Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/7e83aaa3-cc24-3684-8c8c-f0ad300dd6e6.roa
File: 7e83aaa3-cc24-3684-8c8c-f0ad300dd6e6.roa (raw, json)
Hash identifier: 6Yk3MQKy2sph97IY2Pi3oVULBTXh4x+lWjZqX7/aT9Y=
Subject key identifier: 85:41:D0:37:31:D7:CD:11:36:BB:4E:A6:78:67:B4:C2:CE:7E:68:C0
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F4328583750D1C1A349AB641855EE5B00
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/7e83aaa3-cc24-3684-8c8c-f0ad300dd6e6.roa
Signing time: Thu 17 Sep 2020 04:00:00 +0000
ROA not before: Thu 17 Sep 2020 04:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 11377
IP address blocks: 149.72.2.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:50:d1:c1:a3:49:ab:64:18:55:ee:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Sep 17 04:00:00 2020 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=5cd90f85-0a48-45cd-a94b-c247452cfa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:b1:00:e3:17:f9:e0:89:c4:e1:d2:74:8a:
cc:9b:4a:a9:61:2f:b6:c6:04:ef:79:c5:0e:ff:4d:
4b:34:5d:54:bd:05:99:e9:e7:a2:f9:14:5f:76:fc:
a2:eb:7f:28:cf:23:e7:11:e5:b3:0a:cb:26:fd:a5:
e9:4d:47:b4:e5:24:f7:47:53:09:d4:b3:53:8a:bd:
d2:7f:99:a6:c5:99:b4:88:80:a4:3c:1f:f0:66:ab:
fe:4f:12:2a:60:80:f7:8d:f6:14:87:39:80:09:f7:
7f:e2:bc:75:19:be:4a:97:47:d7:1b:cd:3b:d3:67:
f4:e7:c1:d4:f8:a5:9d:86:04:6d:19:c7:cb:65:73:
30:90:d8:96:14:31:a8:f0:47:b5:93:fb:51:de:f4:
9d:be:7e:c8:3a:79:9e:6c:e4:e2:1c:d7:74:d6:9d:
d5:01:6b:67:86:ec:bf:13:c6:3f:75:4f:b7:1f:8e:
27:4e:ea:94:81:35:1b:16:da:75:73:51:30:1c:b6:
bd:24:11:fa:52:b0:d9:2b:61:39:43:7f:68:96:98:
85:43:71:5b:3b:7d:ed:31:f2:2c:54:0f:e0:78:e4:
6e:c0:c8:97:8e:b7:19:62:64:35:09:09:23:4f:a7:
9a:ee:c8:f3:49:b3:d4:3c:46:53:79:9a:d6:6c:36:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:D0:37:31:D7:CD:11:36:BB:4E:A6:78:67:B4:C2:CE:7E:68:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/7e83aaa3-cc24-3684-8c8c-f0ad300dd6e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:0c:9e:05:23:95:6a:57:b7:76:8c:63:fd:82:a6:13:e1:d7:
a1:80:a2:16:16:ef:8e:ab:75:53:73:31:12:54:77:39:7c:22:
69:1b:a6:ea:06:86:ab:29:79:08:52:31:e5:a6:fd:f6:50:18:
3d:9c:15:9b:39:03:6c:8c:b8:2d:76:f2:09:65:c7:44:9c:ae:
a3:95:0c:8e:5f:f6:c0:11:ab:05:dc:47:d1:21:1c:78:ba:12:
52:60:74:60:67:b5:cb:2a:c5:10:23:99:c1:61:3b:e8:c4:42:
1c:a9:cf:bb:d1:39:c8:ca:77:4d:a6:6c:70:0b:cb:42:76:a2:
72:4c:aa:20:a0:51:ff:0d:0c:9b:88:dd:f7:97:b6:49:50:56:
71:75:7f:76:4d:7a:16:fa:8d:b3:ba:3c:4a:40:2b:7a:c6:bd:
e3:20:c7:46:f8:5d:a4:04:89:a6:22:e6:de:88:9c:7f:38:56:
b5:da:7b:84:89:59:b6:25:37:99:8a:92:db:65:ae:7d:00:e7:
d8:75:db:81:f7:de:fa:83:22:12:c0:30:72:6c:1f:9e:b5:3d:
bd:9a:44:ab:a9:03:31:61:66:bd:d9:a8:56:f2:b3:f5:ad:c3:
00:fb:ee:2e:45:34:15:03:ec:69:1e:42:f4:02:69:0d:76:22:
35:a9:13:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDdQ0cGjSatkGFXuWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3
YzBiMB4XDTIwMDkxNzA0MDAwMFoXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NWNkOTBmODUtMGE0OC00NWNkLWE5NGItYzI0NzQ1MmNmYTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj02xAOMX+eCJxOHSdIrMm0qpYS+2xgTvecUO
/01LNF1UvQWZ6eei+RRfdvyi638ozyPnEeWzCssm/aXpTUe05ST3R1MJ1LNTir3S
f5mmxZm0iICkPB/wZqv+TxIqYID3jfYUhzmACfd/4rx1Gb5Kl0fXG80702f058HU
+KWdhgRtGcfLZXMwkNiWFDGo8Ee1k/tR3vSdvn7IOnmebOTiHNd01p3VAWtnhuy/
E8Y/dU+3H44nTuqUgTUbFtp1c1EwHLa9JBH6UrDZK2E5Q39olpiFQ3FbO33tMfIs
VA/geORuwMiXjrcZYmQ1CQkjT6ea7sjzSbPUPEZTeZrWbDb7CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVB0Dcx180RNrtOpnhntMLOfmjAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl
MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvN2U4M2FhYTMtY2MyNC0z
Njg0LThjOGMtZjBhZDMwMGRkNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3
OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli
N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy
MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUgCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMMngUjlWpXt3aMY/2CphPh16GAohYW746rdVNzMRJUdzl8ImkbpuoG
hqspeQhSMeWm/fZQGD2cFZs5A2yMuC128gllx0ScrqOVDI5f9sARqwXcR9EhHHi6
ElJgdGBntcsqxRAjmcFhO+jEQhypz7vROcjKd02mbHALy0J2onJMqiCgUf8NDJuI
3feXtklQVnF1f3ZNehb6jbO6PEpAK3rGveMgx0b4XaQEiaYi5t6InH84VrXae4SJ
WbYlN5mKkttlrn0A59h124H33vqDIhLAMHJsH561Pb2aRKupAzFhZr3ZqFbys/Wt
wwD77i5FNBUD7GkeQvQCaQ12IjWpE8A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:36 2025 by rpki-client