Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0386465-0a4a-36da-94f0-ce79f0d755ee.roa
File: f0386465-0a4a-36da-94f0-ce79f0d755ee.roa (raw, json)
Hash identifier: fAv78ftPn1C0/BSj/lSR2qJ33Bjp5Ms8pC0UCMHRThM=
Subject key identifier: 03:13:F9:C7:73:D7:44:B4:D0:AE:18:BD:22:AC:ED:9C:5C:B7:A3:CC
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285841E42B0093E609CB4E970D21C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0386465-0a4a-36da-94f0-ce79f0d755ee.roa
Signing time: Mon 15 May 2023 16:08:10 +0000
ROA not before: Mon 15 May 2023 16:08:10 +0000
ROA not after: Mon 12 Jun 2023 10:17:51 +0000
asID: 16509
IP address blocks: 198.160.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:2b:00:93:e6:09:cb:4e:97:0d:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: May 15 16:08:10 2023 GMT
Not After : Jun 12 10:17:51 2023 GMT
Subject: CN=211f4528-e038-4500-9e7c-e267b939966c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:7a:35:ba:4f:3c:e4:02:d6:ca:d3:f6:6c:
87:ea:3c:91:ac:c1:c5:37:57:b4:8b:68:55:e5:6c:
32:e9:20:f6:aa:f6:62:ea:19:7f:fd:5b:9e:54:17:
ae:ed:d3:03:b8:b5:e6:26:8d:bd:31:20:74:21:c2:
a4:12:89:d7:10:3f:c3:00:1b:46:80:26:df:0c:f3:
aa:42:f0:ca:f4:cb:f6:b1:bb:2a:c1:23:f2:1c:79:
28:c0:ce:39:2d:53:10:2c:32:0d:f0:51:c0:ab:06:
a9:d4:3f:7f:fa:10:f3:e9:f7:82:a2:c4:db:82:11:
f3:85:bd:e7:12:17:75:3e:c8:a8:b1:e2:05:d8:d1:
71:e3:e4:bf:b0:a4:f2:dd:00:76:cb:6e:76:16:e2:
28:35:49:da:37:ed:ec:ee:51:df:bc:16:b4:f6:b2:
ab:0b:76:c4:c6:ba:37:b3:c0:39:17:ca:8f:c3:ab:
3b:4b:08:61:56:a6:27:88:48:30:7d:d6:fb:f8:29:
59:af:92:7e:c0:0b:27:15:92:70:21:fb:b5:b4:46:
4f:42:24:d0:63:03:f6:cc:95:30:ec:5b:3d:52:46:
c6:26:98:e4:77:ae:6c:2e:57:9d:f1:9a:13:6d:5d:
f7:50:d6:1e:f6:77:ee:9b:36:8b:ee:b2:04:94:cb:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:F9:C7:73:D7:44:B4:D0:AE:18:BD:22:AC:ED:9C:5C:B7:A3:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0386465-0a4a-36da-94f0-ce79f0d755ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b4:36:6f:a1:18:36:e4:cf:59:cb:f5:75:9b:8b:c0:71:55:
46:4f:51:ff:c8:c7:e2:57:89:e8:f7:9b:ad:15:28:96:18:ac:
57:1e:f9:9b:95:a5:e4:9e:4f:56:32:61:ec:f3:8d:26:6d:fb:
a5:17:ea:17:9c:8f:d9:8a:a9:8f:bc:ac:9a:96:e4:f3:85:1a:
a2:99:6a:d9:1b:c1:d9:88:56:04:3e:6f:46:49:00:0f:d4:c6:
3e:70:6b:c2:e3:4a:be:e4:06:74:bc:8c:ff:8c:ef:6a:dc:08:
0c:44:e6:3b:06:29:15:ac:4f:a1:78:2e:b9:8c:a5:24:75:db:
73:c0:56:a5:0a:19:4a:92:70:de:68:96:cd:13:83:fc:d7:bc:
8d:b2:bd:da:aa:3f:2e:96:c2:aa:7b:7c:1e:2b:c0:c1:99:a5:
cc:4d:95:60:eb:30:4a:12:97:66:0a:93:9b:50:99:97:90:fc:
12:6a:68:fb:27:5b:dd:9b:d2:12:e2:6a:55:f0:42:13:ad:37:
0d:f0:26:69:83:50:a4:c2:f1:40:3f:6c:9a:fe:a3:ac:ec:a4:
51:f1:89:c8:f7:b1:fc:58:6c:87:fc:bf:e4:15:90:e6:3d:d8:
3e:a5:e6:65:32:de:14:a8:4d:16:81:a5:e1:cc:b8:60:dc:50:
65:7b:95:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKwCT5gnLTpcNIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYxMjEwMTc1MVowLzEtMCsGA1UEAxMk
MjExZjQ1MjgtZTAzOC00NTAwLTllN2MtZTI2N2I5Mzk5NjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC56NbpPPOQC1srT9myH6jyRrMHFN1e0i2hV
5Wwy6SD2qvZi6hl//VueVBeu7dMDuLXmJo29MSB0IcKkEonXED/DABtGgCbfDPOq
QvDK9Mv2sbsqwSPyHHkowM45LVMQLDIN8FHAqwap1D9/+hDz6feCosTbghHzhb3n
Ehd1PsioseIF2NFx4+S/sKTy3QB2y252FuIoNUnaN+3s7lHfvBa09rKrC3bExro3
s8A5F8qPw6s7SwhhVqYniEgwfdb7+ClZr5J+wAsnFZJwIfu1tEZPQiTQYwP2zJUw
7Fs9UkbGJpjkd65sLled8ZoTbV33UNYe9nfumzaL7rIElMsp8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMT+cdz10S00K4YvSKs7Zxct6PMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvZjAzODY0NjUtMGE0YS0z
NmRhLTk0ZjAtY2U3OWYwZDc1NWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqCXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD20Nm+hGDbkz1nL9XWbi8BxVUZPUf/Ix+JXiej3m60VKJYYrFce+ZuV
peSeT1YyYezzjSZt+6UX6hecj9mKqY+8rJqW5POFGqKZatkbwdmIVgQ+b0ZJAA/U
xj5wa8LjSr7kBnS8jP+M72rcCAxE5jsGKRWsT6F4LrmMpSR123PAVqUKGUqScN5o
ls0Tg/zXvI2yvdqqPy6Wwqp7fB4rwMGZpcxNlWDrMEoSl2YKk5tQmZeQ/BJqaPsn
W92b0hLialXwQhOtNw3wJmmDUKTC8UA/bJr+o6zspFHxicj3sfxYbIf8v+QVkOY9
2D6l5mUy3hSoTRaBpeHMuGDcUGV7lck=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:44 2025 by rpki-client