Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/3b9af250-ad1d-36b7-b312-d059caf6e567.roa
File: 3b9af250-ad1d-36b7-b312-d059caf6e567.roa (raw, json)
Hash identifier: 3lvwyUGaJcev3hDbjMAasVvdThXqvJ8GiIhWxVGy83g=
Subject key identifier: F2:44:2C:01:85:4D:B6:E7:9A:E0:A3:50:C5:C7:BE:87:F3:83:6D:91
Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac
Certificate serial: 010D0C9F43285844071926BD45A51D8CBF834200
Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/3b9af250-ad1d-36b7-b312-d059caf6e567.roa
Signing time: Mon 27 Nov 2023 14:00:21 +0000
ROA not before: Mon 27 Nov 2023 14:00:21 +0000
ROA not after: Sun 25 Feb 2024 14:00:21 +0000
asID: 8075
IP address blocks: 206.209.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:07:19:26:bd:45:a5:1d:8c:bf:83:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac
Validity
Not Before: Nov 27 14:00:21 2023 GMT
Not After : Feb 25 14:00:21 2024 GMT
Subject: CN=42f55314-24b9-4251-855b-39384190839c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:16:97:4f:cb:93:43:f9:25:26:b5:8e:48:4e:
18:8b:1b:c3:63:05:df:5f:fa:26:99:8e:34:68:ba:
81:8a:56:72:57:66:4b:d9:d2:83:7b:1c:b3:4a:a9:
0e:03:5e:ca:eb:77:4f:50:e0:b9:b7:a1:6c:b9:a2:
d1:64:56:10:8d:8f:e5:00:ec:cb:1d:f9:59:c0:d8:
63:39:4c:91:0b:4b:4d:a6:5b:42:74:99:1c:cb:ca:
b5:ba:f3:a9:38:46:5f:d6:cc:3b:bd:14:02:85:1f:
e3:34:e8:7a:9a:35:3d:a7:06:b4:eb:98:f0:48:3c:
e1:e5:04:93:b9:dc:af:77:5d:68:b0:df:f3:fd:98:
fb:c2:12:c8:73:db:ee:ca:59:bf:85:7d:3d:da:1e:
99:ce:78:a5:c4:55:cd:5d:8e:e8:ad:07:c0:08:24:
35:38:e3:db:db:03:38:b5:48:b4:86:ef:23:8f:6a:
dd:5e:17:e8:86:cb:aa:43:6c:3c:95:3f:2a:71:cc:
ae:4b:a8:10:3b:5a:79:ad:93:94:1e:2d:38:fe:b2:
a8:b9:65:c0:d3:15:0a:cc:1f:4c:35:48:cf:dd:34:
3e:9d:38:eb:8f:89:09:e5:c4:f4:18:ef:4a:ef:82:
34:81:5b:16:10:e4:1c:44:2c:58:70:d8:d2:7e:ff:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:2C:01:85:4D:B6:E7:9A:E0:A3:50:C5:C7:BE:87:F3:83:6D:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/3b9af250-ad1d-36b7-b312-d059caf6e567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl
X509v3 Authority Key Identifier:
keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer
sbgp-ipAddrBlock: critical
IPv4:
206.209.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3a:d7:fa:5e:08:0b:ad:bb:fb:06:cb:71:fa:18:cf:d4:dd:
84:40:3f:bb:6e:e1:71:b6:d8:ee:4d:59:19:0a:c8:10:fe:fb:
12:08:1f:40:48:7c:c3:96:4a:2c:19:ba:2b:01:5b:7c:22:02:
0e:18:d7:b1:02:5d:99:37:ad:8c:9f:6c:a0:e1:86:99:83:26:
77:85:d6:40:4d:26:35:a9:f9:62:c9:7d:7c:a5:d1:44:de:8b:
46:b7:a4:44:5c:42:22:d2:40:f6:d8:41:86:15:6d:8a:1d:27:
37:d6:a7:85:43:b7:ae:87:7e:53:b1:0b:29:8a:6e:d1:1a:cf:
8c:46:b9:98:a7:af:e5:cd:de:59:fe:53:65:1c:f7:97:81:d8:
8c:e4:18:2a:a3:74:eb:9e:6e:a4:02:2b:8f:cb:3a:95:f7:da:
4a:4e:1d:e1:b6:ed:1c:f5:59:96:40:1d:d8:b4:30:be:ac:6f:
b1:81:fd:f4:98:44:c4:57:c1:98:54:36:74:d0:e2:cd:34:26:
55:92:8a:00:c9:1b:63:52:2e:be:5f:9c:48:9a:7f:98:7d:e8:
3e:53:25:59:3c:67:2d:ec:b0:5c:66:99:46:92:90:96:ee:76:
36:fc:93:cd:68:55:52:f3:a0:97:65:25:23:35:a7:27:c4:a2:
8f:17:f7:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQHGSa9RaUdjL+DQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx
NGFjMB4XDTIzMTEyNzE0MDAyMVoXDTI0MDIyNTE0MDAyMVowLzEtMCsGA1UEAxMk
NDJmNTUzMTQtMjRiOS00MjUxLTg1NWItMzkzODQxOTA4MzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBaXT8uTQ/klJrWOSE4YixvDYwXfX/ommY40
aLqBilZyV2ZL2dKDexyzSqkOA17K63dPUOC5t6FsuaLRZFYQjY/lAOzLHflZwNhj
OUyRC0tNpltCdJkcy8q1uvOpOEZf1sw7vRQChR/jNOh6mjU9pwa065jwSDzh5QST
udyvd11osN/z/Zj7whLIc9vuylm/hX092h6ZznilxFXNXY7orQfACCQ1OOPb2wM4
tUi0hu8jj2rdXhfohsuqQ2w8lT8qccyuS6gQO1p5rZOUHi04/rKouWXA0xUKzB9M
NUjP3TQ+nTjrj4kJ5cT0GO9K74I0gVsWEOQcRCxYcNjSfv+alwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJELAGFTbbnmuCjUMXHvofzg22RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh
NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvM2I5YWYyNTAtYWQxZC0z
NmI3LWIzMTItZDA1OWNhZjZlNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy
YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4
MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh
ZDQ1ODE0YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztFrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk61/peCAutu/sGy3H6GM/U3YRAP7tu4XG22O5NWRkKyBD++xIIH0BI
fMOWSiwZuisBW3wiAg4Y17ECXZk3rYyfbKDhhpmDJneF1kBNJjWp+WLJfXyl0UTe
i0a3pERcQiLSQPbYQYYVbYodJzfWp4VDt66HflOxCymKbtEaz4xGuZinr+XN3ln+
U2Uc95eB2IzkGCqjdOuebqQCK4/LOpX32kpOHeG27Rz1WZZAHdi0ML6sb7GB/fSY
RMRXwZhUNnTQ4s00JlWSigDJG2NSLr5fnEiaf5h96D5TJVk8Zy3ssFxmmUaSkJbu
djb8k81oVVLzoJdlJSM1pyfEoo8X9zA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org