Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/309bb70d-4520-3ca9-a25f-cb119805c99e.roa
File: 309bb70d-4520-3ca9-a25f-cb119805c99e.roa (raw, json)
Hash identifier: Ax3WxQ3Gu/bpdXVmaH+1wSe9T1/uvCBeb316waeNBLY=
Subject key identifier: BE:8B:AB:55:02:29:AF:D3:23:E5:40:FF:D2:5F:B0:50:22:43:79:92
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285844D01A77562ABAF18FCA0DB600
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/309bb70d-4520-3ca9-a25f-cb119805c99e.roa
Signing time: Wed 07 Feb 2024 14:00:29 +0000
ROA not before: Wed 07 Feb 2024 14:00:29 +0000
ROA not after: Tue 07 May 2024 13:00:29 +0000
asID: 55154
IP address blocks: 167.160.168.0/24 maxlen: 24
167.160.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d0:1a:77:56:2a:ba:f1:8f:ca:0d:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Feb 7 14:00:29 2024 GMT
Not After : May 7 13:00:29 2024 GMT
Subject: CN=c820f736-8863-4518-9751-f62dd8d5993f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:a0:a3:c6:94:f6:97:c3:76:71:65:33:fe:
87:b5:3f:e3:06:26:a6:c8:b4:11:d1:2d:f7:db:c3:
6c:7c:c3:56:b3:af:41:7a:11:f6:d5:2e:65:f8:49:
33:84:d5:f1:8d:34:89:54:db:ed:93:c0:9a:ce:53:
37:b5:60:2e:6b:1c:9e:56:3d:aa:2a:fe:f1:b6:6e:
98:d8:0d:d8:e2:78:7c:29:ff:2e:c4:fa:6d:0c:bb:
b0:60:95:8f:b4:ad:a9:14:77:56:0c:03:62:e4:e4:
9c:2c:56:3d:a7:81:2f:75:c7:94:68:4d:e4:77:67:
f7:dc:f2:bd:34:4b:27:41:b8:96:77:92:86:3f:2a:
46:31:91:ab:da:37:5a:f9:05:05:c9:a7:42:73:9c:
c4:56:50:15:51:32:db:2d:4f:a8:4a:2d:72:ce:b0:
c1:93:09:ee:65:1a:ac:78:0f:a5:2f:28:28:bc:db:
fd:e0:31:74:0d:06:83:e7:9b:63:cd:3a:cb:8d:f5:
ff:51:4d:0b:5a:0e:cf:08:9c:b1:d6:d1:f8:5a:43:
33:ac:c7:c5:c8:d8:d5:ce:3c:61:eb:42:8b:57:2a:
30:e5:35:9a:e7:45:e7:c3:4e:0f:cf:95:27:bd:f1:
85:31:d3:d2:b7:f3:21:f1:ec:95:55:c6:83:43:6d:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:AB:55:02:29:AF:D3:23:E5:40:FF:D2:5F:B0:50:22:43:79:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/309bb70d-4520-3ca9-a25f-cb119805c99e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
167.160.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:4d:88:fb:8e:aa:82:df:01:68:fd:d7:98:c8:de:c7:95:71:
a5:2e:29:74:6c:4e:78:eb:01:f6:8b:ee:46:17:85:e2:f2:a1:
81:f4:b2:3e:73:12:3a:59:06:e6:6a:41:05:68:b2:6a:3a:bc:
65:a4:d5:01:88:97:75:17:0e:24:bf:62:e3:17:21:b6:35:3e:
84:d0:02:8f:36:a5:8d:94:b4:a4:f4:eb:89:13:3f:a6:70:61:
4d:f2:11:7f:72:e5:7e:8d:ed:5c:fc:9a:3b:14:47:7a:ea:be:
7e:14:f8:70:69:21:e7:96:c4:b0:72:b3:42:93:fb:72:24:ed:
ff:d6:d3:94:3f:ef:75:32:d2:fe:77:bb:eb:e6:42:b3:2f:67:
f1:80:35:95:0d:4b:d4:ac:b5:13:d5:84:36:e0:79:13:f1:37:
dc:10:80:d7:7a:07:41:16:6f:43:ff:5d:50:a5:19:aa:5a:9a:
89:17:7c:5c:62:c8:28:bd:52:ac:35:f4:93:9a:7e:29:11:9b:
81:20:6c:fc:be:2a:2f:db:a4:08:6c:77:64:66:99:b1:74:cf:
02:a3:a8:04:f2:05:74:ae:03:90:71:df:7c:bd:42:3e:4e:f0:
4d:a5:c0:1e:9a:15:bd:b6:c3:b6:27:07:a4:2d:3b:e2:b7:e4:
52:a3:06:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETQGndWKrrxj8oNtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MDIwNzE0MDAyOVoXDTI0MDUwNzEzMDAyOVowLzEtMCsGA1UEAxMk
YzgyMGY3MzYtODg2My00NTE4LTk3NTEtZjYyZGQ4ZDU5OTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaygo8aU9pfDdnFlM/6HtT/jBiamyLQR0S33
28NsfMNWs69BehH21S5l+EkzhNXxjTSJVNvtk8CazlM3tWAuaxyeVj2qKv7xtm6Y
2A3Y4nh8Kf8uxPptDLuwYJWPtK2pFHdWDANi5OScLFY9p4EvdceUaE3kd2f33PK9
NEsnQbiWd5KGPypGMZGr2jda+QUFyadCc5zEVlAVUTLbLU+oSi1yzrDBkwnuZRqs
eA+lLygovNv94DF0DQaD55tjzTrLjfX/UU0LWg7PCJyx1tH4WkMzrMfFyNjVzjxh
60KLVyow5TWa50Xnw04Pz5UnvfGFMdPSt/Mh8eyVVcaDQ21lewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6Lq1UCKa/TI+VA/9JfsFAiQ3mSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvMzA5YmI3MGQtNDUyMC0z
Y2E5LWEyNWYtY2IxMTk4MDVjOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp6CoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVNiPuOqoLfAWj915jI3seVcaUuKXRsTnjrAfaL7kYXheLyoYH0sj5z
EjpZBuZqQQVosmo6vGWk1QGIl3UXDiS/YuMXIbY1PoTQAo82pY2UtKT064kTP6Zw
YU3yEX9y5X6N7Vz8mjsUR3rqvn4U+HBpIeeWxLBys0KT+3Ik7f/W05Q/73Uy0v53
u+vmQrMvZ/GANZUNS9SstRPVhDbgeRPxN9wQgNd6B0EWb0P/XVClGapamokXfFxi
yCi9Uqw19JOafikRm4EgbPy+Ki/bpAhsd2RmmbF0zwKjqATyBXSuA5Bx33y9Qj5O
8E2lwB6aFb22w7YnB6QtO+K35FKjBlA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org