Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/318e0a13-ef06-3a8b-8f66-3d7981618240.roa
File: 318e0a13-ef06-3a8b-8f66-3d7981618240.roa (raw, json)
Hash identifier: h0TXqK4J2Xaoh+PabQhszmmABStPV/qyvk2EKzlp0M8=
Subject key identifier: AF:7B:1E:A8:D5:1D:3B:19:F6:E5:AC:C0:C8:F1:B2:EF:E2:90:42:81
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA79EDABDD75FE9C32B1D5160
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/318e0a13-ef06-3a8b-8f66-3d7981618240.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 54113
IP address blocks: 199.36.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:da:bd:d7:5f:e9:c3:2b:1d:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=4562d5aa-bd83-4364-8a9e-6fab26960979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:e1:fb:de:cb:8d:85:f2:7e:3b:e0:17:a0:
da:bf:7e:90:2c:9f:f1:22:01:6d:e6:0c:9c:46:b9:
b1:53:e1:34:ca:a0:ae:37:e0:e4:95:6d:15:67:f8:
56:c8:f1:98:b2:18:8a:a2:35:29:9d:75:16:a5:e0:
65:75:75:84:52:73:c9:ef:a5:23:a1:30:46:0b:13:
60:5e:b7:88:9a:2c:44:87:87:77:1a:19:6f:c9:e9:
03:17:89:ac:52:50:b3:67:0c:db:01:52:9d:2b:b7:
45:23:93:08:f1:3b:30:c8:ac:77:39:cf:9a:e8:2e:
b7:3d:8f:74:5c:02:44:99:bc:73:56:51:e2:65:be:
04:19:c7:5f:83:e9:0f:34:f2:48:e6:a1:b1:08:4d:
b1:5d:04:c6:c6:5c:08:38:a2:37:09:f7:60:b8:c9:
0e:bd:1b:80:65:d0:12:ca:93:fd:77:db:2b:52:76:
e2:d6:db:a3:f6:e0:57:4a:2e:75:43:f0:de:d9:69:
c5:95:18:9a:3d:f4:80:e0:5b:ad:2b:00:98:4f:8c:
91:52:74:3d:0f:36:99:ae:7c:16:fd:3f:b2:a2:d9:
a5:c2:c5:df:43:93:68:b3:7e:87:33:be:44:bb:ca:
c2:6e:de:e1:a6:3b:b3:49:97:c5:cc:1d:28:65:2d:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:1E:A8:D5:1D:3B:19:F6:E5:AC:C0:C8:F1:B2:EF:E2:90:42:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/318e0a13-ef06-3a8b-8f66-3d7981618240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:cd:2d:0c:d1:44:ed:28:0e:d2:6b:66:b3:88:bd:e2:ac:e4:
bc:90:f0:82:50:a3:10:27:8c:b2:a1:c7:dd:b2:0c:44:16:e6:
69:7b:6a:b0:63:19:ad:0c:49:8d:77:02:f0:7d:d3:ac:0b:c6:
95:0c:e2:cf:ea:08:bf:10:30:9f:7b:9c:38:77:04:3f:cb:bf:
49:8c:c1:b1:92:0a:2b:ca:2e:48:71:5e:ba:1c:40:52:67:f6:
e3:df:e1:26:5c:40:63:64:d3:66:ce:08:70:b8:ed:33:ce:80:
33:66:88:e1:e5:73:83:e9:e1:ef:e0:fb:ad:3c:ea:7e:67:62:
6f:31:c7:ed:2c:a4:f9:b1:be:8e:09:03:cc:69:33:e9:97:bc:
ed:0c:a9:ce:48:8b:c8:13:24:fb:f1:ee:25:9a:e7:d1:4c:22:
80:b1:e0:52:3a:32:30:ec:b1:11:19:65:07:72:75:5d:cf:3c:
59:50:67:9d:0c:5d:f0:cc:84:af:b3:f1:22:c4:15:91:96:a3:
49:f9:80:48:ac:24:f6:c7:fb:a5:57:5c:ff:14:2c:6e:de:6c:
95:b6:22:81:a0:7c:fd:64:94:50:1f:a1:0c:c3:dd:a5:84:24:
d0:ad:f2:b0:dd:96:bb:7b:40:11:75:29:20:cf:a3:51:c6:bf:
d4:08:ba:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnntq911/pwysdUWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NDU2MmQ1YWEtYmQ4My00MzY0LThhOWUtNmZhYjI2OTYwOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W3h+97LjYXyfjvgF6Dav36QLJ/xIgFt5gyc
RrmxU+E0yqCuN+DklW0VZ/hWyPGYshiKojUpnXUWpeBldXWEUnPJ76UjoTBGCxNg
XreImixEh4d3GhlvyekDF4msUlCzZwzbAVKdK7dFI5MI8TswyKx3Oc+a6C63PY90
XAJEmbxzVlHiZb4EGcdfg+kPNPJI5qGxCE2xXQTGxlwIOKI3CfdguMkOvRuAZdAS
ypP9d9srUnbi1tuj9uBXSi51Q/De2WnFlRiaPfSA4FutKwCYT4yRUnQ9DzaZrnwW
/T+yotmlwsXfQ5Nos36HM75Eu8rCbt7hpjuzSZfFzB0oZS1/VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK97HqjVHTsZ9uWswMjxsu/ikEKBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzE4ZTBhMTMtZWYwNi0z
YThiLThmNjYtM2Q3OTgxNjE4MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKnNLQzRRO0oDtJrZrOIveKs5LyQ8IJQoxAnjLKhx92yDEQW5ml7arBj
Ga0MSY13AvB906wLxpUM4s/qCL8QMJ97nDh3BD/Lv0mMwbGSCivKLkhxXrocQFJn
9uPf4SZcQGNk02bOCHC47TPOgDNmiOHlc4Pp4e/g+6086n5nYm8xx+0spPmxvo4J
A8xpM+mXvO0Mqc5Ii8gTJPvx7iWa59FMIoCx4FI6MjDssREZZQdydV3PPFlQZ50M
XfDMhK+z8SLEFZGWo0n5gEisJPbH+6VXXP8ULG7ebJW2IoGgfP1klFAfoQzD3aWE
JNCt8rDdlrt7QBF1KSDPo1HGv9QIuoM=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:24 2023 by rpki-client on console-ams.rpki-client.org