Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f7b4edb-b74a-30dc-94cb-6aad6d85dc52.roa
File: 0f7b4edb-b74a-30dc-94cb-6aad6d85dc52.roa (raw, json)
Hash identifier: X7MwF/udPLFxaEepJWB3ApQ54AJqQ86XgLaUZ4XstoE=
Subject key identifier: CD:12:2D:9B:96:45:59:1D:72:18:F3:20:ED:F6:24:B8:AD:08:3B:81
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313C72113B8EA5989056180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f7b4edb-b74a-30dc-94cb-6aad6d85dc52.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 3848
IP address blocks: 70.28.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:c7:21:13:b8:ea:59:89:05:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=a571b459-5f3a-43e1-9769-c795bfaf3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:09:7e:46:0c:47:08:4a:01:e1:f4:e1:fe:
bc:26:96:6f:36:21:f2:18:a0:fd:7c:3b:2c:b0:f1:
93:21:ef:e9:3d:80:dc:a6:cb:62:11:0e:f1:60:c6:
7b:f3:34:95:c9:65:e8:b1:af:51:61:04:15:ef:71:
a0:ce:b9:5e:aa:ee:d9:2a:05:49:dc:3d:a8:70:06:
86:b6:aa:f8:00:e7:d7:91:00:fd:2b:83:9c:a5:2a:
71:9c:a5:24:32:cc:ef:80:8d:10:ee:5c:b8:71:8e:
2e:a5:f5:04:71:e0:92:76:5c:71:14:6a:6f:fe:6d:
7b:04:3a:64:45:f4:51:73:18:0a:40:33:25:c9:dc:
5d:40:58:6c:08:ca:d7:03:1a:fb:f3:9c:42:c1:7e:
55:68:24:cd:c7:c4:a0:ed:63:57:4f:3f:77:d2:23:
92:30:67:29:29:8b:3e:a2:b3:4f:da:87:b0:51:bc:
2b:ad:15:0a:67:aa:e6:b1:45:16:cb:37:8c:1e:23:
e5:d2:8e:6f:6e:5c:76:e9:87:13:68:df:29:15:05:
35:a7:1d:35:85:02:c6:f0:6c:17:7c:b4:19:d0:7b:
d1:d5:e4:cc:db:0c:c2:ff:ec:fb:76:f1:4d:a3:8d:
6c:f2:99:fe:98:23:c1:ba:83:23:ce:f0:1d:dc:c8:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:2D:9B:96:45:59:1D:72:18:F3:20:ED:F6:24:B8:AD:08:3B:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0f7b4edb-b74a-30dc-94cb-6aad6d85dc52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3f:0a:48:dd:7b:84:63:31:1e:79:95:4b:ba:34:db:2c:f1:
ab:16:5c:f5:0f:00:91:8f:82:37:fc:11:a0:a2:86:1f:a3:b5:
25:40:43:e1:d1:8c:97:e7:b4:64:0a:61:93:7d:eb:d9:56:47:
ae:8c:db:61:26:78:2d:ad:06:cb:f6:c7:e5:1c:c9:fd:bb:1f:
b3:3f:ef:3c:a8:3f:c1:23:c3:9a:51:40:c9:5d:f4:e3:24:98:
e7:4d:b2:bc:63:2c:3a:74:63:7f:be:17:b2:bd:5b:3e:2b:52:
de:22:d1:9e:38:fb:7c:6a:4a:b9:7e:5c:8c:62:f3:ff:d0:b4:
10:b0:59:b0:f8:61:b7:74:df:dd:7f:0b:d3:70:2b:a1:a1:92:
52:94:17:a9:d2:59:a3:f3:fd:e6:4e:ce:7b:7b:40:35:9b:18:
8f:d6:cf:4a:57:0b:38:25:29:99:6d:24:86:82:80:a9:2a:e0:
94:b7:bd:2e:97:ea:25:d0:f1:3b:8e:c5:85:02:ba:a9:9d:27:
8d:77:50:bc:a9:8a:16:11:bc:5d:34:3c:b9:a4:7a:09:5b:6b:
18:84:f1:27:bc:bd:c9:76:33:41:48:a1:a1:2b:73:64:f5:1c:
74:35:5e:0c:2c:8f:8c:35:e4:98:db:2d:22:c9:89:dc:9d:9c:
bc:09:b0:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTE8chE7jqWYkFYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YTU3MWI0NTktNWYzYS00M2UxLTk3NjktYzc5NWJmYWYzZmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqEJfkYMRwhKAeH04f68JpZvNiHyGKD9fDss
sPGTIe/pPYDcpstiEQ7xYMZ78zSVyWXosa9RYQQV73Ggzrlequ7ZKgVJ3D2ocAaG
tqr4AOfXkQD9K4OcpSpxnKUkMszvgI0Q7ly4cY4upfUEceCSdlxxFGpv/m17BDpk
RfRRcxgKQDMlydxdQFhsCMrXAxr785xCwX5VaCTNx8Sg7WNXTz930iOSMGcpKYs+
orNP2oewUbwrrRUKZ6rmsUUWyzeMHiPl0o5vblx26YcTaN8pFQU1px01hQLG8GwX
fLQZ0HvR1eTM2wzC/+z7dvFNo41s8pn+mCPBuoMjzvAd3MiS5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0SLZuWRVkdchjzIO32JLitCDuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGY3YjRlZGItYjc0YS0z
MGRjLTk0Y2ItNmFhZDZkODVkYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhx7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg/Ckjde4RjMR55lUu6NNss8asWXPUPAJGPgjf8EaCihh+jtSVAQ+HR
jJfntGQKYZN969lWR66M22EmeC2tBsv2x+Ucyf27H7M/7zyoP8Ejw5pRQMld9OMk
mOdNsrxjLDp0Y3++F7K9Wz4rUt4i0Z44+3xqSrl+XIxi8//QtBCwWbD4Ybd0391/
C9NwK6GhklKUF6nSWaPz/eZOznt7QDWbGI/Wz0pXCzglKZltJIaCgKkq4JS3vS6X
6iXQ8TuOxYUCuqmdJ413ULypihYRvF00PLmkeglbaxiE8Se8vcl2M0FIoaErc2T1
HHQ1Xgwsj4w15JjbLSLJidydnLwJsIo=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org