Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/e39daf31-a7f5-3728-893b-ce78f26e5984.roa
File: e39daf31-a7f5-3728-893b-ce78f26e5984.roa (raw, json)
Hash identifier: h03IYzCRVC8ip7QwwEmXuyYVoaLhJb9uJfdmwAG6dKk=
Subject key identifier: 30:16:73:A2:9A:95:E8:12:93:71:D0:DE:F3:18:01:5A:5F:76:CB:98
Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial: 010D0C9F43285843F5F27B53257D2A72289F1140
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/e39daf31-a7f5-3728-893b-ce78f26e5984.roa
Signing time: Tue 21 Nov 2023 10:33:49 +0000
ROA not before: Tue 21 Nov 2023 10:33:49 +0000
ROA not after: Mon 19 Feb 2024 10:33:49 +0000
asID: 12430
IP address blocks: 47.58.0.0/16 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f5:f2:7b:53:25:7d:2a:72:28:9f:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Validity
Not Before: Nov 21 10:33:49 2023 GMT
Not After : Feb 19 10:33:49 2024 GMT
Subject: CN=d21a1b01-4967-4787-9a47-394e0b8b51ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:b7:a0:a0:79:50:13:4d:9f:1e:62:72:c6:
90:30:0b:5d:38:46:81:1d:7c:f5:fa:e4:35:29:1d:
95:7a:d5:5f:e1:a6:7e:e2:0b:d4:ca:b2:88:9d:cc:
d8:ad:0f:cb:f1:db:b2:fd:b4:5c:3b:52:67:bb:2e:
25:24:84:26:18:37:4e:60:b7:13:00:70:20:5d:de:
51:ad:03:af:9c:79:9e:b2:98:81:4c:b0:12:d4:e7:
d6:56:bf:28:38:9c:d1:69:ae:3e:10:96:84:13:6a:
e9:85:ac:4f:d8:5a:3a:88:fa:c3:ff:fe:e0:0d:c0:
3e:0b:33:32:e3:6c:87:1d:8d:27:71:22:8d:da:dd:
d6:af:3a:8c:75:41:3b:66:12:64:4f:00:17:5c:f8:
a6:4b:44:d2:93:6b:a5:5b:57:e3:7a:e4:bd:b0:f6:
2b:71:b3:b9:be:c4:4a:62:95:0f:7d:74:4c:62:0d:
26:4a:1f:ea:c3:60:25:e5:c8:70:28:77:4f:e4:a3:
d3:47:da:43:0d:17:7b:25:d5:1b:d3:ac:ca:72:9a:
ca:b6:3e:70:ce:44:62:42:f7:0d:be:5c:92:43:f4:
af:fa:8c:d3:a1:35:29:3e:a1:b2:61:e1:5e:a0:61:
e6:6d:95:f2:86:63:c3:0e:b6:6c:3f:5e:1e:8f:94:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:73:A2:9A:95:E8:12:93:71:D0:DE:F3:18:01:5A:5F:76:CB:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/e39daf31-a7f5-3728-893b-ce78f26e5984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
X509v3 Authority Key Identifier:
keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
sbgp-ipAddrBlock: critical
IPv4:
47.58.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:be:10:aa:b2:72:4c:1d:28:55:ec:27:c8:2e:3f:32:67:4a:
04:04:7e:64:2b:65:13:5e:13:a9:db:92:32:33:ee:dc:4f:48:
af:e6:7b:67:ab:44:25:fc:9c:ed:07:98:36:44:41:b3:37:00:
25:5c:66:05:10:04:36:31:fc:14:51:0a:3d:e6:9d:2f:1f:d5:
fa:b9:12:09:88:0a:ca:11:7c:f8:d4:d4:44:d7:81:ca:09:18:
eb:d0:53:fd:59:e9:36:0a:bc:d5:54:3b:e4:61:0d:ca:bb:5d:
5f:c3:c8:c6:cb:3a:17:05:d5:41:9e:89:30:f4:c1:22:fd:83:
91:27:c3:b3:68:39:2c:b9:5c:88:16:67:dc:c1:36:0b:a5:81:
4f:27:c1:2a:c2:95:32:c5:0c:05:95:45:22:56:50:77:a2:30:
6d:83:1a:82:44:46:62:cf:ae:6c:86:ca:26:5a:09:67:68:1d:
bb:fd:89:02:27:84:0f:2b:02:33:0f:ee:cd:d3:82:b5:8b:d6:
c0:b7:9e:be:8f:90:b9:c5:fd:23:91:95:ef:85:d5:77:d5:b3:
b1:18:c2:72:c5:26:c6:2a:4f:c2:e3:a4:37:ad:30:68:0f:1c:
ad:79:7a:24:18:e8:98:d0:28:91:52:ed:8c:d8:17:1b:05:e6:
7e:2f:db:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEP18ntTJX0qciifEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0
NWMxMB4XDTIzMTEyMTEwMzM0OVoXDTI0MDIxOTEwMzM0OVowLzEtMCsGA1UEAxMk
ZDIxYTFiMDEtNDk2Ny00Nzg3LTlhNDctMzk0ZTBiOGI1MWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArba3oKB5UBNNnx5icsaQMAtdOEaBHXz1+uQ1
KR2VetVf4aZ+4gvUyrKInczYrQ/L8duy/bRcO1Jnuy4lJIQmGDdOYLcTAHAgXd5R
rQOvnHmespiBTLAS1OfWVr8oOJzRaa4+EJaEE2rphaxP2Fo6iPrD//7gDcA+CzMy
42yHHY0ncSKN2t3WrzqMdUE7ZhJkTwAXXPimS0TSk2ulW1fjeuS9sPYrcbO5vsRK
YpUPfXRMYg0mSh/qw2Al5chwKHdP5KPTR9pDDRd7JdUb06zKcprKtj5wzkRiQvcN
vlySQ/Sv+ozToTUpPqGyYeFeoGHmbZXyhmPDDrZsP14ej5QnwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDAWc6KalegSk3HQ3vMYAVpfdsuYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5
ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvZTM5ZGFmMzEtYTdmNS0z
NzI4LTg5M2ItY2U3OGYyNmU1OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh
ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1
NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky
YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALzowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALr4QqrJyTB0oVewnyC4/MmdKBAR+ZCtlE14TqduSMjPu3E9Ir+Z7Z6tE
Jfyc7QeYNkRBszcAJVxmBRAENjH8FFEKPeadLx/V+rkSCYgKyhF8+NTURNeBygkY
69BT/VnpNgq81VQ75GENyrtdX8PIxss6FwXVQZ6JMPTBIv2DkSfDs2g5LLlciBZn
3ME2C6WBTyfBKsKVMsUMBZVFIlZQd6IwbYMagkRGYs+ubIbKJloJZ2gdu/2JAieE
DysCMw/uzdOCtYvWwLeevo+QucX9I5GV74XVd9WzsRjCcsUmxipPwuOkN60waA8c
rXl6JBjomNAokVLtjNgXGwXmfi/bHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org