Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa
File: c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa (raw, json)
Hash identifier: QX1Btcno17UGMHS+bZ8pfYHFqWkDM7Ee7ivdm1tDyHs=
Subject key identifier: E3:9F:67:E4:CE:91:0E:00:5A:FD:39:A1:5D:BD:2A:E2:2F:FA:EC:59
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285843AE939AEE8BCFAA5B59B01EC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa
Signing time: Thu 26 Oct 2023 21:00:16 +0000
ROA not before: Thu 26 Oct 2023 21:00:16 +0000
ROA not after: Wed 24 Jan 2024 22:00:16 +0000
asID: 20303
IP address blocks: 198.145.70.0/23 maxlen: 23
198.145.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ae:93:9a:ee:8b:cf:aa:5b:59:b0:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Oct 26 21:00:16 2023 GMT
Not After : Jan 24 22:00:16 2024 GMT
Subject: CN=bf7a5ecd-7e0d-47c3-be82-8654ac2dbaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:a0:e4:6e:72:d7:33:df:95:ee:76:90:1a:
01:45:e5:8d:de:84:c5:60:71:03:fa:98:29:ce:06:
d3:74:82:e9:fd:cb:8a:81:58:aa:f7:c1:7d:18:aa:
96:f3:d0:e3:e6:9a:88:16:63:e3:ab:f0:1f:cc:e8:
f7:88:a1:bd:b8:d3:39:9f:36:e8:b5:b9:65:99:fa:
87:8e:a9:dd:ff:96:1b:d6:e4:68:59:d7:63:59:d1:
2d:b9:bc:83:92:e2:09:c5:ac:71:a0:eb:5a:3a:2d:
91:19:76:af:41:fd:00:a0:86:23:91:cf:84:c0:84:
35:2c:0e:c7:32:64:79:2c:50:1d:fb:b6:f2:19:3d:
a5:50:fd:62:26:a5:14:8b:89:40:25:d3:2d:0c:9d:
d7:12:52:ae:47:a7:e9:f7:ad:31:ec:e7:30:db:27:
1c:03:2c:2c:e6:c1:a3:c0:96:9c:01:39:e9:24:86:
02:3c:a1:90:08:32:b5:89:e2:73:1c:3c:6b:35:0a:
8f:c1:6d:59:e4:c0:b2:37:c3:25:d4:5f:38:e0:e8:
bf:3e:2f:14:0c:e7:93:f5:4a:15:c7:99:1c:33:90:
53:26:77:c5:e8:bf:32:7a:2c:ae:42:33:de:3d:04:
ce:cb:1c:d7:76:9e:ec:dc:9e:54:41:36:8d:f1:ef:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9F:67:E4:CE:91:0E:00:5A:FD:39:A1:5D:BD:2A:E2:2F:FA:EC:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c81bb40d-5dd3-3554-af17-a1c71c6a82de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:9e:10:90:a3:26:f1:16:11:70:22:e0:67:b3:a5:e3:26:01:
0f:28:c0:d3:a9:c4:8c:f2:e9:5e:8b:3e:ef:90:12:9a:90:11:
7b:66:9d:df:4e:3a:f7:2b:91:14:ab:00:43:b5:32:6f:d1:55:
b1:5a:e7:33:e7:23:6c:03:d1:ca:59:0a:06:d9:f2:06:33:fa:
f2:7c:4f:d2:36:b6:22:0a:b3:96:c9:78:b3:19:c9:ec:73:74:
3a:e7:ce:04:48:91:9f:bc:7a:00:14:50:60:d4:e3:96:fe:9d:
c3:1a:3d:72:92:b2:d2:78:ca:d9:13:63:d8:8d:01:00:6c:7d:
db:32:a6:19:19:d1:77:08:38:a3:96:94:1e:5e:19:1d:1f:d0:
fd:d6:57:4d:07:73:79:9c:71:ff:c0:5b:66:78:04:af:2b:85:
87:52:01:07:0b:e1:86:1b:a6:b4:96:f1:60:73:4a:52:0a:4c:
ac:45:ff:f3:05:17:f2:6a:4d:61:1a:6f:e6:c3:fc:cf:0b:e5:
f6:20:11:1a:8d:1c:94:11:92:64:26:9f:16:21:87:e9:db:e7:
4b:00:dc:a6:2c:24:ba:dd:e1:08:8b:78:22:18:52:1d:ea:ac:
bc:f9:dd:f7:e7:41:43:de:71:24:fa:a0:5e:30:42:01:cf:8a:
e0:cc:8c:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOuk5rui8+qW1mwHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTIzMTAyNjIxMDAxNloXDTI0MDEyNDIyMDAxNlowLzEtMCsGA1UEAxMk
YmY3YTVlY2QtN2UwZC00N2MzLWJlODItODY1NGFjMmRiYWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmyg5G5y1zPfle52kBoBReWN3oTFYHED+pgp
zgbTdILp/cuKgViq98F9GKqW89Dj5pqIFmPjq/AfzOj3iKG9uNM5nzbotbllmfqH
jqnd/5Yb1uRoWddjWdEtubyDkuIJxaxxoOtaOi2RGXavQf0AoIYjkc+EwIQ1LA7H
MmR5LFAd+7byGT2lUP1iJqUUi4lAJdMtDJ3XElKuR6fp960x7Ocw2yccAyws5sGj
wJacATnpJIYCPKGQCDK1ieJzHDxrNQqPwW1Z5MCyN8Ml1F844Oi/Pi8UDOeT9UoV
x5kcM5BTJnfF6L8yeiyuQjPePQTOyxzXdp7s3J5UQTaN8e+WcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOfZ+TOkQ4AWv05oV29KuIv+uxZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYzgxYmI0MGQtNWRkMy0z
NTU0LWFmMTctYTFjNzFjNmE4MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALaeEJCjJvEWEXAi4GezpeMmAQ8owNOpxIzy6V6LPu+QEpqQEXtmnd9O
OvcrkRSrAEO1Mm/RVbFa5zPnI2wD0cpZCgbZ8gYz+vJ8T9I2tiIKs5bJeLMZyexz
dDrnzgRIkZ+8egAUUGDU45b+ncMaPXKSstJ4ytkTY9iNAQBsfdsyphkZ0XcIOKOW
lB5eGR0f0P3WV00Hc3mccf/AW2Z4BK8rhYdSAQcL4YYbprSW8WBzSlIKTKxF//MF
F/JqTWEab+bD/M8L5fYgERqNHJQRkmQmnxYhh+nb50sA3KYsJLrd4QiLeCIYUh3q
rLz53ffnQUPecST6oF4wQgHPiuDMjEU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:26 2024 by rpki-client on console-ams.rpki-client.org