Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/c2061fe8-36bb-3f26-be91-5526f1088425.roa
File: c2061fe8-36bb-3f26-be91-5526f1088425.roa (raw, json)
Hash identifier: LdZ3dZk4Kt0gt3RaPVV+2d9cDzl7BBqcRf3/TBJDHdM=
Subject key identifier: EF:D6:33:8C:78:37:1B:6D:C3:19:B5:FB:F8:0C:78:D4:F0:5D:4D:B0
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285842A73924C5259814870CF19A00
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/c2061fe8-36bb-3f26-be91-5526f1088425.roa
Signing time: Mon 24 Jul 2023 13:00:19 +0000
ROA not before: Mon 24 Jul 2023 13:00:19 +0000
ROA not after: Sun 22 Oct 2023 13:00:19 +0000
asID: 207083
IP address blocks: 161.129.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:a7:39:24:c5:25:98:14:87:0c:f1:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jul 24 13:00:19 2023 GMT
Not After : Oct 22 13:00:19 2023 GMT
Subject: CN=5e3b0a6b-52a6-4997-af98-7a333c4cdbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:c2:d3:a9:95:4a:0e:ec:92:91:d3:77:41:
d2:cb:63:98:0d:67:2b:c6:b5:95:da:58:d8:99:8f:
a6:41:9e:e6:d6:7c:78:6a:8c:a2:17:9c:3c:4d:97:
99:5d:68:5f:88:4c:32:cd:07:0f:ca:20:84:3b:39:
93:94:7e:d2:a0:b8:85:ae:31:ef:a3:13:b8:af:06:
f8:76:ea:c9:eb:46:d8:18:71:3a:8f:84:cb:8e:46:
ad:6e:3e:2c:79:ef:3c:dd:c2:34:be:63:03:b5:6d:
ae:49:d0:72:fb:c5:11:fc:1d:63:d4:7a:09:2e:62:
65:1a:18:53:d0:81:f3:9e:d4:41:80:9c:60:9e:c4:
e8:8b:8d:a3:1c:2f:cb:c3:6d:3f:b9:4e:87:6e:e8:
2b:a9:ab:2d:b3:ff:a8:e9:b2:86:5e:46:a7:be:23:
1d:77:f1:76:cb:30:18:6b:e3:49:a5:53:82:34:86:
e7:3e:e0:c9:fb:1d:a6:23:83:80:f4:db:7c:a6:38:
6d:09:52:b5:80:40:b8:ba:d5:8b:eb:80:0c:c8:c9:
fa:45:3c:7e:51:0a:82:83:75:e3:48:74:f4:bc:e6:
69:3c:a9:83:25:75:11:c1:02:c5:03:a0:db:02:9d:
34:8e:9e:f3:fe:32:c5:37:24:fc:ab:25:b6:bd:f6:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:33:8C:78:37:1B:6D:C3:19:B5:FB:F8:0C:78:D4:F0:5D:4D:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/c2061fe8-36bb-3f26-be91-5526f1088425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f7:a7:18:62:02:ac:e4:68:80:ee:4c:c1:3f:da:67:a6:6c:
f9:3e:69:c4:f6:9f:ca:64:61:fc:eb:7a:be:0e:1d:81:64:ce:
1b:64:2c:c7:14:1f:ac:c6:74:81:f1:af:26:e8:2f:60:61:e7:
7e:12:32:58:1d:9c:4c:ed:c2:1f:2a:88:69:1d:03:96:03:55:
4b:99:84:85:7c:5a:f5:e2:83:8e:b4:cd:37:5b:5d:74:c6:0d:
5f:4f:9d:c7:4a:ef:93:a0:b0:b8:22:6f:f3:02:b0:36:81:3e:
84:49:77:25:bb:f7:cc:59:5b:d7:c0:86:45:7d:24:48:bf:41:
dd:02:41:36:1c:e6:93:41:f6:b1:c9:49:9a:b9:69:28:db:8b:
cf:ba:2c:cc:e8:90:10:66:8a:3a:39:4e:00:bf:fb:ce:3c:45:
5c:a5:84:62:2e:fd:85:a3:e9:47:d8:6a:62:8d:f7:df:7b:b0:
3f:3b:43:4b:49:2e:47:08:ca:26:5a:43:97:3f:fd:14:bf:fd:
b1:2c:cd:b2:bf:68:32:ac:02:00:93:f3:40:95:13:4e:bc:08:
fa:fe:7b:73:e1:df:c7:1e:bf:30:94:3b:28:56:14:ce:da:45:
3c:e5:1f:01:7b:63:c7:b2:32:77:1d:c6:64:3d:77:67:3d:66:
1c:27:19:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKnOSTFJZgUhwzxmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTIzMDcyNDEzMDAxOVoXDTIzMTAyMjEzMDAxOVowLzEtMCsGA1UEAxMk
NWUzYjBhNmItNTJhNi00OTk3LWFmOTgtN2EzMzNjNGNkYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcrC06mVSg7skpHTd0HSy2OYDWcrxrWV2ljY
mY+mQZ7m1nx4aoyiF5w8TZeZXWhfiEwyzQcPyiCEOzmTlH7SoLiFrjHvoxO4rwb4
durJ60bYGHE6j4TLjkatbj4see883cI0vmMDtW2uSdBy+8UR/B1j1HoJLmJlGhhT
0IHzntRBgJxgnsToi42jHC/Lw20/uU6Hbugrqasts/+o6bKGXkanviMdd/F2yzAY
a+NJpVOCNIbnPuDJ+x2mI4OA9Nt8pjhtCVK1gEC4utWL64AMyMn6RTx+UQqCg3Xj
SHT0vOZpPKmDJXURwQLFA6DbAp00jp7z/jLFNyT8qyW2vfacLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/WM4x4Nxttwxm1+/gMeNTwXU2wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvYzIwNjFmZTgtMzZiYi0z
ZjI2LWJlOTEtNTUyNmYxMDg4NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoYFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHb3pxhiAqzkaIDuTME/2membPk+acT2n8pkYfzrer4OHYFkzhtkLMcU
H6zGdIHxryboL2Bh534SMlgdnEztwh8qiGkdA5YDVUuZhIV8WvXig460zTdbXXTG
DV9PncdK75OgsLgib/MCsDaBPoRJdyW798xZW9fAhkV9JEi/Qd0CQTYc5pNB9rHJ
SZq5aSjbi8+6LMzokBBmijo5TgC/+848RVylhGIu/YWj6UfYamKN9997sD87Q0tJ
LkcIyiZaQ5c//RS//bEszbK/aDKsAgCT80CVE068CPr+e3Ph38cevzCUOyhWFM7a
RTzlHwF7Y8eyMncdxmQ9d2c9ZhwnGSc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org