Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/974ec953-ed66-3922-8d66-4168773b266a.roa
File: 974ec953-ed66-3922-8d66-4168773b266a.roa (raw, json)
Hash identifier: tm7hw5WN4ZcyWTtbmfrgAWoJlSdrbmoJAtpD8lum6W0=
Subject key identifier: DA:B6:C8:78:CD:00:6C:4A:F9:D7:A8:54:F1:58:DA:20:E3:DE:53:CB
Certificate issuer: /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial: 010D0C9F43285843362E47D87794DD5F8F468340
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/974ec953-ed66-3922-8d66-4168773b266a.roa
Signing time: Wed 13 Sep 2023 17:59:06 +0000
ROA not before: Wed 13 Sep 2023 17:59:06 +0000
ROA not after: Tue 12 Dec 2023 18:59:06 +0000
asID: 8075
IP address blocks: 208.103.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:36:2e:47:d8:77:94:dd:5f:8f:46:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Validity
Not Before: Sep 13 17:59:06 2023 GMT
Not After : Dec 12 18:59:06 2023 GMT
Subject: CN=d7387157-9d13-4d67-b200-eaf903e3dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:b1:1d:e3:49:1c:12:9a:ba:19:eb:80:92:
35:82:5e:50:8b:a5:d7:8a:20:a5:a6:85:2b:05:3d:
ce:52:9d:f1:68:a6:a3:7c:56:fb:8f:2f:a3:d8:3c:
ed:7a:37:56:34:61:1f:0d:c7:2e:1d:e6:79:1e:f0:
dd:50:90:b4:f6:99:35:7c:8c:84:f4:71:e0:e9:96:
b1:cb:9d:36:a8:e9:36:78:ad:93:8a:f5:79:84:60:
4c:fd:52:94:ee:fd:19:78:c7:cf:d0:1d:7b:09:a1:
dc:1b:82:d5:be:47:53:22:b2:7d:ac:a9:62:c0:38:
e7:fa:43:60:3a:64:13:25:09:4f:93:89:df:64:7a:
90:7a:38:ff:1d:cb:9f:5b:c3:f7:81:4d:ff:48:5e:
d4:74:59:e0:46:dc:27:c3:24:02:e7:dd:30:0e:5b:
ee:3e:b4:4c:f7:c2:bb:ec:0e:3a:17:d0:cf:90:b5:
77:b6:69:88:50:4e:64:57:ef:d1:8e:a5:3f:83:5b:
b6:6f:1e:c4:3c:57:72:96:81:b7:71:84:8e:75:ad:
49:88:c0:bb:36:b6:3f:19:38:a3:34:a1:91:6f:e6:
a3:a0:64:44:2a:fe:95:77:c3:69:38:3b:da:2d:26:
c6:73:60:c9:02:7a:8b:3d:6f:f1:f1:90:cb:9b:22:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:C8:78:CD:00:6C:4A:F9:D7:A8:54:F1:58:DA:20:E3:DE:53:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/974ec953-ed66-3922-8d66-4168773b266a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
X509v3 Authority Key Identifier:
keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:f0:f3:50:64:27:56:42:4b:07:a0:40:89:3a:0e:9f:86:48:
6a:d4:81:43:8f:65:44:e9:71:e7:8e:39:6d:05:b6:8d:74:28:
ef:40:f2:31:66:a7:75:bf:89:9c:11:30:d5:0a:90:12:61:1d:
14:99:b2:c5:6f:4b:94:cc:6f:95:53:d6:21:f8:42:25:26:14:
cf:e4:3c:b7:b5:41:8e:54:5a:71:d2:79:36:12:9e:4e:09:54:
70:20:f0:88:f9:83:3f:f5:f8:7b:36:f5:9e:86:32:f7:b2:34:
46:28:db:00:a7:b3:18:2b:51:49:90:a9:66:d1:4a:67:c4:7a:
09:3e:55:81:5a:1b:a2:03:db:fe:73:eb:b8:66:31:97:ef:d2:
7f:6d:32:f3:98:21:1e:9f:eb:c0:4f:c9:b8:2e:fd:71:b7:92:
ac:1c:66:5e:35:30:3f:cd:bd:20:77:ff:1b:53:6a:1d:52:34:
90:b6:7e:b1:da:5f:f6:15:71:63:d7:e6:fe:68:3b:5a:f4:1f:
10:06:df:53:e0:d9:bc:f4:1d:5d:f5:7d:70:d7:4f:02:e3:89:
5b:dd:70:96:0c:bd:34:55:f5:be:38:84:cc:e5:47:bd:e2:bc:
4e:69:05:bf:ec:33:ba:7e:5d:bf:01:e0:8d:25:99:c7:10:95:
86:07:cd:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEM2LkfYd5TdX49Gg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBmZDMzNzgtNGJjMy00MjE2LTk0ZjctOTBjN2VmYjQ3
ZDgwMB4XDTIzMDkxMzE3NTkwNloXDTIzMTIxMjE4NTkwNlowLzEtMCsGA1UEAxMk
ZDczODcxNTctOWQxMy00ZDY3LWIyMDAtZWFmOTAzZTNkYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3qxHeNJHBKauhnrgJI1gl5Qi6XXiiClpoUr
BT3OUp3xaKajfFb7jy+j2DztejdWNGEfDccuHeZ5HvDdUJC09pk1fIyE9HHg6Zax
y502qOk2eK2TivV5hGBM/VKU7v0ZeMfP0B17CaHcG4LVvkdTIrJ9rKliwDjn+kNg
OmQTJQlPk4nfZHqQejj/HcufW8P3gU3/SF7UdFngRtwnwyQC590wDlvuPrRM98K7
7A46F9DPkLV3tmmIUE5kV+/RjqU/g1u2bx7EPFdyloG3cYSOda1JiMC7NrY/GTij
NKGRb+ajoGREKv6Vd8NpODvaLSbGc2DJAnqLPW/x8ZDLmyKUtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNq2yHjNAGxK+deoVPFY2iDj3lPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMGZk
MzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZiNDdkODAvOTc0ZWM5NTMtZWQ2Ni0z
OTIyLThkNjYtNDE2ODc3M2IyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDBmZDMzNzgtNGJjMy00MjE2LTk0
ZjctOTBjN2VmYjQ3ZDgwLzAwZmQzMzc4LTRiYzMtNDIxNi05NGY3LTkwYzdlZmI0
N2Q4MC5jcmwwHwYDVR0jBBgwFoAUTemfyYN+g1YTOa+RlpqRNb0IIk8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3
ZWZiNDdkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDw81BkJ1ZCSwegQIk6Dp+GSGrUgUOPZUTpceeOOW0Fto10KO9A8jFm
p3W/iZwRMNUKkBJhHRSZssVvS5TMb5VT1iH4QiUmFM/kPLe1QY5UWnHSeTYSnk4J
VHAg8Ij5gz/1+Hs29Z6GMveyNEYo2wCnsxgrUUmQqWbRSmfEegk+VYFaG6ID2/5z
67hmMZfv0n9tMvOYIR6f68BPybgu/XG3kqwcZl41MD/NvSB3/xtTah1SNJC2frHa
X/YVcWPX5v5oO1r0HxAG31Pg2bz0HV31fXDXTwLjiVvdcJYMvTRV9b44hMzlR73i
vE5pBb/sM7p+Xb8B4I0lmccQlYYHzcE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:53 2023 by rpki-client on console.sobornost.net