Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6456c52-1fc7-363b-9365-717cbc23f3fc.roa
File: d6456c52-1fc7-363b-9365-717cbc23f3fc.roa (raw, json)
Hash identifier: Ek2JoU7C5L8PivxtqmiSvXuwLKpUiD/in0bmd9vFJy8=
Subject key identifier: 2E:CC:E0:61:B0:58:86:FB:2A:EF:73:DB:8C:02:E9:FA:A6:12:5E:45
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD36200D9B0BB04EEEC7C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6456c52-1fc7-363b-9365-717cbc23f3fc.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397231
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:62:00:d9:b0:bb:04:ee:ec:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=a31f695a-8439-4187-a89c-056cedc1e23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:f0:82:c5:8c:c5:c1:79:d3:bb:64:93:38:
50:4d:48:29:69:0d:a3:00:7b:75:16:d0:ff:f1:52:
aa:6a:39:67:e8:f0:81:21:a8:d8:d7:79:f1:49:29:
c0:32:55:4a:a3:6c:ec:50:b0:31:31:0c:75:3f:eb:
bc:a8:94:8a:e3:e7:d1:cd:bd:a4:02:0e:d7:cb:46:
1b:05:53:ed:22:9e:d1:47:62:d6:0f:0a:11:1a:29:
28:fe:05:fa:00:2e:80:b7:7e:30:9e:f6:f5:8b:6e:
5a:c9:d6:2a:95:8c:41:85:cb:52:e0:6d:f3:b4:d2:
ae:82:0a:b8:24:a7:74:74:6c:ac:22:ba:65:18:1d:
8c:79:2c:58:65:35:3a:af:70:57:c0:ef:95:31:b9:
4c:24:5e:0d:ad:74:66:1e:a0:eb:24:5c:ae:cd:05:
6e:5f:f6:e2:1c:ba:6f:a9:82:ca:e6:83:d2:ba:bd:
74:b1:af:1c:b4:be:92:b1:19:3e:26:2f:7e:cd:31:
c4:3d:a6:a8:8a:c8:ef:13:3f:7a:9f:3e:8f:1d:dc:
93:33:e5:d7:a1:e9:af:af:f8:68:4d:14:12:fe:80:
7a:e8:b5:46:fd:63:1b:f9:61:df:e4:9d:ec:b3:66:
33:2b:a7:98:ee:db:bf:2e:ba:7a:54:c5:6a:5b:ff:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:E0:61:B0:58:86:FB:2A:EF:73:DB:8C:02:E9:FA:A6:12:5E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d6456c52-1fc7-363b-9365-717cbc23f3fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:3f:55:6f:00:66:ea:27:00:61:10:e1:84:32:58:67:ba:dc:
9e:12:5d:9f:f3:7a:fa:be:ee:06:90:bd:00:b3:f2:e9:17:dd:
00:6d:9f:85:a4:38:fc:3e:c5:e2:63:18:30:fc:68:af:ca:89:
ca:c9:fb:64:90:04:2a:74:f4:17:d9:70:41:e9:16:2d:fb:bc:
bd:12:45:86:3d:c0:32:09:5f:8a:ce:d2:1e:0c:95:6f:7e:8d:
ba:30:a9:17:a2:30:c1:21:76:60:ad:bf:fb:bf:21:c0:b0:b8:
9a:c2:e7:b5:b5:3f:d0:30:bb:32:ee:e8:82:ea:9d:4a:9e:61:
77:49:55:21:18:ec:e6:c2:fc:c2:48:d7:06:5b:dd:46:0c:c2:
32:31:df:4e:93:09:74:d2:f8:62:6b:95:7f:7b:37:86:db:b0:
80:3c:78:fc:46:46:97:27:7a:fe:d6:6e:14:32:95:21:57:5e:
34:47:e4:d0:3c:17:0a:96:5a:fd:6f:6c:52:e9:9e:15:0c:d9:
6a:db:ea:b1:81:43:12:8b:d1:74:bf:3f:94:c2:61:99:68:e4:
d1:1f:a0:85:15:aa:2a:21:92:01:e9:29:bb:5e:ed:d5:28:5a:
45:5b:b4:a6:ae:b6:a3:00:66:ca:3d:f2:8c:47:c7:10:5b:b1:
a9:fb:c0:2e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWENa02IA2bC7BO7sfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTIzMDkyNjIxMDA1MloXDTIzMTIyNTIyMDA1MlowLzEtMCsGA1UEAxMk
YTMxZjY5NWEtODQzOS00MTg3LWE4OWMtMDU2Y2VkYzFlMjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9vwgsWMxcF507tkkzhQTUgpaQ2jAHt1FtD/
8VKqajln6PCBIajY13nxSSnAMlVKo2zsULAxMQx1P+u8qJSK4+fRzb2kAg7Xy0Yb
BVPtIp7RR2LWDwoRGiko/gX6AC6At34wnvb1i25aydYqlYxBhctS4G3ztNKuggq4
JKd0dGysIrplGB2MeSxYZTU6r3BXwO+VMblMJF4NrXRmHqDrJFyuzQVuX/biHLpv
qYLK5oPSur10sa8ctL6SsRk+Ji9+zTHEPaaoisjvEz96nz6PHdyTM+XXoemvr/ho
TRQS/oB66LVG/WMb+WHf5J3ss2YzK6eY7tu/Lrp6VMVqW/8c8QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFC7M4GGwWIb7Ku9z24wC6fqmEl5FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDY0NTZjNTItMWZjNy0z
NjNiLTkzNjUtNzE3Y2JjMjNmM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnJo6AwQA
nJq/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABE/VW8AZuonAGEQ4YQyWGe63J4SXZ/zevq+7gaQvQCz8ukX
3QBtn4WkOPw+xeJjGDD8aK/KicrJ+2SQBCp09BfZcEHpFi37vL0SRYY9wDIJX4rO
0h4MlW9+jbowqReiMMEhdmCtv/u/IcCwuJrC57W1P9AwuzLu6ILqnUqeYXdJVSEY
7ObC/MJI1wZb3UYMwjIx306TCXTS+GJrlX97N4bbsIA8ePxGRpcnev7WbhQylSFX
XjRH5NA8FwqWWv1vbFLpnhUM2Wrb6rGBQxKL0XS/P5TCYZlo5NEfoIUVqiohkgHp
Kbte7dUoWkVbtKautqMAZso98oxHxxBbsan7wC4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:41 2024 by rpki-client on console-ams.rpki-client.org