Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/9915bc8c-9d77-32a9-802b-476f399b8c55.roa
File: 9915bc8c-9d77-32a9-802b-476f399b8c55.roa (raw, json)
Hash identifier: X5PyHaqZLxz2n7cA+g98GVa5QYiJobyRdY4sdAwkLGE=
Subject key identifier: 07:D0:4B:EB:CC:FB:1A:52:EB:D5:E9:88:1B:E3:09:C2:DE:C8:70:6D
Certificate issuer: /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1
Certificate serial: 010D0C9F43285841E7A3E510325ACB77D9B06B80
Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/9915bc8c-9d77-32a9-802b-476f399b8c55.roa
Signing time: Tue 16 May 2023 22:00:17 +0000
ROA not before: Tue 16 May 2023 22:00:17 +0000
ROA not after: Mon 14 Aug 2023 22:00:17 +0000
asID: 400154
IP address blocks: 23.128.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e7:a3:e5:10:32:5a:cb:77:d9:b0:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1
Validity
Not Before: May 16 22:00:17 2023 GMT
Not After : Aug 14 22:00:17 2023 GMT
Subject: CN=1db05364-423c-471e-9eca-ac50f66524cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:b1:46:4b:e6:40:4b:58:6f:32:d4:6b:ce:
16:f1:b6:f2:c4:82:8f:00:2d:04:4c:7b:81:be:b1:
2e:94:43:49:62:4b:70:d2:cf:62:df:40:89:11:0f:
4e:cc:b2:25:d2:74:41:59:59:0f:e6:bd:0a:5e:16:
bb:b9:2e:3f:e1:75:14:65:4a:9c:1a:1e:01:35:13:
da:72:10:a2:37:c6:14:5e:7b:e0:e5:32:c7:e8:bf:
f5:bb:cd:98:46:6a:74:92:6d:6e:6c:9c:c4:94:f0:
91:94:b0:d9:d4:ba:89:0d:84:39:04:b7:a3:d1:42:
dd:48:0a:4e:cf:a1:82:1d:3e:33:14:3b:b9:65:d9:
62:a2:20:b3:65:cf:18:0c:c9:30:40:b7:4c:1b:a9:
bf:ca:ce:68:13:fb:04:6d:90:14:54:0b:57:ce:0a:
90:69:3b:04:02:1f:46:ec:94:f3:f9:99:3c:3c:89:
5a:44:8f:aa:7c:b4:07:9c:fa:3d:2e:8f:76:8e:7d:
d6:7c:af:e8:d9:43:55:77:4c:66:27:ec:53:43:10:
cb:8e:b1:06:c2:a7:73:e4:20:bb:bd:a0:d0:20:8c:
d2:aa:b7:00:9a:65:49:67:51:a0:e5:50:4c:b4:8c:
48:ac:51:ec:08:81:7d:d3:01:85:95:a7:2b:50:94:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:4B:EB:CC:FB:1A:52:EB:D5:E9:88:1B:E3:09:C2:DE:C8:70:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/9915bc8c-9d77-32a9-802b-476f399b8c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl
X509v3 Authority Key Identifier:
keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:05:8b:b8:2a:e7:44:11:be:1d:ee:73:10:46:b0:57:d4:91:
d7:0c:0e:3c:c3:b6:ec:da:73:6a:d6:d0:58:46:89:38:85:e0:
d6:e5:62:22:b8:96:f5:c7:65:12:ba:da:b1:66:ca:d7:60:c7:
ed:6c:f1:7d:16:78:35:62:f4:61:a2:58:3d:51:8b:80:3c:96:
c7:44:1a:8a:42:ff:0f:a6:d5:6a:4b:98:7f:12:d1:a9:f0:f3:
26:a0:83:25:07:6f:b3:23:ac:34:22:18:4a:e0:d7:f8:81:c0:
55:d4:3a:d1:fb:58:26:e4:af:7b:75:c8:20:7f:69:8c:d6:4f:
2b:af:e6:ea:a0:d4:a2:24:f7:7b:66:2b:66:07:2d:26:ff:d8:
5b:cc:9d:5c:4d:06:45:6d:fd:65:4f:25:b9:81:ac:95:73:a5:
3b:5a:43:00:cc:65:d5:33:af:a6:94:00:d1:1d:78:9e:42:12:
21:49:fd:96:43:9d:5d:85:0c:29:e6:d5:c8:0f:fc:b7:dd:39:
62:d3:2c:1f:cf:48:e3:91:ba:01:73:bb:2f:d9:19:f8:e1:28:
d1:41:cc:2e:c6:25:cb:78:4e:c7:5e:58:fe:8b:5b:f1:97:91:
1d:40:6b:c2:be:16:fe:58:2c:01:f0:49:74:95:4b:57:8c:f8:
9c:54:85:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHno+UQMlrLd9mwa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTAzZTJjNjgtM2NkZC00N2U0LWJjZTAtMDdmYWFlYmE3
OGUxMB4XDTIzMDUxNjIyMDAxN1oXDTIzMDgxNDIyMDAxN1owLzEtMCsGA1UEAxMk
MWRiMDUzNjQtNDIzYy00NzFlLTllY2EtYWM1MGY2NjUyNGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKxRkvmQEtYbzLUa84W8bbyxIKPAC0ETHuB
vrEulENJYktw0s9i30CJEQ9OzLIl0nRBWVkP5r0KXha7uS4/4XUUZUqcGh4BNRPa
chCiN8YUXnvg5TLH6L/1u82YRmp0km1ubJzElPCRlLDZ1LqJDYQ5BLej0ULdSApO
z6GCHT4zFDu5ZdlioiCzZc8YDMkwQLdMG6m/ys5oE/sEbZAUVAtXzgqQaTsEAh9G
7JTz+Zk8PIlaRI+qfLQHnPo9Lo92jn3WfK/o2UNVd0xmJ+xTQxDLjrEGwqdz5CC7
vaDQIIzSqrcAmmVJZ1Gg5VBMtIxIrFHsCIF90wGFlacrUJRQpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfQS+vM+xpS69XpiBvjCcLeyHBtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDNl
MmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2ZhYWViYTc4ZTEvOTkxNWJjOGMtOWQ3Ny0z
MmE5LTgwMmItNDc2ZjM5OWI4YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTAzZTJjNjgtM2NkZC00N2U0LWJj
ZTAtMDdmYWFlYmE3OGUxLzEwM2UyYzY4LTNjZGQtNDdlNC1iY2UwLTA3ZmFhZWJh
NzhlMS5jcmwwHwYDVR0jBBgwFoAUkE2cG+aWpWcHKGsyEoCGMIyr1S0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMDNlMmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2Zh
YWViYTc4ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYFi7gq50QRvh3ucxBGsFfUkdcMDjzDtuzac2rW0FhGiTiF4NblYiK4
lvXHZRK62rFmytdgx+1s8X0WeDVi9GGiWD1Ri4A8lsdEGopC/w+m1WpLmH8S0anw
8yaggyUHb7MjrDQiGErg1/iBwFXUOtH7WCbkr3t1yCB/aYzWTyuv5uqg1KIk93tm
K2YHLSb/2FvMnVxNBkVt/WVPJbmBrJVzpTtaQwDMZdUzr6aUANEdeJ5CEiFJ/ZZD
nV2FDCnm1cgP/LfdOWLTLB/PSOORugFzuy/ZGfjhKNFBzC7GJct4TsdeWP6LW/GX
kR1Aa8K+Fv5YLAHwSXSVS1eM+JxUhWg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org