Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa
File: 2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa (raw, json)
Hash identifier: b5WrBodTbFh2bxqYSL3FVDeTC3iQxxfuVL1G5PrknpE=
Subject key identifier: CA:5F:7C:7E:39:30:60:99:4A:C7:4B:9C:CF:3E:8C:E0:B4:61:E3:69
Certificate issuer: /CN=77194d6a-d303-4561-96ca-9940e92f659c
Certificate serial: 010D0C9F4328583881103B3236DEDB9D03F938C0
Authority key identifier: 10:61:C7:0D:0F:3F:51:E3:62:1A:14:71:62:F1:E8:E3:7C:AF:86:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa
Signing time: Mon 04 Jan 2021 05:00:00 +0000
ROA not before: Mon 04 Jan 2021 05:00:00 +0000
ROA not after: Sun 09 Apr 2023 04:00:00 +0000
asID: 16509
IP address blocks: 170.39.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:81:10:3b:32:36:de:db:9d:03:f9:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77194d6a-d303-4561-96ca-9940e92f659c
Validity
Not Before: Jan 4 05:00:00 2021 GMT
Not After : Apr 9 04:00:00 2023 GMT
Subject: CN=adc68d68-0aa1-4d66-a0fd-ea9543f2e896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:1b:4a:0c:6a:fe:d3:35:a4:e0:67:d8:ff:
bf:bb:c8:9e:9a:7b:40:3f:9f:e8:ba:b7:46:74:79:
c6:2a:ce:d2:81:42:dd:d2:9c:f4:c7:aa:c4:ae:08:
bd:43:5f:90:da:a5:42:ad:41:32:65:3b:80:31:cf:
bc:c6:70:9f:2d:62:06:3d:cd:d6:d8:85:0e:2c:6b:
5f:b7:c3:80:10:2a:0a:c9:fc:12:af:d5:4e:9a:35:
8a:27:70:22:de:b5:0a:ea:53:6e:f4:68:7c:ce:85:
a4:bc:be:40:0e:8b:88:ef:55:8a:17:74:98:1e:cb:
93:97:4b:d0:b4:38:c6:31:2c:44:92:94:1c:ac:9a:
e4:12:93:18:8d:df:2d:d7:14:c8:54:b9:ba:05:f2:
32:74:96:40:e9:77:f4:99:15:53:dd:07:c5:ac:29:
21:f3:bc:e6:0f:1b:81:64:26:9f:c8:cb:48:1e:bc:
a1:f4:d3:f7:7d:74:89:92:86:b9:9e:83:27:00:74:
9a:cc:23:a9:f3:bb:91:9f:5a:74:41:c6:15:41:17:
8f:9a:aa:2e:1e:ea:e2:6c:26:85:c5:de:c0:61:24:
40:44:b5:5e:af:6a:8a:8e:82:e1:fe:de:98:79:d5:
f1:97:be:a0:63:81:fa:ba:5b:b6:5a:32:05:17:80:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:7C:7E:39:30:60:99:4A:C7:4B:9C:CF:3E:8C:E0:B4:61:E3:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/2b396f0f-ed6c-3522-93c7-5c53c7f255d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c/77194d6a-d303-4561-96ca-9940e92f659c.crl
X509v3 Authority Key Identifier:
keyid:10:61:C7:0D:0F:3F:51:E3:62:1A:14:71:62:F1:E8:E3:7C:AF:86:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/77194d6a-d303-4561-96ca-9940e92f659c.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:60:df:74:22:2c:45:34:62:76:39:67:bc:d6:d2:ed:ce:5c:
ce:ba:60:14:7d:d6:06:55:2d:73:ac:64:fe:99:89:81:b4:a5:
78:68:70:a5:52:ff:21:ba:a3:7a:48:8b:17:77:b6:55:65:40:
e0:fd:46:5c:13:bc:87:3c:d9:f4:0b:fb:20:0c:46:05:01:92:
99:50:77:f1:1c:23:3a:6b:0a:bd:b8:77:f7:96:cc:f7:a7:70:
16:04:75:7e:17:dc:46:ad:a3:d3:2c:1b:f3:71:42:e5:5c:d0:
a1:ac:4c:8b:e1:bc:41:52:1c:d7:b9:88:43:bf:a5:d4:e5:8d:
44:74:1c:df:46:f0:2e:0c:b9:35:a2:f9:2c:f4:2a:27:87:6b:
3c:fa:ce:c2:6a:54:54:02:d6:3d:4d:9c:b8:83:f3:d2:b2:7a:
2f:ca:36:3a:9a:96:66:fc:07:c7:af:17:32:24:ce:3e:3a:f6:
06:42:a5:41:49:0b:0f:5b:0c:22:fc:07:27:d7:5d:2f:30:f8:
55:74:48:c1:7b:1a:8d:f6:79:05:d8:e0:47:7a:6d:7c:ed:ab:
69:64:f6:5d:4b:8b:ee:54:46:f3:8f:56:25:22:17:e4:3d:97:
35:23:d0:49:58:86:b1:0c:d4:ff:89:60:f5:4e:05:e3:54:38:
1b:ac:78:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDiBEDsyNt7bnQP5OMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzcxOTRkNmEtZDMwMy00NTYxLTk2Y2EtOTk0MGU5MmY2
NTljMB4XDTIxMDEwNDA1MDAwMFoXDTIzMDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YWRjNjhkNjgtMGFhMS00ZDY2LWEwZmQtZWE5NTQzZjJlODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaMbSgxq/tM1pOBn2P+/u8iemntAP5/ourdG
dHnGKs7SgULd0pz0x6rErgi9Q1+Q2qVCrUEyZTuAMc+8xnCfLWIGPc3W2IUOLGtf
t8OAECoKyfwSr9VOmjWKJ3Ai3rUK6lNu9Gh8zoWkvL5ADouI71WKF3SYHsuTl0vQ
tDjGMSxEkpQcrJrkEpMYjd8t1xTIVLm6BfIydJZA6Xf0mRVT3QfFrCkh87zmDxuB
ZCafyMtIHryh9NP3fXSJkoa5noMnAHSazCOp87uRn1p0QcYVQRePmqouHuribCaF
xd7AYSRARLVer2qKjoLh/t6YedXxl76gY4H6ulu2WjIFF4BqGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpffH45MGCZSsdLnM8+jOC0YeNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NzE5
NGQ2YS1kMzAzLTQ1NjEtOTZjYS05OTQwZTkyZjY1OWMvMmIzOTZmMGYtZWQ2Yy0z
NTIyLTkzYzctNWM1M2M3ZjI1NWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzcxOTRkNmEtZDMwMy00NTYxLTk2
Y2EtOTk0MGU5MmY2NTljLzc3MTk0ZDZhLWQzMDMtNDU2MS05NmNhLTk5NDBlOTJm
NjU5Yy5jcmwwHwYDVR0jBBgwFoAUEGHHDQ8/UeNiGhRxYvHo43yvhr0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NzE5NGQ2YS1kMzAzLTQ1NjEtOTZjYS05OTQw
ZTkyZjY1OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFg33QiLEU0YnY5Z7zW0u3OXM66YBR91gZVLXOsZP6ZiYG0pXhocKVS
/yG6o3pIixd3tlVlQOD9RlwTvIc82fQL+yAMRgUBkplQd/EcIzprCr24d/eWzPen
cBYEdX4X3Eato9MsG/NxQuVc0KGsTIvhvEFSHNe5iEO/pdTljUR0HN9G8C4MuTWi
+Sz0KieHazz6zsJqVFQC1j1NnLiD89Kyei/KNjqalmb8B8evFzIkzj469gZCpUFJ
Cw9bDCL8ByfXXS8w+FV0SMF7Go32eQXY4Ed6bXztq2lk9l1Li+5URvOPViUiF+Q9
lzUj0ElYhrEM1P+JYPVOBeNUOBuseC4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:31 2024 by rpki-client on console-ams.rpki-client.org