Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/526aa2f3-b216-3f2b-94e2-9d1f7c65f6a2.roa
File: 526aa2f3-b216-3f2b-94e2-9d1f7c65f6a2.roa (raw, json)
Hash identifier: 2PDQf5v03aK+vDkU/EQzwf99Gl3+V3lIcjyuuwFvz8Q=
Subject key identifier: 75:B2:49:F6:72:8C:55:0B:9F:88:62:CB:35:5E:40:D8:DF:9B:52:B1
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285841E42AFFEBD95230CE84BCE7C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/526aa2f3-b216-3f2b-94e2-9d1f7c65f6a2.roa
Signing time: Mon 15 May 2023 16:08:10 +0000
ROA not before: Mon 15 May 2023 16:08:10 +0000
ROA not after: Mon 12 Jun 2023 10:31:30 +0000
asID: 16509
IP address blocks: 64.69.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:2a:ff:eb:d9:52:30:ce:84:bc:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: May 15 16:08:10 2023 GMT
Not After : Jun 12 10:31:30 2023 GMT
Subject: CN=30359be2-e262-4bcd-b3f2-8af93e863e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:e8:0c:bf:05:55:44:b3:43:90:ba:0e:05:
fb:4e:6f:d1:ff:cf:c4:dd:01:4f:a3:8c:56:fc:a3:
ed:c6:bb:12:86:66:42:76:df:5b:11:b6:d6:c9:32:
1e:21:ed:b0:07:d6:63:ae:e2:c7:8f:a8:19:f3:ff:
7c:c1:0c:30:d1:f9:06:17:bb:f1:9a:de:b2:88:c6:
4c:17:ed:24:6a:b7:01:15:51:cd:2f:02:09:c5:61:
4f:cc:10:da:de:58:33:86:05:be:fe:5a:00:c8:2e:
05:46:ba:e4:0d:ad:70:ff:82:c6:b2:68:00:85:e2:
40:43:a3:19:31:00:c1:8e:79:bf:ee:1f:9d:7e:92:
86:e8:ca:ed:58:03:fc:4e:4c:fa:89:7b:aa:03:b8:
17:73:72:56:87:99:19:7d:62:e2:3a:7c:05:fd:fc:
44:f2:95:db:c4:05:52:ac:a8:82:c6:85:f2:75:37:
10:45:44:9b:66:2c:7d:91:a6:46:93:f5:b8:a8:f4:
8e:e3:e3:a9:66:c2:48:8d:83:23:e0:68:6a:cc:5c:
21:3e:e7:5a:95:13:dd:76:d6:86:4e:66:cb:5e:72:
42:c4:91:2d:c3:17:af:98:7b:25:ef:a7:26:4c:5f:
32:69:b4:11:2b:17:d1:82:08:ba:09:c4:7a:96:62:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:49:F6:72:8C:55:0B:9F:88:62:CB:35:5E:40:D8:DF:9B:52:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/526aa2f3-b216-3f2b-94e2-9d1f7c65f6a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
64.69.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:23:c3:6a:d1:04:7d:19:a5:2d:85:e9:59:c7:e8:b8:b1:4a:
32:17:96:23:5b:81:b1:d1:d6:a6:fb:d3:a0:f4:8f:81:9f:e0:
fd:43:85:d7:1e:77:90:b4:ad:6a:c4:57:04:89:81:bf:c1:4c:
3a:a1:fc:e4:f5:35:a0:93:b0:2c:f2:e3:9b:85:6f:18:bd:cf:
fd:e6:90:55:34:21:4c:d4:0b:30:d4:4c:57:4f:b5:15:ed:c4:
21:40:f0:57:e3:fe:fa:04:3a:53:be:f9:5e:b6:d6:db:4e:4b:
48:2c:03:ec:f0:a7:1a:b6:66:d7:68:76:8d:7c:d4:6a:e1:d3:
9b:a3:65:fa:4b:f8:ea:de:ff:8f:18:f1:6e:fe:32:0b:23:eb:
69:08:da:19:dd:cf:e9:64:42:06:03:b5:e5:dc:86:4c:9d:b5:
9d:4f:5f:81:21:f9:14:f6:e7:a1:f8:a6:ca:81:b0:0c:a6:5a:
9a:8b:76:e2:43:89:76:0d:c7:5d:2e:ad:4d:a4:3e:da:d1:b1:
4e:b3:fb:30:31:cb:d0:68:ec:9e:84:b4:dc:af:32:5b:87:56:
ed:ed:1b:48:20:12:75:9b:1d:e0:1f:68:5c:0e:36:bd:a6:1b:
94:22:78:7b:0f:02:0c:d6:4e:53:56:2f:85:a5:0a:cd:3a:e5:
ec:ea:64:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKv/r2VIwzoS858AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYxMjEwMzEzMFowLzEtMCsGA1UEAxMk
MzAzNTliZTItZTI2Mi00YmNkLWIzZjItOGFmOTNlODYzZTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLoDL8FVUSzQ5C6DgX7Tm/R/8/E3QFPo4xW
/KPtxrsShmZCdt9bEbbWyTIeIe2wB9ZjruLHj6gZ8/98wQww0fkGF7vxmt6yiMZM
F+0karcBFVHNLwIJxWFPzBDa3lgzhgW+/loAyC4FRrrkDa1w/4LGsmgAheJAQ6MZ
MQDBjnm/7h+dfpKG6MrtWAP8Tkz6iXuqA7gXc3JWh5kZfWLiOnwF/fxE8pXbxAVS
rKiCxoXydTcQRUSbZix9kaZGk/W4qPSO4+OpZsJIjYMj4GhqzFwhPudalRPddtaG
TmbLXnJCxJEtwxevmHsl76cmTF8yabQRKxfRggi6CcR6lmLZtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWySfZyjFULn4hiyzVeQNjfm1KxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTI2YWEyZjMtYjIxNi0z
ZjJiLTk0ZTItOWQxZjdjNjVmNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEXfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMjw2rRBH0ZpS2F6VnH6LixSjIXliNbgbHR1qb706D0j4Gf4P1Dhdce
d5C0rWrEVwSJgb/BTDqh/OT1NaCTsCzy45uFbxi9z/3mkFU0IUzUCzDUTFdPtRXt
xCFA8Ffj/voEOlO++V621ttOS0gsA+zwpxq2Ztdodo181Grh05ujZfpL+Ore/48Y
8W7+Mgsj62kI2hndz+lkQgYDteXchkydtZ1PX4Eh+RT256H4psqBsAymWpqLduJD
iXYNx10urU2kPtrRsU6z+zAxy9Bo7J6EtNyvMluHVu3tG0ggEnWbHeAfaFwONr2m
G5QieHsPAgzWTlNWL4WlCs065ezqZHQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:56 2024 by rpki-client on console-ams.rpki-client.org