Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6935ff6f-711d-38c1-b457-89007b0a172c.roa
File: 6935ff6f-711d-38c1-b457-89007b0a172c.roa (raw, json)
Hash identifier: myCr7JP3+p1UwyhQYByVHaKZKoX6p/OQEI4p5Rl7bQI=
Subject key identifier: 93:52:AE:28:85:5E:F8:F8:AA:74:9A:88:74:F7:24:3F:EC:3C:DF:67
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285844123F6E03D9EF90D2CAE95A60
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6935ff6f-711d-38c1-b457-89007b0a172c.roa
Signing time: Fri 01 Dec 2023 13:51:29 +0000
ROA not before: Fri 01 Dec 2023 13:51:29 +0000
ROA not after: Thu 29 Feb 2024 13:51:29 +0000
asID: 30125
IP address blocks: 23.90.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:12:3f:6e:03:d9:ef:90:d2:ca:e9:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Dec 1 13:51:29 2023 GMT
Not After : Feb 29 13:51:29 2024 GMT
Subject: CN=1ac54913-8906-4ece-8d55-2353693a699b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:b3:14:32:3a:12:4f:99:d5:b5:9b:26:31:
b3:46:d2:81:62:b3:27:70:d2:a9:ec:d5:c5:c6:05:
09:f9:fa:c7:64:95:8c:f7:2f:c4:5b:aa:2f:be:b9:
ec:0c:c6:d2:59:96:1b:8f:65:bf:92:12:1b:6a:31:
7c:62:f3:46:b8:b2:ff:6d:38:18:44:57:0e:a7:31:
37:7d:bc:29:84:24:17:29:88:3f:81:df:05:7f:6c:
f3:e5:f0:88:71:78:d1:31:b6:96:06:f7:9b:a8:7a:
cc:ca:7b:2f:4b:00:76:24:d8:d5:07:ba:c3:e4:df:
de:65:e6:5a:90:e5:61:fc:70:cb:71:f3:d6:31:15:
a4:28:99:ab:1d:a9:2c:37:c1:a8:19:1f:27:cd:de:
80:f7:db:3c:7c:63:fd:34:bb:e1:77:1c:e2:33:e1:
6f:75:cf:52:7e:ed:bf:8f:a9:b8:31:0e:7d:20:2b:
91:58:82:b5:5f:6f:93:cb:b5:5c:a4:64:94:3b:0d:
32:da:da:bd:cc:c5:cc:5c:dd:4b:94:85:fb:bb:8a:
1d:7e:97:4c:04:16:75:c8:8d:1c:22:e6:9a:e8:e0:
4b:d8:54:ca:fb:09:e5:eb:4e:69:39:dd:75:c0:c0:
9f:64:14:a2:0a:86:b4:e4:84:ec:1a:06:e8:03:fb:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:AE:28:85:5E:F8:F8:AA:74:9A:88:74:F7:24:3F:EC:3C:DF:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6935ff6f-711d-38c1-b457-89007b0a172c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:1b:3a:dc:87:14:ef:f6:25:45:05:49:05:8f:50:94:23:3b:
9c:7d:97:ee:d7:1c:11:09:33:f8:09:ab:ed:4f:e8:57:7c:be:
01:5c:a8:b7:ca:8f:f1:7a:b2:cb:44:e2:9a:8a:3b:d7:5b:94:
44:06:fc:0b:a0:61:e7:21:e4:e2:ab:0f:52:45:f6:a6:a2:89:
23:21:73:e2:8e:36:48:37:bd:b6:a4:26:02:03:44:94:4a:b8:
d1:ad:a5:25:f0:17:b5:be:d4:28:69:38:30:1e:c6:5c:a6:a8:
0d:15:a3:b4:8b:88:4b:f6:e7:41:74:f4:b9:ba:7c:0f:90:a2:
bd:f1:a0:7b:93:ca:4a:02:bc:51:82:a2:59:6d:41:44:cd:79:
d9:0e:ed:6d:d6:29:82:84:fc:a5:05:0a:46:a9:da:a1:ce:f4:
e6:67:7a:71:9f:de:3c:fa:eb:d0:04:97:75:64:79:83:d0:6e:
e5:15:50:e2:d2:88:eb:b8:d5:85:8e:3f:be:48:34:c0:ad:7f:
c5:c7:22:96:58:88:da:a8:d7:45:e7:5b:25:e2:7d:af:0c:b3:
3d:16:63:ed:83:8d:11:0a:88:36:64:54:ff:d7:ba:25:d7:55:
cb:6d:ef:54:cd:2d:98:97:a5:51:34:96:9f:ce:5b:d9:f0:e7:
2a:4e:90:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQSP24D2e+Q0srpWmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTIzMTIwMTEzNTEyOVoXDTI0MDIyOTEzNTEyOVowLzEtMCsGA1UEAxMk
MWFjNTQ5MTMtODkwNi00ZWNlLThkNTUtMjM1MzY5M2E2OTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIyzFDI6Ek+Z1bWbJjGzRtKBYrMncNKp7NXF
xgUJ+frHZJWM9y/EW6ovvrnsDMbSWZYbj2W/khIbajF8YvNGuLL/bTgYRFcOpzE3
fbwphCQXKYg/gd8Ff2zz5fCIcXjRMbaWBvebqHrMynsvSwB2JNjVB7rD5N/eZeZa
kOVh/HDLcfPWMRWkKJmrHaksN8GoGR8nzd6A99s8fGP9NLvhdxziM+Fvdc9Sfu2/
j6m4MQ59ICuRWIK1X2+Ty7VcpGSUOw0y2tq9zMXMXN1LlIX7u4odfpdMBBZ1yI0c
Iuaa6OBL2FTK+wnl605pOd11wMCfZBSiCoa05ITsGgboA/sKbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNSriiFXvj4qnSaiHT3JD/sPN9nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNjkzNWZmNmYtNzExZC0z
OGMxLWI0NTctODkwMDdiMGExNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1p4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4bOtyHFO/2JUUFSQWPUJQjO5x9l+7XHBEJM/gJq+1P6Fd8vgFcqLfK
j/F6sstE4pqKO9dblEQG/AugYech5OKrD1JF9qaiiSMhc+KONkg3vbakJgIDRJRK
uNGtpSXwF7W+1ChpODAexlymqA0Vo7SLiEv250F09Lm6fA+Qor3xoHuTykoCvFGC
olltQUTNedkO7W3WKYKE/KUFCkap2qHO9OZnenGf3jz669AEl3VkeYPQbuUVUOLS
iOu41YWOP75INMCtf8XHIpZYiNqo10XnWyXifa8Msz0WY+2DjREKiDZkVP/XuiXX
Vctt71TNLZiXpVE0lp/OW9nw5ypOkFc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org