Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/29705eee-eb77-31a1-8a02-fad1109380c8.roa
File: 29705eee-eb77-31a1-8a02-fad1109380c8.roa (raw, json)
Hash identifier: 7+Cmr0uvUGq4uPJBsKsB2txujDcTbRE0HUWMjccDp+c=
Subject key identifier: 43:B5:DD:30:FE:31:8D:F2:45:BA:1B:03:A6:2D:62:CF:E4:26:87:2B
Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial: 010D0C9F43285837B1786A13B0D91637519DB900
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/29705eee-eb77-31a1-8a02-fad1109380c8.roa
Signing time: Mon 16 Dec 2019 05:00:00 +0000
ROA not before: Mon 16 Dec 2019 05:00:00 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 203020
IP address blocks: 209.242.216.0/24 maxlen: 32
209.242.223.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:b1:78:6a:13:b0:d9:16:37:51:9d:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
Validity
Not Before: Dec 16 05:00:00 2019 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=47780e10-6480-496e-a1e6-8fe645049354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:72:ea:9a:b2:a2:91:9f:14:24:1a:aa:a4:
38:26:48:37:1c:7e:c9:b8:b8:b3:2a:b0:3a:36:23:
09:08:9a:e7:34:d3:aa:8b:45:34:49:18:73:87:63:
0b:7b:43:a5:e2:9b:c1:7d:b7:4a:46:77:ad:2a:7f:
f2:0c:27:a8:7c:29:65:e5:73:52:8b:ac:a9:49:d5:
70:0c:44:3e:2b:56:c3:94:78:fc:e5:17:d4:f9:f7:
3f:51:3c:4a:bd:7f:85:2d:55:7f:b3:c2:83:3a:91:
87:a6:f3:92:2f:19:68:92:40:18:63:81:49:8c:74:
09:eb:ed:bd:65:b5:9f:4b:d3:5e:5a:b6:90:2b:d8:
98:e2:26:82:7c:97:76:b8:8b:f5:78:7e:be:4c:07:
4f:30:64:a0:c9:94:55:88:ea:52:d0:6f:3b:b4:a8:
fd:cf:22:65:dd:a8:65:46:87:97:6e:81:0b:cc:8f:
f9:ef:9a:a9:33:9a:dd:bf:29:c3:ff:39:4c:7e:e1:
f1:df:08:28:77:6f:48:61:cd:6e:6f:f5:b4:f7:5f:
10:e8:2b:28:d9:ac:75:f7:74:61:61:6a:71:3c:77:
05:8e:22:5a:69:ff:1f:f0:e5:fb:b3:7e:cb:c3:8a:
b9:13:43:50:b3:7b:1f:c6:1e:f5:77:60:65:c1:3a:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B5:DD:30:FE:31:8D:F2:45:BA:1B:03:A6:2D:62:CF:E4:26:87:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/29705eee-eb77-31a1-8a02-fad1109380c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
X509v3 Authority Key Identifier:
keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.242.216.0/24
209.242.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:27:8b:40:d9:1d:6a:8e:40:7d:41:f0:6f:ee:9f:02:47:b0:
3b:b0:5c:fb:0c:8c:e9:2a:a4:e6:3f:15:6f:3b:24:43:ad:e3:
7f:6b:c7:c1:93:41:bc:63:ac:d0:5f:67:81:64:20:fa:9f:cc:
7b:fa:43:67:cf:f7:f7:c5:39:0f:8a:16:a2:b2:d0:30:1c:e9:
e6:7e:f3:35:45:6e:bf:41:d4:46:3d:58:70:b7:1a:c6:f7:61:
a6:2a:d5:5e:b8:c5:14:ff:7e:d9:fc:e5:c0:80:76:02:02:21:
b5:45:bd:2a:0c:a5:21:57:c4:3d:ca:c9:74:f9:8c:de:32:3d:
58:db:93:d2:05:a2:41:5c:93:f5:8b:62:13:5e:4e:e6:84:3b:
95:3e:1a:40:d2:c0:68:ce:33:f8:5f:ab:37:50:71:68:f1:e4:
6a:ac:88:7c:f3:e5:5c:0c:64:92:f6:07:5a:74:48:13:05:e8:
9d:c8:f2:d0:91:b8:ce:b9:ee:c3:0d:a9:4c:d4:ff:4d:0b:ce:
a1:fa:a3:3c:d9:a2:54:b8:96:b7:7a:7c:1a:1b:65:f7:34:fb:
16:f8:1d:e3:99:3d:e1:4f:ee:9a:ca:8f:e7:03:64:69:a9:e4:
3f:b4:25:44:14:7e:43:bc:68:26:72:d6:c8:24:fa:79:7c:0b:
cc:e2:e3:49
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWDexeGoTsNkWN1GduQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2
MTViMB4XDTE5MTIxNjA1MDAwMFoXDTIzMDEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NDc3ODBlMTAtNjQ4MC00OTZlLWExZTYtOGZlNjQ1MDQ5MzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+dy6pqyopGfFCQaqqQ4Jkg3HH7JuLizKrA6
NiMJCJrnNNOqi0U0SRhzh2MLe0Ol4pvBfbdKRnetKn/yDCeofCll5XNSi6ypSdVw
DEQ+K1bDlHj85RfU+fc/UTxKvX+FLVV/s8KDOpGHpvOSLxlokkAYY4FJjHQJ6+29
ZbWfS9NeWraQK9iY4iaCfJd2uIv1eH6+TAdPMGSgyZRViOpS0G87tKj9zyJl3ahl
RoeXboELzI/575qpM5rdvynD/zlMfuHx3wgod29IYc1ub/W0918Q6Cso2ax193Rh
YWpxPHcFjiJaaf8f8OX7s37Lw4q5E0NQs3sfxh71d2BlwTrseQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEO13TD+MY3yRbobA6YtYs/kJocrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4
NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMjk3MDVlZWUtZWI3Ny0z
MWExLThhMDItZmFkMTEwOTM4MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj
MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj
NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk
ODU1YzYxNWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0fLYAwQA
0fLfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFcni0DZHWqOQH1B8G/unwJHsDuwXPsMjOkqpOY/FW87JEOt
439rx8GTQbxjrNBfZ4FkIPqfzHv6Q2fP9/fFOQ+KFqKy0DAc6eZ+8zVFbr9B1EY9
WHC3Gsb3YaYq1V64xRT/ftn85cCAdgICIbVFvSoMpSFXxD3KyXT5jN4yPVjbk9IF
okFck/WLYhNeTuaEO5U+GkDSwGjOM/hfqzdQcWjx5GqsiHzz5VwMZJL2B1p0SBMF
6J3I8tCRuM657sMNqUzU/00LzqH6ozzZolS4lrd6fBobZfc0+xb4HeOZPeFP7prK
j+cDZGmp5D+0JUQUfkO8aCZy1sgk+nl8C8zi40k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org