Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/477bc88d-eda6-3664-a97e-75826a2b51d1.roa
File: 477bc88d-eda6-3664-a97e-75826a2b51d1.roa (raw, json)
Hash identifier: 1jGHw9G6WkA7QMfUDJFLy0TNJazD0q30UJo5iouoRfU=
Subject key identifier: AC:99:52:80:19:07:96:97:7E:5D:90:78:C6:22:21:2E:71:35:77:10
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F4328576D51CC73C042CFC171322B96D5
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/477bc88d-eda6-3664-a97e-75826a2b51d1.roa
Signing time: Tue 31 Mar 2020 19:57:29 +0000
ROA not before: Fri 05 Apr 2019 04:00:00 +0000
ROA not after: Mon 04 Jul 2022 04:00:00 +0000
asID: 5645
IP address blocks: 173.246.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:32:2b:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Apr 5 04:00:00 2019 GMT
Not After : Jul 4 04:00:00 2022 GMT
Subject: CN=1b1a7b85-2fcd-4e23-93b7-8f5487bcb68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:dd:af:f0:1a:71:dc:e4:4e:0f:d6:1c:d3:
31:f4:ec:4e:eb:a8:0b:0f:44:4d:e6:a8:8a:72:75:
a9:bc:99:e2:6c:47:ac:57:5d:4e:e4:21:98:1d:e2:
f1:09:38:0a:dc:d4:74:5b:99:90:dd:c8:1d:a4:e4:
d4:4c:53:e4:ec:52:91:46:1f:35:e2:e8:70:fb:44:
f9:96:77:55:39:6c:fa:74:72:47:01:d4:38:d6:51:
85:82:66:51:db:4a:bb:48:ed:a2:8a:74:fc:b2:14:
c3:44:46:0a:cf:19:b7:84:40:b5:7c:7a:40:82:14:
61:8d:f2:0c:c4:36:74:07:a6:38:64:a7:23:20:dc:
f5:0a:ac:9c:ba:dd:b3:ec:8c:20:f4:30:3d:41:36:
c3:f6:a4:94:3d:f7:61:68:e0:01:1a:2d:94:54:3a:
39:4d:cf:48:0c:45:13:1f:f2:97:ce:63:0f:3b:ef:
7e:31:d2:e5:d3:ac:24:22:04:e6:e1:b7:97:90:37:
d3:2c:b2:40:69:9f:95:b4:ed:1b:91:ca:79:ad:3b:
f1:e0:e3:ea:b3:60:5e:fe:be:60:6a:73:39:50:ac:
a7:6d:2f:6f:d6:f7:be:d2:19:88:f1:ef:c1:04:e0:
92:ca:aa:5f:f9:13:2a:b6:01:a3:64:88:b2:59:b8:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:52:80:19:07:96:97:7E:5D:90:78:C6:22:21:2E:71:35:77:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/477bc88d-eda6-3664-a97e-75826a2b51d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
173.246.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a0:e7:b1:bc:e8:7d:11:85:e7:fc:e1:ff:1a:18:ac:64:86:
1b:e2:9d:e0:4b:0a:86:26:2e:d8:bb:f3:9b:2b:9e:be:b2:1c:
94:c7:c4:8e:2b:53:e7:61:ef:cb:ff:fc:f2:25:6d:6f:80:57:
27:01:52:5e:d5:ca:cd:cc:30:ff:29:4c:3d:89:51:74:09:10:
7f:7d:58:39:fa:74:81:5b:d6:e9:ca:93:98:04:8e:d8:e4:38:
f5:77:08:45:d3:02:14:13:cf:27:91:ef:d5:22:9d:c6:c1:31:
b8:4b:f2:0f:3e:e1:24:68:1b:d1:38:b1:10:5b:7f:70:05:e9:
bc:ff:a9:9e:43:4d:e5:ca:c5:41:f1:22:7c:be:cb:5e:10:e7:
c1:4d:2d:e9:d3:ab:13:f9:77:cc:28:3a:67:84:ce:ad:28:1c:
95:31:15:d7:95:4a:00:a3:6f:3c:53:1b:dc:aa:a8:c3:52:b1:
97:40:a9:ac:58:c2:6e:be:ce:e3:b6:b2:55:4c:9a:3a:bd:40:
b1:44:84:5c:98:7e:57:80:8d:d9:1f:65:35:2b:c5:dc:ee:b8:
ff:23:8d:a3:17:a7:9c:01:e1:3c:a0:b4:df:0d:d2:d1:3c:9b:
fc:3d:a2:d7:12:f7:3e:67:31:98:71:92:13:79:07:f4:ad:a5:
73:be:40:26
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcTIrltUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3MTE5
MjAeFw0xOTA0MDUwNDAwMDBaFw0yMjA3MDQwNDAwMDBaMC8xLTArBgNVBAMTJDFi
MWE3Yjg1LTJmY2QtNGUyMy05M2I3LThmNTQ4N2JjYjY4YjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKUu3a/wGnHc5E4P1hzTMfTsTuuoCw9ETeaoinJ1
qbyZ4mxHrFddTuQhmB3i8Qk4CtzUdFuZkN3IHaTk1ExT5OxSkUYfNeLocPtE+ZZ3
VTls+nRyRwHUONZRhYJmUdtKu0jtoop0/LIUw0RGCs8Zt4RAtXx6QIIUYY3yDMQ2
dAemOGSnIyDc9QqsnLrds+yMIPQwPUE2w/aklD33YWjgARotlFQ6OU3PSAxFEx/y
l85jDzvvfjHS5dOsJCIE5uG3l5A30yyyQGmflbTtG5HKea078eDj6rNgXv6+YGpz
OVCsp20vb9b3vtIZiPHvwQTgksqqX/kTKrYBo2SIslm4FAUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSsmVKAGQeWl35dkHjGIiEucTV3EDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3
Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcxMTkyLzQ3N2JjODhkLWVkYTYtMzY2
NC1hOTdlLTc1ODI2YTJiNTFkMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2
LTc2N2Q4YTY3MTE5Mi80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzEx
OTIuY3JsMB8GA1UdIwQYMBaAFMYImSfJ/okMCppHcbD7Iaab0YDzMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhh
NjcxMTkyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBa32gDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAOqDnsbzofRGF5/zh/xoYrGSGG+Kd4EsKhiYu2LvzmyuevrIclMfEjitT52Hv
y//88iVtb4BXJwFSXtXKzcww/ylMPYlRdAkQf31YOfp0gVvW6cqTmASO2OQ49XcI
RdMCFBPPJ5Hv1SKdxsExuEvyDz7hJGgb0TixEFt/cAXpvP+pnkNN5crFQfEifL7L
XhDnwU0t6dOrE/l3zCg6Z4TOrSgclTEV15VKAKNvPFMb3Kqow1Kxl0CprFjCbr7O
47ayVUyaOr1AsUSEXJh+V4CN2R9lNSvF3O64/yONoxennAHhPKC03w3S0Tyb/D2i
1xL3PmcxmHGSE3kH9K2lc75AJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org