Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/b7b44a96-2033-39ce-ba48-a56ffdca8c45.roa
File: b7b44a96-2033-39ce-ba48-a56ffdca8c45.roa (raw, json)
Hash identifier: CxEbTcklxDW2kMxT+8itwBmDxQO9dOOVayVDz2HabUU=
Subject key identifier: AF:AD:E6:56:4D:02:C6:89:AF:DE:CD:4D:C9:5C:D3:4F:1A:3A:32:A9
Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial: 010D0C9F4328576D51CC73C042CFC1715A113A1D
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/b7b44a96-2033-39ce-ba48-a56ffdca8c45.roa
Signing time: Wed 08 Apr 2020 13:53:30 +0000
ROA not before: Wed 01 Apr 2020 04:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 21803
IP address blocks: 67.223.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:5a:11:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Validity
Not Before: Apr 1 04:00:00 2020 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=8a240362-061c-4026-8956-e6ab34d87bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:37:16:aa:1d:2d:01:08:a9:37:74:8e:ef:
78:3a:6e:97:b8:10:76:f8:f2:87:e3:bd:0c:4c:f3:
19:11:3f:19:90:68:f2:e0:5d:cd:06:0e:81:d8:73:
24:15:8c:c2:64:cd:1d:de:01:62:44:bd:9d:d4:77:
64:42:9c:b1:11:ff:9b:1c:47:f2:0c:5a:1a:cc:c5:
83:b2:7a:80:fd:fc:4f:3c:40:14:87:18:d2:bd:aa:
bb:a0:f7:45:2f:53:b0:fc:e9:2f:8b:a1:9d:e0:33:
70:62:6e:35:e1:4d:8f:d7:8b:7e:aa:0b:32:a2:4b:
c2:f1:2a:61:bc:55:b3:01:4c:8d:92:c0:77:9f:5e:
11:a5:59:7c:9a:89:da:46:7f:08:60:f1:24:4d:09:
fa:2c:2c:64:1a:f4:5f:6f:ea:34:ed:98:5a:bb:4c:
b9:87:27:d7:a6:38:95:f5:a0:ab:a5:b7:b6:70:00:
64:77:f5:b3:5f:ca:8b:7e:ae:1e:7a:70:ef:88:81:
e6:d2:aa:d6:62:8a:57:e0:0e:44:00:73:39:6b:7e:
11:02:5f:8c:82:3e:88:ea:72:67:77:c6:3a:bf:ef:
15:c8:12:6e:52:35:4e:f7:18:38:55:30:35:16:81:
e5:da:bd:f5:b0:cf:39:10:b9:84:b2:db:0d:1d:57:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:E6:56:4D:02:C6:89:AF:DE:CD:4D:C9:5C:D3:4F:1A:3A:32:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/b7b44a96-2033-39ce-ba48-a56ffdca8c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
X509v3 Authority Key Identifier:
keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.223.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:74:84:f6:da:d1:1b:dd:01:e0:35:ec:3b:6a:10:75:f6:d0:
5c:1e:68:57:29:3f:73:cd:57:73:56:a0:06:56:6a:d9:d9:22:
21:5e:00:9b:ea:0a:11:da:42:90:02:6a:62:80:25:ba:6f:ad:
8f:32:7c:fb:66:1a:f6:be:fb:ca:da:4c:70:28:ec:2c:8d:0d:
57:3f:ab:99:0b:bc:2f:a6:2d:a4:f5:e1:c4:9d:49:56:bb:41:
61:17:fb:f2:e2:20:84:ea:b0:10:32:32:5c:65:b9:f1:5d:08:
97:b7:94:a8:af:84:5d:05:1d:e2:f4:8f:d9:ff:b6:e5:0a:73:
1d:e3:0a:d0:ed:52:7b:0d:bc:c7:62:85:5f:e5:ae:ad:aa:15:
4f:7f:d7:51:89:58:c0:27:ef:4c:bc:d1:ff:11:83:06:b6:b3:
22:f7:7e:ac:e8:d3:d8:56:19:1b:9e:07:7a:e3:f3:18:0c:75:
54:87:e0:be:76:fd:ac:2f:07:ed:97:ae:cc:89:78:bf:11:29:
b2:0e:5c:dd:3b:24:76:98:6f:fd:ef:29:95:42:b5:04:a0:74:
a9:ae:ae:31:22:61:51:c5:c0:ec:40:4f:f9:88:d5:66:4d:66:
75:27:cd:01:cd:9f:ef:28:2c:97:fb:51:8a:45:65:38:db:55:
d0:89:51:c6
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcVoROh0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1MTk3
YTAeFw0yMDA0MDEwNDAwMDBaFw0yMjA3MTIwNDAwMDBaMC8xLTArBgNVBAMTJDhh
MjQwMzYyLTA2MWMtNDAyNi04OTU2LWU2YWIzNGQ4N2JmZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMtbNxaqHS0BCKk3dI7veDpul7gQdvjyh+O9DEzz
GRE/GZBo8uBdzQYOgdhzJBWMwmTNHd4BYkS9ndR3ZEKcsRH/mxxH8gxaGszFg7J6
gP38TzxAFIcY0r2qu6D3RS9TsPzpL4uhneAzcGJuNeFNj9eLfqoLMqJLwvEqYbxV
swFMjZLAd59eEaVZfJqJ2kZ/CGDxJE0J+iwsZBr0X2/qNO2YWrtMuYcn16Y4lfWg
q6W3tnAAZHf1s1/Ki36uHnpw74iB5tKq1mKKV+AORABzOWt+EQJfjII+iOpyZ3fG
Or/vFcgSblI1TvcYOFUwNRaB5dq99bDPORC5hLLbDR1XShMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSvreZWTQLGia/ezU3JXNNPGjoyqTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdm
NzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUxOTdhL2I3YjQ0YTk2LTIwMzMtMzlj
ZS1iYTQ4LWE1NmZmZGNhOGM0NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFl
LWM4NGRmOGQ1MTk3YS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5
N2EuY3JsMB8GA1UdIwQYMBaAFMnG3pB/tzIxwZpnpU1pHBUgfXXwMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4
ZDUxOTdhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBEPfoDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAB3SE9trRG90B4DXsO2oQdfbQXB5oVyk/c81Xc1agBlZq2dkiIV4Am+oKEdpC
kAJqYoAlum+tjzJ8+2Ya9r77ytpMcCjsLI0NVz+rmQu8L6YtpPXhxJ1JVrtBYRf7
8uIghOqwEDIyXGW58V0Il7eUqK+EXQUd4vSP2f+25QpzHeMK0O1Sew28x2KFX+Wu
raoVT3/XUYlYwCfvTLzR/xGDBrazIvd+rOjT2FYZG54HeuPzGAx1VIfgvnb9rC8H
7ZeuzIl4vxEpsg5c3Tskdphv/e8plUK1BKB0qa6uMSJhUcXA7EBP+YjVZk1mdSfN
Ac2f7ygsl/tRikVlONtV0IlRxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org