Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/ef4d7af3-b31c-3e5f-860f-0843d6753d33.roa
File: ef4d7af3-b31c-3e5f-860f-0843d6753d33.roa (raw, json)
Hash identifier: Iex6sjgQCCIt5o1hFSovZHIarYXZwQl5oru5KYiW/zY=
Subject key identifier: 6E:61:AF:E5:7E:61:EE:82:3D:9D:B4:AB:52:69:53:53:AD:6A:C2:E7
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F4328576D51CC73C042CFC172585235E5
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/ef4d7af3-b31c-3e5f-860f-0843d6753d33.roa
Signing time: Wed 27 May 2020 22:48:02 +0000
ROA not before: Thu 02 Jan 2020 05:00:00 +0000
ROA not after: Tue 30 Aug 2022 04:00:00 +0000
asID: 396032
IP address blocks: 64.38.142.0/23 maxlen: 24
64.38.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:58:52:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Jan 2 05:00:00 2020 GMT
Not After : Aug 30 04:00:00 2022 GMT
Subject: CN=b3c39fc1-dd2f-4bf3-980e-4760c2226ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:7b:ac:9c:3c:6a:d0:11:04:bc:d1:b9:48:
9e:d6:3c:e1:87:23:9a:8f:ef:3d:9a:b0:8c:94:0e:
c8:57:7c:99:b9:fb:14:3c:2e:b1:7c:3f:5e:6d:a4:
45:c0:9a:05:41:53:3a:5d:d6:80:de:0b:5a:ae:41:
28:bc:21:a9:53:f0:f0:de:ad:2b:5d:e4:84:42:5a:
54:ce:42:49:67:c4:5b:f9:33:cc:5e:ac:cb:97:3e:
54:64:7b:73:25:7a:10:86:68:7c:3f:3c:c7:28:24:
7e:2b:d0:1e:4e:c6:dd:19:35:ec:b7:59:f3:86:af:
47:3e:7e:c3:88:a3:31:25:73:c8:32:fb:52:f8:1c:
6c:5c:ef:66:1d:fc:0e:29:03:09:8d:26:85:f1:9e:
0c:bd:fd:62:46:6c:16:75:71:90:b3:46:06:43:92:
76:63:b8:9f:d0:5b:e4:df:93:f1:13:ba:32:01:cc:
52:51:24:72:a3:c9:31:e0:2c:15:bc:fe:88:2a:e5:
4c:14:c6:e7:9c:c2:5e:c2:2c:bb:ef:95:81:26:54:
17:bb:f5:5f:f9:c7:d2:86:c7:77:77:9c:7c:5f:2c:
85:f4:33:d8:62:a6:54:f6:72:18:84:18:3e:d2:e4:
6b:0d:69:a7:4e:95:af:a7:66:dc:22:2c:78:94:ed:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:AF:E5:7E:61:EE:82:3D:9D:B4:AB:52:69:53:53:AD:6A:C2:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/ef4d7af3-b31c-3e5f-860f-0843d6753d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
64.38.142.0/23
64.38.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c0:87:0b:dc:88:a8:8a:33:6a:f7:f1:9f:e3:ca:c1:a0:03:
db:58:61:8c:86:d4:ed:97:25:38:8f:e4:6d:72:80:dd:97:a5:
de:80:27:57:01:74:9a:5c:21:b8:f5:a3:2e:93:37:c8:d9:92:
56:a9:a8:e4:4f:11:3f:f4:69:ab:40:90:e2:5b:2b:4e:8e:bc:
e8:21:e5:7a:b9:32:e6:49:5d:d7:02:a8:02:7a:e6:d4:06:d5:
ab:35:03:89:94:d5:52:8c:b4:ca:4f:68:90:de:6f:2d:aa:ff:
53:49:85:e4:e4:49:68:0a:fa:1e:38:b5:e6:41:0c:80:91:3b:
cf:b6:e6:e9:52:5b:f5:36:5b:53:40:8d:93:1d:2e:14:7d:72:
bc:0b:73:72:89:3f:5e:96:bf:ab:5c:44:3d:9e:e6:4e:d0:2e:
9d:ea:e9:5c:5b:ad:7b:91:38:3a:77:6c:0f:c3:cd:c3:f6:e3:
35:bf:68:b3:e3:33:bc:64:98:5e:19:d7:60:22:e2:46:0c:a4:
a7:44:37:e7:64:08:41:20:46:ec:f1:2a:fd:e9:ae:d9:75:d5:
75:67:fe:39:5b:76:8f:dc:f2:0b:7f:c7:eb:de:25:8f:10:33:
4e:f6:94:6e:6b:6e:50:88:b4:a8:d3:f7:61:62:8c:26:b4:30:
8a:c3:74:1d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BclhSNeUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjczM2Mx
NjAeFw0yMDAxMDIwNTAwMDBaFw0yMjA4MzAwNDAwMDBaMC8xLTArBgNVBAMTJGIz
YzM5ZmMxLWRkMmYtNGJmMy05ODBlLTQ3NjBjMjIyNmNjYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOSwe6ycPGrQEQS80blIntY84Ycjmo/vPZqwjJQO
yFd8mbn7FDwusXw/Xm2kRcCaBUFTOl3WgN4LWq5BKLwhqVPw8N6tK13khEJaVM5C
SWfEW/kzzF6sy5c+VGR7cyV6EIZofD88xygkfivQHk7G3Rk17LdZ84avRz5+w4ij
MSVzyDL7UvgcbFzvZh38DikDCY0mhfGeDL39YkZsFnVxkLNGBkOSdmO4n9Bb5N+T
8RO6MgHMUlEkcqPJMeAsFbz+iCrlTBTG55zCXsIsu++VgSZUF7v1X/nH0obHd3ec
fF8shfQz2GKmVPZyGIQYPtLkaw1pp06Vr6dm3CIseJTtEiECAwEAAaOCA1swggNX
MB0GA1UdDgQWBBRuYa/lfmHugj2dtKtSaVNTrWrC5zCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5
OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMzYzE2L2VmNGQ3YWYzLWIzMWMtM2U1
Zi04NjBmLTA4NDNkNjc1M2QzMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzdiOTNlOTljLTliNDItNGU3Yi1hNzJj
LTk2NzZlNjczM2MxNi83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNj
MTYuY3JsMB8GA1UdIwQYMBaAFMcdbWrJvTpzHF8sRdpWPbzZYHOSMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2
NzMzYzE2LmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAUAmjgMEA0Am
uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEAiMCHC9yIqIozavfxn+PKwaAD21hhjIbU7ZclOI/kbXKA3Zel3oAn
VwF0mlwhuPWjLpM3yNmSVqmo5E8RP/Rpq0CQ4lsrTo686CHlerky5kld1wKoAnrm
1AbVqzUDiZTVUoy0yk9okN5vLar/U0mF5ORJaAr6Hji15kEMgJE7z7bm6VJb9TZb
U0CNkx0uFH1yvAtzcok/Xpa/q1xEPZ7mTtAunerpXFute5E4OndsD8PNw/bjNb9o
s+MzvGSYXhnXYCLiRgykp0Q352QIQSBG7PEq/emu2XXVdWf+OVt2j9zyC3/H694l
jxAzTvaUbmtuUIi0qNP3YWKMJrQwisN0HQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org