Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcc92d49-2182-3dea-b7b9-20dc72ce173b.roa
File: bcc92d49-2182-3dea-b7b9-20dc72ce173b.roa (raw, json)
Hash identifier: 56BGwtBh6XGOmm3gJcBet913LqUwQTjy5SDP2wGYcmo=
Subject key identifier: EC:0B:7C:BF:52:8F:63:5E:47:04:6E:C6:B0:80:F2:FF:C1:17:DC:C6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446F90C0EC195DE19186A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcc92d49-2182-3dea-b7b9-20dc72ce173b.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sun 06 Aug 2023 02:53:59 +0000
asID: 136923
IP address blocks: 166.1.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:f9:0c:0e:c1:95:de:19:18:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 6 02:53:59 2023 GMT
Subject: CN=121f40cc-15ed-43e1-b22e-be123c324b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:2c:0d:b5:e1:59:d2:27:15:b1:bb:fc:bd:
1f:00:05:6d:d1:8f:9b:91:8a:d1:09:2b:8e:3e:e5:
96:5e:f0:a9:63:0b:10:8b:4c:81:02:c1:ad:55:7b:
ff:83:e3:f6:67:64:06:5b:b1:c4:4d:ec:c8:02:80:
31:3c:9d:ef:6e:18:dc:93:f4:43:4c:33:0f:ee:96:
8a:f9:5c:70:b9:26:94:c9:d8:19:35:4b:05:74:8e:
5c:6e:e5:d5:16:2b:65:2a:54:ec:be:56:5f:8a:12:
9d:3f:42:b9:72:ac:0a:a5:da:59:69:6d:5b:90:ac:
5f:cc:a3:d9:30:38:8c:c9:48:9d:17:48:7c:ea:cd:
3a:04:b6:4e:1f:29:a3:b9:29:78:a6:6c:3d:6e:50:
66:c5:80:aa:cb:f9:e2:3d:ef:63:25:54:f5:bc:eb:
42:8d:bd:1b:df:a9:31:38:8e:e6:b0:7b:a4:61:11:
a3:59:93:56:11:d7:de:1a:d9:38:c8:94:09:ab:9f:
98:e0:d4:64:0a:ee:da:d5:c5:b5:0d:21:32:e3:96:
c4:9f:c0:9e:2e:44:8e:86:1f:18:84:00:7f:9b:80:
6a:8f:0f:81:2c:27:76:72:76:25:e0:d2:52:8d:90:
81:1d:d0:b6:7e:6a:08:ef:aa:aa:3d:85:72:b7:be:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:7C:BF:52:8F:63:5E:47:04:6E:C6:B0:80:F2:FF:C1:17:DC:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bcc92d49-2182-3dea-b7b9-20dc72ce173b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c4:84:81:65:f7:d8:49:67:cd:2a:50:49:2d:5b:32:08:28:
7a:59:33:30:ec:54:56:81:c2:f2:4a:09:a0:2a:3c:d5:04:50:
c8:ed:01:4e:93:5b:67:39:c8:06:2c:c0:bb:e8:20:2f:55:da:
04:a2:d6:3c:ef:d9:5a:99:d1:af:e9:91:2f:0a:53:b3:e0:51:
94:7c:08:60:15:5e:1c:f0:7f:d2:7c:d4:60:67:30:27:73:16:
28:0a:92:cd:76:dc:c7:58:77:9d:ad:09:16:81:fa:f6:7f:48:
36:48:aa:b3:55:d2:74:46:49:15:6b:ee:cf:bf:ca:c6:2d:81:
68:f2:10:eb:ee:29:b5:b9:c5:62:3b:68:a7:37:30:3b:29:55:
23:ae:d6:33:1f:66:57:29:f1:ee:b5:33:ca:3a:b2:a6:84:2f:
77:cf:20:d2:bb:39:19:70:e2:5e:e3:30:da:92:6b:58:e6:36:
5b:64:6f:fe:8a:44:93:3c:f6:27:13:96:47:f2:87:7e:17:7e:
f7:3f:93:70:7e:61:44:0a:85:80:af:a0:9a:e9:a3:60:43:6c:
34:c6:08:0c:2d:2e:98:36:9b:05:9b:39:a3:54:84:08:d3:aa:
cb:e3:06:c1:81:0d:ae:e5:03:d9:35:6e:5a:d0:3f:00:dd:20:
6b:7c:04:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkRvkMDsGV3hkYaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDUxNTE3MDQ1MloXDTIzMDgwNjAyNTM1OVowLzEtMCsGA1UEAxMk
MTIxZjQwY2MtMTVlZC00M2UxLWIyMmUtYmUxMjNjMzI0YjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKcsDbXhWdInFbG7/L0fAAVt0Y+bkYrRCSuO
PuWWXvCpYwsQi0yBAsGtVXv/g+P2Z2QGW7HETezIAoAxPJ3vbhjck/RDTDMP7paK
+VxwuSaUydgZNUsFdI5cbuXVFitlKlTsvlZfihKdP0K5cqwKpdpZaW1bkKxfzKPZ
MDiMyUidF0h86s06BLZOHymjuSl4pmw9blBmxYCqy/niPe9jJVT1vOtCjb0b36kx
OI7msHukYRGjWZNWEdfeGtk4yJQJq5+Y4NRkCu7a1cW1DSEy45bEn8CeLkSOhh8Y
hAB/m4Bqjw+BLCd2cnYl4NJSjZCBHdC2fmoI76qqPYVyt75BmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwLfL9Sj2NeRwRuxrCA8v/BF9zGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmNjOTJkNDktMjE4Mi0z
ZGVhLWI3YjktMjBkYzcyY2UxNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDEhIFl99hJZ80qUEktWzIIKHpZMzDsVFaBwvJKCaAqPNUEUMjtAU6T
W2c5yAYswLvoIC9V2gSi1jzv2VqZ0a/pkS8KU7PgUZR8CGAVXhzwf9J81GBnMCdz
FigKks123MdYd52tCRaB+vZ/SDZIqrNV0nRGSRVr7s+/ysYtgWjyEOvuKbW5xWI7
aKc3MDspVSOu1jMfZlcp8e61M8o6sqaEL3fPINK7ORlw4l7jMNqSa1jmNltkb/6K
RJM89icTlkfyh34Xfvc/k3B+YUQKhYCvoJrpo2BDbDTGCAwtLpg2mwWbOaNUhAjT
qsvjBsGBDa7lA9k1blrQPwDdIGt8BCE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:44 2023 by rpki-client on console.sobornost.net