Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa
File: 06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa (raw, json)
Hash identifier: 9+et7p23OaYe2G+N4RVYDvubvN4uNKmXVSIXDAOI4+0=
Subject key identifier: 4D:0B:BA:F1:0A:58:BD:96:8A:69:2B:92:E7:2F:37:E6:91:31:76:57
Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial: 010D0C9F432858447583A901456B92E19867DB00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa
Signing time: Sat 06 Jan 2024 03:14:00 +0000
ROA not before: Sat 06 Jan 2024 03:14:00 +0000
ROA not after: Fri 05 Apr 2024 02:14:00 +0000
asID: 18914
IP address blocks: 206.168.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:75:83:a9:01:45:6b:92:e1:98:67:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Validity
Not Before: Jan 6 03:14:00 2024 GMT
Not After : Apr 5 02:14:00 2024 GMT
Subject: CN=28ef34e5-b139-4219-bec4-32e92f4dbf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:a8:16:42:44:0b:df:df:aa:4b:ff:50:82:
e6:77:19:ab:d5:e2:33:cf:8d:a8:e7:5e:28:7a:69:
e3:a6:3b:a4:6c:74:6b:b7:dc:2a:ef:53:a8:b3:5d:
57:f6:c7:35:cf:bf:ba:87:d2:65:9b:23:c5:3b:f0:
28:03:fc:ae:da:61:8a:cc:e3:d2:5c:3e:e9:c0:e1:
46:a0:42:98:bd:44:16:10:2e:e0:ca:74:3a:16:b4:
2f:4d:d1:cc:23:5d:ff:04:18:78:3e:de:97:dc:83:
fe:71:84:6c:a1:a2:50:a4:08:ad:be:c8:55:0f:3e:
87:81:be:3e:5e:50:d4:88:af:f8:22:7a:31:2a:23:
ac:05:11:f3:4d:40:8f:97:a5:f9:bc:34:28:36:fc:
98:c6:55:67:99:8a:e5:a0:19:0a:b5:f1:5b:d7:64:
8a:55:1b:24:42:a7:c8:a7:23:94:68:54:1b:9d:3f:
56:30:8d:77:39:b1:c4:fa:fb:3c:2b:f7:18:40:77:
32:9e:95:21:ef:71:d3:19:ca:f3:14:77:c1:7f:c0:
8b:19:16:27:01:79:6f:84:94:f2:fd:32:6a:91:c1:
63:90:fa:79:43:65:cd:b3:07:cf:9a:4d:03:b9:30:
53:ae:e8:99:c6:c4:81:d7:15:d8:5f:44:d6:b1:bd:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0B:BA:F1:0A:58:BD:96:8A:69:2B:92:E7:2F:37:E6:91:31:76:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
X509v3 Authority Key Identifier:
keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:29:74:16:fc:83:d5:a0:6e:bf:0b:a6:4f:91:c2:97:ef:6d:
5c:1a:12:03:00:e5:e1:8f:31:94:ff:5f:e4:37:35:5a:f1:16:
4d:2d:15:9e:d9:ed:df:fd:14:21:cf:18:6a:0a:d3:cb:4f:7f:
41:42:58:f4:6a:42:dc:8c:a6:cd:6a:f2:86:fa:1a:a5:c4:0f:
45:09:d1:bf:45:53:e1:18:db:0c:0d:7e:44:9e:29:50:f3:03:
9a:b4:1b:e9:a7:96:75:47:42:75:f8:c5:a2:45:1a:d8:29:01:
21:2b:8a:d1:0f:53:c3:26:7a:e4:b9:87:c9:37:7c:5a:58:81:
c9:d1:5c:4c:db:ee:7e:75:12:d8:b2:ce:22:34:a2:f4:e8:6e:
58:27:9c:cd:09:07:08:c0:f5:cc:5a:60:79:9f:81:71:2b:33:
ec:f3:8c:02:ec:55:10:d3:f4:45:5b:00:ba:a5:2c:6e:99:7c:
b1:31:55:5b:c4:22:45:14:25:ea:e0:1c:cc:17:74:8c:42:50:
98:46:33:e9:a9:31:ad:64:3a:d0:82:7f:f4:04:e2:d2:8f:e9:
40:8d:50:36:94:f3:14:69:cf:b9:86:6f:71:42:47:9c:68:b7:
67:40:14:67:dc:3c:81:7c:f9:74:b8:63:67:21:28:92:ec:0b:
58:bd:38:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWER1g6kBRWuS4Zhn2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI0MDEwNjAzMTQwMFoXDTI0MDQwNTAyMTQwMFowLzEtMCsGA1UEAxMk
MjhlZjM0ZTUtYjEzOS00MjE5LWJlYzQtMzJlOTJmNGRiZjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiheoFkJEC9/fqkv/UILmdxmr1eIzz42o514o
emnjpjukbHRrt9wq71Oos11X9sc1z7+6h9JlmyPFO/AoA/yu2mGKzOPSXD7pwOFG
oEKYvUQWEC7gynQ6FrQvTdHMI13/BBh4Pt6X3IP+cYRsoaJQpAitvshVDz6Hgb4+
XlDUiK/4InoxKiOsBRHzTUCPl6X5vDQoNvyYxlVnmYrloBkKtfFb12SKVRskQqfI
pyOUaFQbnT9WMI13ObHE+vs8K/cYQHcynpUh73HTGcrzFHfBf8CLGRYnAXlvhJTy
/TJqkcFjkPp5Q2XNswfPmk0DuTBTruiZxsSB1xXYX0TWsb3jlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0LuvEKWL2WimkrkucvN+aRMXZXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvMDZlNTk2Y2MtNTFlYS0z
NzMyLTlhMGQtOWVlN2JiNDhhZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqgOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHApdBb8g9Wgbr8Lpk+RwpfvbVwaEgMA5eGPMZT/X+Q3NVrxFk0tFZ7Z
7d/9FCHPGGoK08tPf0FCWPRqQtyMps1q8ob6GqXED0UJ0b9FU+EY2wwNfkSeKVDz
A5q0G+mnlnVHQnX4xaJFGtgpASEritEPU8MmeuS5h8k3fFpYgcnRXEzb7n51Etiy
ziI0ovToblgnnM0JBwjA9cxaYHmfgXErM+zzjALsVRDT9EVbALqlLG6ZfLExVVvE
IkUUJergHMwXdIxCUJhGM+mpMa1kOtCCf/QE4tKP6UCNUDaU8xRpz7mGb3FCR5xo
t2dAFGfcPIF8+XS4Y2chKJLsC1i9OJU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:15:56 2025 by rpki-client