Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/74a753e5-c7ff-3449-92de-5425ae4be09e.roa
File: 74a753e5-c7ff-3449-92de-5425ae4be09e.roa (raw, json)
Hash identifier: +IVJmQv5NmYps7qDwDONRL9Lk8l+tdXy2Ar0X4x2quk=
Subject key identifier: 4C:F6:A1:E6:B0:13:5C:B4:F7:92:14:E4:9C:E6:18:7D:D6:0D:5E:7C
Certificate issuer: /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial: 010D0C9F43285839498E0DFD99C61FACFF123C80
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/74a753e5-c7ff-3449-92de-5425ae4be09e.roa
Signing time: Wed 17 Mar 2021 04:00:00 +0000
ROA not before: Wed 17 Mar 2021 04:00:00 +0000
ROA not after: Fri 17 Mar 2023 04:00:00 +0000
asID: 31849
IP address blocks: 199.30.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:49:8e:0d:fd:99:c6:1f:ac:ff:12:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Validity
Not Before: Mar 17 04:00:00 2021 GMT
Not After : Mar 17 04:00:00 2023 GMT
Subject: CN=3ab23198-0d40-418e-9694-97a573846c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:76:83:4c:74:95:d3:75:25:6b:82:49:66:
6a:b2:6a:4e:25:80:c9:15:1c:04:d1:e5:7f:61:07:
22:f9:b8:56:c1:a4:f6:c0:44:17:0d:11:7c:c3:17:
e6:ab:25:6f:82:75:22:d7:0a:5e:92:cb:0a:c6:47:
2d:69:08:55:78:2f:d9:88:eb:af:92:40:a6:8f:f7:
7e:be:36:e4:eb:a1:a6:1b:32:96:cd:7e:01:47:96:
04:67:4c:09:63:4d:03:29:0b:b9:ea:0b:34:a1:f9:
90:58:a0:7e:04:a0:cf:3e:cc:77:54:d6:1b:48:69:
d3:0d:f4:5b:59:df:96:2e:65:49:91:45:33:84:59:
99:fd:28:ea:19:f2:da:1a:1a:a5:ec:82:8b:cb:07:
f9:fc:e4:35:48:98:22:c2:48:39:a5:87:5b:7f:c1:
5c:87:6a:49:96:fc:90:44:cf:fc:4f:6c:fd:01:f9:
55:d3:7a:d7:59:2a:ad:77:7b:68:35:9f:01:07:41:
38:f9:66:88:e0:58:f3:73:67:49:5d:81:5d:97:35:
f8:3f:46:3e:9d:2e:43:8f:00:c4:88:55:bb:7d:fe:
0f:fa:d6:8a:f9:9e:88:92:b8:dd:c9:15:6d:4e:24:
40:4b:d2:f0:57:79:08:9c:cc:ef:21:b7:54:a3:2f:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:A1:E6:B0:13:5C:B4:F7:92:14:E4:9C:E6:18:7D:D6:0D:5E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/74a753e5-c7ff-3449-92de-5425ae4be09e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl
X509v3 Authority Key Identifier:
keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
sbgp-ipAddrBlock: critical
IPv4:
199.30.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:bc:58:3a:d2:77:85:9b:d0:2e:1e:4a:4d:12:d2:14:b5:f9:
b0:b4:c0:5c:9f:ad:24:15:20:3c:52:08:d2:9b:5b:f3:d1:ab:
4b:e7:31:9a:89:a1:89:18:89:4a:dd:95:b4:76:ca:55:ca:88:
52:9c:49:e3:61:f0:a5:aa:84:73:e4:66:45:f3:6d:f3:f5:46:
f2:1e:f9:45:07:05:20:d0:7b:07:92:bf:8c:33:6d:4d:20:3f:
06:66:10:12:4e:ab:9f:26:f8:32:ec:62:0f:9c:00:75:84:30:
ed:d3:b6:d4:7c:78:85:04:ce:bf:c2:2d:1c:31:ce:7d:8e:ef:
ef:57:39:55:f4:c7:d1:0d:23:58:65:56:20:86:7e:bf:47:65:
00:db:b9:44:2d:87:e7:1c:99:b1:0d:2b:06:c4:7a:b8:c9:b4:
72:72:ea:43:49:71:93:c2:a4:9a:c7:b5:dc:03:3d:49:b4:5e:
db:1c:3e:74:4c:08:c4:ec:15:8f:0e:b9:ff:18:df:b6:9c:c3:
85:be:21:2a:93:81:e7:89:00:21:c5:80:01:b5:ac:e4:44:41:
08:fb:f7:18:4e:4e:11:83:b1:71:74:b5:f8:21:18:78:e8:22:
0e:fe:42:95:6a:82:90:a3:aa:52:25:a4:d1:64:ac:7f:d2:3f:
2c:34:b3:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDlJjg39mcYfrP8SPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5
ZjQxMB4XDTIxMDMxNzA0MDAwMFoXDTIzMDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk
M2FiMjMxOTgtMGQ0MC00MThlLTk2OTQtOTdhNTczODQ2YzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOx2g0x0ldN1JWuCSWZqsmpOJYDJFRwE0eV/
YQci+bhWwaT2wEQXDRF8wxfmqyVvgnUi1wpekssKxkctaQhVeC/ZiOuvkkCmj/d+
vjbk66GmGzKWzX4BR5YEZ0wJY00DKQu56gs0ofmQWKB+BKDPPsx3VNYbSGnTDfRb
Wd+WLmVJkUUzhFmZ/SjqGfLaGhql7IKLywf5/OQ1SJgiwkg5pYdbf8Fch2pJlvyQ
RM/8T2z9AflV03rXWSqtd3toNZ8BB0E4+WaI4Fjzc2dJXYFdlzX4P0Y+nS5DjwDE
iFW7ff4P+taK+Z6IkrjdyRVtTiRAS9LwV3kInMzvIbdUoy9pAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEz2oeawE1y095IU5JzmGH3WDV58MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm
MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvNzRhNzUzZTUtYzdmZi0z
NDQ5LTkyZGUtNTQyNWFlNGJlMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4
M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk
OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5
MWZjZDlmNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC8WDrSd4Wb0C4eSk0S0hS1+bC0wFyfrSQVIDxSCNKbW/PRq0vnMZqJ
oYkYiUrdlbR2ylXKiFKcSeNh8KWqhHPkZkXzbfP1RvIe+UUHBSDQeweSv4wzbU0g
PwZmEBJOq58m+DLsYg+cAHWEMO3TttR8eIUEzr/CLRwxzn2O7+9XOVX0x9ENI1hl
ViCGfr9HZQDbuUQth+ccmbENKwbEerjJtHJy6kNJcZPCpJrHtdwDPUm0XtscPnRM
CMTsFY8Ouf8Y37acw4W+ISqTgeeJACHFgAG1rOREQQj79xhOThGDsXF0tfghGHjo
Ig7+QpVqgpCjqlIlpNFkrH/SPyw0s0g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:32 2024 by rpki-client on console-ams.rpki-client.org