Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f62ef00b-2494-39cc-a1b0-ca9140a31845.roa
File: f62ef00b-2494-39cc-a1b0-ca9140a31845.roa (raw, json)
Hash identifier: xCcENw8ud/CdDl5hB8f34SetYKiUuQOHkyDFrt+IIXY=
Subject key identifier: 47:B9:02:C3:C1:A9:B0:93:5C:52:F4:55:EB:45:FB:16:E6:D2:A0:BF
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285844431ECB5429B761CCBBC7BC00
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f62ef00b-2494-39cc-a1b0-ca9140a31845.roa
Signing time: Tue 19 Dec 2023 02:00:15 +0000
ROA not before: Tue 19 Dec 2023 02:00:15 +0000
ROA not after: Mon 18 Mar 2024 01:00:15 +0000
asID: 55154
IP address blocks: 192.161.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:43:1e:cb:54:29:b7:61:cc:bb:c7:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Dec 19 02:00:15 2023 GMT
Not After : Mar 18 01:00:15 2024 GMT
Subject: CN=2083ead7-aac5-4813-b820-f9999e37e173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:8e:90:9e:c9:41:d3:ba:6d:72:81:17:55:
99:58:bc:82:70:24:15:4f:0e:16:d5:3f:b1:ce:c4:
21:66:41:06:19:b5:cd:8b:84:f1:f5:c8:5c:ae:05:
c3:63:b9:e8:a9:73:05:85:63:59:9e:c9:50:95:8c:
cf:e5:09:4f:09:af:ec:6c:65:db:55:ab:d0:02:18:
62:c8:4c:68:d7:36:e9:d2:5b:21:d3:e5:b6:cf:5e:
1e:40:8a:b4:3d:a4:ee:d8:72:39:9c:f2:53:d1:48:
10:a9:6d:a5:99:0b:c2:fa:9c:28:d3:a6:ca:31:42:
ef:e6:e9:6f:6a:36:e1:4f:8e:00:0e:1b:67:af:88:
1a:10:59:08:d7:86:b1:c5:f1:03:63:56:ef:f8:ba:
d1:b5:c7:13:9c:71:e0:81:19:29:4a:61:5c:99:be:
d2:bd:84:ae:69:9c:ea:f0:e9:17:fb:28:be:4c:c6:
64:74:34:b9:3d:40:19:76:a2:36:25:a6:8b:ad:52:
b0:c2:f3:2b:d5:9b:e8:db:05:38:5b:1d:4b:98:c8:
7c:05:7c:65:21:95:26:0d:69:72:2f:41:4d:43:28:
9f:10:ea:fc:a1:9b:99:a7:df:97:b5:a0:41:4d:4f:
46:9c:8c:94:8e:e6:9b:0c:5c:76:20:3c:2b:70:18:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:02:C3:C1:A9:B0:93:5C:52:F4:55:EB:45:FB:16:E6:D2:A0:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f62ef00b-2494-39cc-a1b0-ca9140a31845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:23:16:d8:eb:0e:73:7c:99:cb:a0:19:df:42:7c:25:57:7c:
8e:33:4c:6c:81:42:5a:6b:8c:79:d9:0e:3b:13:0e:12:89:9a:
90:58:11:22:e7:04:fa:15:52:d8:db:20:7e:40:25:51:d4:52:
8e:67:a5:00:a1:73:66:2a:c8:7f:71:2f:ee:f5:51:53:6e:2a:
e0:f7:19:62:03:4f:06:2f:30:20:d4:5a:ff:d7:90:22:e1:fb:
2c:67:0b:7a:a9:f0:be:f8:12:0c:e1:47:96:a2:84:9d:aa:a6:
be:7a:10:fe:e7:aa:84:93:61:82:fb:2b:6b:ce:a9:9a:55:5b:
b4:bb:b5:6a:b9:52:54:dc:0b:12:62:e3:30:ad:c8:7c:27:92:
c4:bb:14:ce:7e:9b:bc:02:a8:19:d0:73:8d:4e:20:51:ec:a6:
ba:22:ac:71:a1:4a:5c:f4:30:02:59:bd:5b:55:91:29:9c:1f:
39:8c:78:1a:26:10:f9:51:0c:06:70:7c:b6:ee:39:7c:48:df:
3f:2b:71:ca:c9:72:8e:68:99:9d:bf:7a:d6:e0:c5:17:f7:8f:
81:6d:66:71:c8:47:8f:63:e0:09:e5:f1:2a:60:3c:72:53:af:
f7:b7:38:56:ae:3e:73:06:3a:40:db:6e:99:82:20:6f:08:64:
97:c1:95:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERDHstUKbdhzLvHvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTIzMTIxOTAyMDAxNVoXDTI0MDMxODAxMDAxNVowLzEtMCsGA1UEAxMk
MjA4M2VhZDctYWFjNS00ODEzLWI4MjAtZjk5OTllMzdlMTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2KOkJ7JQdO6bXKBF1WZWLyCcCQVTw4W1T+x
zsQhZkEGGbXNi4Tx9chcrgXDY7noqXMFhWNZnslQlYzP5QlPCa/sbGXbVavQAhhi
yExo1zbp0lsh0+W2z14eQIq0PaTu2HI5nPJT0UgQqW2lmQvC+pwo06bKMULv5ulv
ajbhT44ADhtnr4gaEFkI14axxfEDY1bv+LrRtccTnHHggRkpSmFcmb7SvYSuaZzq
8OkX+yi+TMZkdDS5PUAZdqI2JaaLrVKwwvMr1Zvo2wU4Wx1LmMh8BXxlIZUmDWly
L0FNQyifEOr8oZuZp9+XtaBBTU9GnIyUjuabDFx2IDwrcBi8bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEe5AsPBqbCTXFL0VetF+xbm0qC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvZjYyZWYwMGItMjQ5NC0z
OWNjLWExYjAtY2E5MTQwYTMxODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKG/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEjFtjrDnN8mcugGd9CfCVXfI4zTGyBQlprjHnZDjsTDhKJmpBYESLn
BPoVUtjbIH5AJVHUUo5npQChc2YqyH9xL+71UVNuKuD3GWIDTwYvMCDUWv/XkCLh
+yxnC3qp8L74EgzhR5aihJ2qpr56EP7nqoSTYYL7K2vOqZpVW7S7tWq5UlTcCxJi
4zCtyHwnksS7FM5+m7wCqBnQc41OIFHsproirHGhSlz0MAJZvVtVkSmcHzmMeBom
EPlRDAZwfLbuOXxI3z8rccrJco5omZ2/etbgxRf3j4FtZnHIR49j4Anl8SpgPHJT
r/e3OFauPnMGOkDbbpmCIG8IZJfBlZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org