Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/1a770641-0e04-3ab9-ad99-5900ee074219.roa
File: 1a770641-0e04-3ab9-ad99-5900ee074219.roa (raw, json)
Hash identifier: Xwxbt1mEckXd6H504flPezo9TazXo7b0vrWR/+Yg9i4=
Subject key identifier: F9:79:80:F0:81:BC:2B:6E:E9:E1:54:CA:46:75:0B:BE:66:A4:F3:49
Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial: 010D0C9F43285842D1054752A1D91764D940FE00
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/1a770641-0e04-3ab9-ad99-5900ee074219.roa
Signing time: Tue 08 Aug 2023 12:19:51 +0000
ROA not before: Tue 08 Aug 2023 12:19:51 +0000
ROA not after: Mon 06 Nov 2023 13:19:51 +0000
asID: 63290
IP address blocks: 66.245.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:05:47:52:a1:d9:17:64:d9:40:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Validity
Not Before: Aug 8 12:19:51 2023 GMT
Not After : Nov 6 13:19:51 2023 GMT
Subject: CN=a42674b5-09ae-429a-83b5-b07fb6632e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:07:97:a7:88:97:d9:a9:5f:2c:a9:90:54:
96:9d:8a:8b:c5:45:22:b7:5a:3e:97:f5:87:4b:06:
4e:4e:66:53:ab:f3:ae:c5:a6:d0:5d:eb:da:de:c7:
2a:16:b2:87:eb:58:a9:b6:61:cd:81:20:88:b5:24:
92:8f:bd:79:7d:cc:a4:9e:5f:6a:9d:75:93:eb:2c:
76:1e:60:dd:04:27:e3:a2:72:0d:c9:ea:75:7d:6a:
6a:f9:fd:e4:f0:0d:2d:69:db:68:54:95:70:2f:89:
a5:fc:76:91:91:9f:91:8e:ca:0e:53:0e:0d:72:6a:
df:15:57:e6:17:39:22:42:11:a5:e4:57:e7:4f:05:
a4:fc:f7:d9:26:4f:c4:50:1b:74:b6:76:83:f6:b1:
ea:57:40:58:40:42:99:3b:6b:43:3f:57:38:f9:ad:
21:0d:24:9c:6f:79:ba:dc:c0:d7:70:55:4a:2a:a5:
a0:e9:53:dc:7e:47:15:78:e6:79:02:cd:7c:b5:07:
91:16:b3:1c:95:dd:a6:c3:46:23:57:ac:37:b4:ca:
c8:15:e8:9a:59:d9:d2:b4:53:cc:0e:88:c4:91:75:
01:65:4d:e1:1a:54:48:21:43:17:20:46:64:45:9c:
50:bc:30:a2:95:33:ba:22:a9:55:74:7f:4b:ce:a9:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:80:F0:81:BC:2B:6E:E9:E1:54:CA:46:75:0B:BE:66:A4:F3:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/1a770641-0e04-3ab9-ad99-5900ee074219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
X509v3 Authority Key Identifier:
keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
sbgp-ipAddrBlock: critical
IPv4:
66.245.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:54:82:b7:34:87:e6:ae:37:04:ca:8e:99:55:8a:d2:3c:be:
5f:39:c2:3d:00:d1:11:88:42:cd:7b:6d:74:f9:0d:8d:18:00:
32:58:65:61:f1:67:49:33:0b:37:b0:46:10:2b:44:6c:0c:82:
1a:a6:b1:cd:ae:0b:5e:c6:2e:f2:41:71:e5:5b:ac:89:55:3f:
56:2b:70:8d:9e:7e:49:b6:60:3c:27:4a:0c:29:33:84:6a:d3:
53:1b:7a:c2:75:f6:20:b1:bd:90:a5:51:4b:74:0f:2d:63:8d:
6c:5d:fa:db:30:8a:f9:3f:5a:97:73:8d:db:48:c2:e3:c3:67:
70:81:78:a4:4f:fb:5e:88:57:3c:b9:b0:11:7e:47:20:e9:d4:
44:79:16:25:2d:8d:59:75:df:44:eb:c2:d9:cf:a7:49:c8:a3:
c1:87:ed:35:a7:12:16:3c:cb:ce:47:9c:04:84:4f:3b:36:f6:
32:40:07:b4:fc:e3:5b:a3:d6:f0:b3:5f:33:8a:6f:49:ef:f3:
4a:01:58:d4:88:80:57:75:10:3d:ab:cd:4c:94:e5:bc:8f:d3:
bc:79:76:64:db:22:77:35:09:3a:69:86:eb:cc:df:72:b2:4f:
7c:ed:cb:ce:ea:0c:73:28:a8:6c:98:77:71:ce:9e:97:50:39:
75:91:47:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELRBUdSodkXZNlA/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBkOWU0NGUtOWEyZi00YWUzLWI4MGItNTUwZjkwZjE1
ZjY0MB4XDTIzMDgwODEyMTk1MVoXDTIzMTEwNjEzMTk1MVowLzEtMCsGA1UEAxMk
YTQyNjc0YjUtMDlhZS00MjlhLTgzYjUtYjA3ZmI2NjMyZTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitEHl6eIl9mpXyypkFSWnYqLxUUit1o+l/WH
SwZOTmZTq/OuxabQXeva3scqFrKH61iptmHNgSCItSSSj715fcyknl9qnXWT6yx2
HmDdBCfjonINyep1fWpq+f3k8A0tadtoVJVwL4ml/HaRkZ+RjsoOUw4NcmrfFVfm
FzkiQhGl5FfnTwWk/PfZJk/EUBt0tnaD9rHqV0BYQEKZO2tDP1c4+a0hDSScb3m6
3MDXcFVKKqWg6VPcfkcVeOZ5As18tQeRFrMcld2mw0YjV6w3tMrIFeiaWdnStFPM
DojEkXUBZU3hGlRIIUMXIEZkRZxQvDCilTO6IqlVdH9LzqnNuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPl5gPCBvCtu6eFUykZ1C75mpPNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5
ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBmOTBmMTVmNjQvMWE3NzA2NDEtMGUwNC0z
YWI5LWFkOTktNTkwMGVlMDc0MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBkOWU0NGUtOWEyZi00YWUzLWI4
MGItNTUwZjkwZjE1ZjY0LzMwZDllNDRlLTlhMmYtNGFlMy1iODBiLTU1MGY5MGYx
NWY2NC5jcmwwHwYDVR0jBBgwFoAUK0zB0+E17IWkg8WIud8sdPkUMb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBm
OTBmMTVmNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvWyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhUgrc0h+auNwTKjplVitI8vl85wj0A0RGIQs17bXT5DY0YADJYZWHx
Z0kzCzewRhArRGwMghqmsc2uC17GLvJBceVbrIlVP1YrcI2efkm2YDwnSgwpM4Rq
01MbesJ19iCxvZClUUt0Dy1jjWxd+tswivk/WpdzjdtIwuPDZ3CBeKRP+16IVzy5
sBF+RyDp1ER5FiUtjVl130TrwtnPp0nIo8GH7TWnEhY8y85HnASETzs29jJAB7T8
41uj1vCzXzOKb0nv80oBWNSIgFd1ED2rzUyU5byP07x5dmTbInc1CTpphuvM33Ky
T3zty87qDHMoqGyYd3HOnpdQOXWRR0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org