Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/fb00b47d-9f87-3e93-b5ba-8f21895fb310.roa
File: fb00b47d-9f87-3e93-b5ba-8f21895fb310.roa (raw, json)
Hash identifier: OPTPo73sqnnQMJArFVHYE47cC1as28KFyjwX145ulLE=
Subject key identifier: B8:57:CE:A8:43:2F:17:71:00:28:10:87:A6:3C:59:14:95:07:57:8F
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285843E2CE3EAD24D7A453891ADCA0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/fb00b47d-9f87-3e93-b5ba-8f21895fb310.roa
Signing time: Tue 14 Nov 2023 14:00:20 +0000
ROA not before: Tue 14 Nov 2023 14:00:20 +0000
ROA not after: Mon 12 Feb 2024 14:00:20 +0000
asID: 400654
IP address blocks: 137.59.63.0/24 maxlen: 24
103.228.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e2:ce:3e:ad:24:d7:a4:53:89:1a:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Nov 14 14:00:20 2023 GMT
Not After : Feb 12 14:00:20 2024 GMT
Subject: CN=405e59f9-cd81-42b7-8e98-762fd1d70f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:18:c5:f2:02:63:61:fc:b1:98:30:c4:4a:
33:3b:a2:f6:ce:3c:75:72:e7:0f:17:30:16:d3:32:
db:e8:fb:9d:d9:f4:4f:14:1a:2f:6e:04:3f:b5:f9:
7b:11:93:33:d6:a9:1b:4c:d4:1b:3b:df:4a:57:60:
ce:4d:99:a2:b5:bc:0e:41:ac:bb:8a:5b:5c:6e:07:
4f:8c:4b:fe:d7:ef:b8:94:7d:44:2d:ae:c0:02:80:
00:be:9d:d1:dd:75:49:a9:90:18:80:85:18:67:1f:
2d:b6:0f:f2:ed:cd:b7:bf:26:d2:39:28:7c:50:1b:
b7:ac:90:00:8d:93:15:e2:03:93:25:a7:a5:d8:ca:
f8:79:75:fe:c5:90:a8:d2:79:ca:67:35:fa:12:67:
3f:3d:72:3d:69:9a:d8:13:52:fa:d4:54:67:05:28:
31:16:57:a5:d4:ea:66:a1:2a:38:b0:06:14:6d:aa:
19:23:14:7b:00:8c:5a:f7:fa:93:97:23:01:f7:ae:
18:e0:66:74:30:87:0a:ca:18:f0:4f:c8:0c:fb:e4:
f7:2a:20:e9:84:6e:8b:d0:61:b8:e9:40:24:6a:87:
18:3e:ad:82:8b:a9:8d:1c:f3:d3:50:09:8a:17:b2:
b9:e4:89:75:10:de:4c:46:ad:24:6e:f1:54:c3:e0:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:57:CE:A8:43:2F:17:71:00:28:10:87:A6:3C:59:14:95:07:57:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/fb00b47d-9f87-3e93-b5ba-8f21895fb310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.228.85.0/24
137.59.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d5:9b:bb:5c:14:69:a2:5a:60:26:0f:2a:27:31:43:d9:9b:
bb:3d:c1:4e:6e:38:bc:22:2f:88:e6:cf:a0:13:28:74:24:d4:
bb:1e:78:12:16:a7:22:a6:5d:3e:dc:d2:3f:b4:19:e4:10:1c:
64:29:9a:80:92:fe:a9:04:a6:1f:d8:18:d4:92:12:10:bd:d1:
7a:7b:c6:9e:ca:3f:0d:59:b9:58:6b:eb:89:c6:0c:e2:5a:19:
06:b6:bb:69:d7:65:5e:ac:2c:f5:c1:bb:d4:ed:5c:2a:e5:67:
b8:95:f2:52:ce:19:ad:7e:a4:df:2a:3e:c8:c9:11:1b:06:ac:
bc:20:69:a1:0a:90:ee:a4:df:83:29:9a:70:64:d1:20:e4:0b:
eb:77:26:f6:6c:0b:6c:ed:d6:87:92:42:8a:37:82:db:2d:e5:
45:a2:37:7f:7f:de:7f:6e:f5:d0:98:e4:38:dd:16:df:13:e5:
7b:ec:d9:25:47:86:77:ae:20:f8:5a:ed:a7:41:c2:bb:7e:06:
f8:c8:70:5e:2c:d6:b5:4c:e6:b2:6b:19:3d:01:f8:2c:9c:18:
c8:44:c8:1d:fb:44:d1:73:2d:3a:7a:b5:77:96:37:e5:04:86:
1d:59:10:9a:09:5c:71:31:59:0d:fd:8f:a4:0d:35:08:7d:39:
43:f0:58:3a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEPizj6tJNekU4ka3KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTIzMTExNDE0MDAyMFoXDTI0MDIxMjE0MDAyMFowLzEtMCsGA1UEAxMk
NDA1ZTU5ZjktY2Q4MS00MmI3LThlOTgtNzYyZmQxZDcwZjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurgYxfICY2H8sZgwxEozO6L2zjx1cucPFzAW
0zLb6Pud2fRPFBovbgQ/tfl7EZMz1qkbTNQbO99KV2DOTZmitbwOQay7iltcbgdP
jEv+1++4lH1ELa7AAoAAvp3R3XVJqZAYgIUYZx8ttg/y7c23vybSOSh8UBu3rJAA
jZMV4gOTJael2Mr4eXX+xZCo0nnKZzX6Emc/PXI9aZrYE1L61FRnBSgxFlel1Opm
oSo4sAYUbaoZIxR7AIxa9/qTlyMB964Y4GZ0MIcKyhjwT8gM++T3KiDphG6L0GG4
6UAkaocYPq2Ci6mNHPPTUAmKF7K55Il1EN5MRq0kbvFUw+BtvQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLhXzqhDLxdxACgQh6Y8WRSVB1ePMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvZmIwMGI0N2QtOWY4Ny0z
ZTkzLWI1YmEtOGYyMTg5NWZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ+RVAwQA
iTs/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAILVm7tcFGmiWmAmDyonMUPZm7s9wU5uOLwiL4jmz6ATKHQk
1LseeBIWpyKmXT7c0j+0GeQQHGQpmoCS/qkEph/YGNSSEhC90Xp7xp7KPw1ZuVhr
64nGDOJaGQa2u2nXZV6sLPXBu9TtXCrlZ7iV8lLOGa1+pN8qPsjJERsGrLwgaaEK
kO6k34MpmnBk0SDkC+t3JvZsC2zt1oeSQoo3gtst5UWiN39/3n9u9dCY5DjdFt8T
5Xvs2SVHhneuIPha7adBwrt+BvjIcF4s1rVM5rJrGT0B+CycGMhEyB37RNFzLTp6
tXeWN+UEhh1ZEJoJXHExWQ39j6QNNQh9OUPwWDo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:23 2024 by rpki-client on console-ams.rpki-client.org