLYogHFoeNlg5g
53+0nd4ZekxuNE1Zryz52C2pT7MrKdg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:03 2024 by rpki-client on console-fra.rpki-client.org