Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c7986ef-2e0c-322e-b351-0cb090df213e.roa
File: 6c7986ef-2e0c-322e-b351-0cb090df213e.roa (raw, json)
Hash identifier: rE8whpvwC/jf/lCVZpi+wjhHyBsBcSK3cdqfwRUxt64=
Subject key identifier: BC:60:60:01:F7:E1:39:40:E2:DA:34:52:46:8B:94:33:99:6A:BB:4B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B4346CCE65882CA421FD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c7986ef-2e0c-322e-b351-0cb090df213e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:34:6c:ce:65:88:2c:a4:21:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=bf1f4f13-dd26-4117-a561-661f9585f7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:93:b2:73:e6:0d:53:94:e5:03:bb:66:6a:
d0:46:36:24:57:01:c3:5c:37:d7:5f:05:f4:1f:5b:
05:89:44:a8:ab:08:41:e9:fd:61:4a:6b:c8:e6:a0:
f9:47:69:fb:4e:65:39:15:26:8b:22:01:21:aa:4b:
07:e2:57:18:5b:85:a4:6c:cb:71:1a:70:70:21:97:
b1:3b:56:63:aa:ef:c4:57:a1:25:3a:41:79:97:44:
c4:a7:e9:8c:3b:02:ac:9b:5e:c1:5c:fe:83:79:5a:
f8:45:82:4b:50:11:9b:78:68:4b:45:db:72:eb:ef:
36:ed:7f:9d:f2:80:fb:4a:7c:41:fa:44:c9:8a:27:
97:5a:4a:6d:9c:fc:46:13:75:9c:95:55:39:8a:3a:
bc:0d:a2:bb:d4:36:32:31:2a:0e:f9:8f:a2:03:0e:
5c:99:55:e6:a0:bf:79:9e:82:b1:17:89:6a:9b:97:
39:cf:57:ff:fd:f3:51:9a:0b:30:bf:46:bc:5e:f6:
ef:8e:df:82:ae:70:29:51:cf:01:73:96:36:3e:50:
d9:49:b5:c3:fc:e6:e8:74:9d:45:90:9b:0f:e3:d2:
d6:5c:f8:81:5a:31:b1:6b:0f:33:9f:fb:ea:c8:a6:
70:ae:ca:02:89:ef:22:9d:cd:56:0e:05:3f:c5:e3:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:60:01:F7:E1:39:40:E2:DA:34:52:46:8B:94:33:99:6A:BB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c7986ef-2e0c-322e-b351-0cb090df213e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:15:94:2a:1c:eb:26:70:00:37:48:f9:bc:72:4c:d8:e8:f2:
bb:d8:d0:11:29:b7:e5:e1:98:ff:0b:f5:fa:12:27:60:14:56:
27:eb:86:01:b4:b2:b4:bd:a5:60:66:e5:65:70:bd:f6:31:ee:
e1:e9:e7:29:f8:c7:8a:9b:38:81:53:b8:68:17:35:39:7b:18:
dd:e4:e2:c8:88:30:03:80:8c:fe:b2:13:df:cc:9b:eb:a2:38:
49:f0:ea:bd:cb:80:ab:8d:27:df:49:d3:71:66:a8:a1:d4:8d:
d5:9d:e1:b7:ff:37:cc:a4:4d:6c:63:cd:e7:51:3e:23:46:43:
e7:bb:10:55:e6:31:5e:3e:01:bc:41:b4:3e:ee:8b:0a:1c:af:
07:10:d9:31:73:62:4d:77:47:58:0e:04:25:87:cc:72:8b:93:
26:c3:99:e1:da:7d:a9:99:68:81:86:d8:e4:f7:76:9f:f4:0f:
f3:1c:55:6e:cf:44:e1:d8:95:6e:5c:83:d2:5b:fd:18:26:c1:
61:b8:80:f4:3a:07:02:c0:eb:57:0f:c8:9c:3a:d5:83:c3:be:
8e:18:1e:ad:23:f2:35:33:6e:b3:2f:14:9b:48:f7:c6:82:d9:
4a:d7:3b:3d:a2:55:46:fa:85:ad:da:6b:23:e7:37:1a:fd:43:
72:aa:53:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqntDRszmWILKQh/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YmYxZjRmMTMtZGQyNi00MTE3LWE1NjEtNjYxZjk1ODVmN2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdyTsnPmDVOU5QO7ZmrQRjYkVwHDXDfXXwX0
H1sFiUSoqwhB6f1hSmvI5qD5R2n7TmU5FSaLIgEhqksH4lcYW4WkbMtxGnBwIZex
O1Zjqu/EV6ElOkF5l0TEp+mMOwKsm17BXP6DeVr4RYJLUBGbeGhLRdty6+827X+d
8oD7SnxB+kTJiieXWkptnPxGE3WclVU5ijq8DaK71DYyMSoO+Y+iAw5cmVXmoL95
noKxF4lqm5c5z1f//fNRmgswv0a8Xvbvjt+CrnApUc8Bc5Y2PlDZSbXD/ObodJ1F
kJsP49LWXPiBWjGxaw8zn/vqyKZwrsoCie8inc1WDgU/xeMBGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxgYAH34TlA4to0UkaLlDOZartLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmM3OTg2ZWYtMmUwYy0z
MjJlLWIzNTEtMGNiMDkwZGYyMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgVlCoc6yZwADdI+bxyTNjo8rvY0BEpt+XhmP8L9foSJ2AUVifrhgG0
srS9pWBm5WVwvfYx7uHp5yn4x4qbOIFTuGgXNTl7GN3k4siIMAOAjP6yE9/Mm+ui
OEnw6r3LgKuNJ99J03FmqKHUjdWd4bf/N8ykTWxjzedRPiNGQ+e7EFXmMV4+AbxB
tD7uiwocrwcQ2TFzYk13R1gOBCWHzHKLkybDmeHafamZaIGG2OT3dp/0D/McVW7P
ROHYlW5cg9Jb/RgmwWG4gPQ6BwLA61cPyJw61YPDvo4YHq0j8jUzbrMvFJtI98aC
2UrXOz2iVUb6ha3aayPnNxr9Q3KqU70=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:25 2023 by rpki-client on console-ams.rpki-client.org