Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33fc1b21-9b08-3dad-9fc8-ca30602e6d6f.roa
File: 33fc1b21-9b08-3dad-9fc8-ca30602e6d6f.roa (raw, json)
Hash identifier: Cr5dQaNf8vRDgtHzTWDnzyRLomUSqv4o10+7nvLROlE=
Subject key identifier: E1:5E:BD:22:55:DC:35:AE:98:B7:C2:EF:64:C4:34:36:38:01:49:EA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE411F1389DD1A0DC46EC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33fc1b21-9b08-3dad-9fc8-ca30602e6d6f.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 12132
IP address blocks: 67.70.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:11:f1:38:9d:d1:a0:dc:46:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=157a6035-c14d-408c-803a-97eb7baaa003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:d9:c5:9e:ca:78:1a:18:12:25:79:28:37:
71:05:7d:c3:df:94:57:86:8c:19:99:72:06:c1:92:
1b:9a:5d:23:b7:cb:d3:7f:22:21:91:66:97:22:74:
ce:44:5c:9c:d4:2c:06:c4:7c:88:a7:3f:0a:43:fc:
2a:39:ef:86:c0:90:bb:dc:c6:b3:88:de:be:02:74:
ea:cf:2e:cb:4d:a8:85:1c:1e:86:ad:82:56:23:67:
71:b3:b8:a5:67:f4:58:e0:13:fe:f3:bb:29:c0:61:
11:00:55:e3:2b:21:6c:6b:5c:d5:4c:58:8b:1e:29:
59:8a:89:84:6f:33:84:ae:47:b9:47:b4:14:52:b2:
19:3e:5a:fb:ff:9a:f3:77:cf:02:88:08:41:be:dd:
a8:3a:a4:d7:86:eb:21:13:c8:bd:87:15:ea:31:5a:
21:f4:a9:ad:34:10:d1:9e:bc:d8:d8:c3:00:9c:aa:
d6:78:1f:6f:4e:f1:c9:fb:ac:74:f5:4b:a0:fc:e9:
4e:56:a8:97:da:c2:0d:d5:7d:7e:8a:97:b7:92:71:
59:87:0d:29:9c:43:51:bc:87:0f:f0:60:e1:f8:e3:
08:b5:36:bc:a6:1c:28:c9:fa:3e:de:02:e6:21:25:
34:f6:e5:75:ed:ba:63:38:ab:13:78:72:c7:8b:4a:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5E:BD:22:55:DC:35:AE:98:B7:C2:EF:64:C4:34:36:38:01:49:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/33fc1b21-9b08-3dad-9fc8-ca30602e6d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.70.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:99:75:27:10:ad:7f:bd:ea:fd:44:d0:f5:df:25:b0:9a:00:
b4:b8:44:2a:b9:d1:d3:bb:aa:18:ad:82:76:0b:f2:c0:65:1c:
2f:ec:1f:60:f2:9a:b6:fe:7c:c6:32:16:9b:35:b7:94:52:be:
fb:fa:1c:e8:23:b1:d1:59:bb:44:b4:7a:25:1d:ee:8b:de:e8:
de:eb:54:33:97:fb:14:4a:a4:db:85:f7:62:82:7a:07:36:5d:
1c:74:df:2e:11:18:41:a0:ca:70:d8:91:07:42:eb:ff:f0:2c:
f6:9a:92:9f:f8:89:dd:d8:b2:a0:0f:fa:ef:40:d3:03:df:e2:
48:4b:fb:cd:ff:62:eb:83:8a:ad:96:67:10:34:e8:79:c6:6d:
e9:d4:b4:26:66:54:82:e9:bd:de:29:28:51:b7:c6:5e:3a:16:
70:f7:6b:00:b1:bb:7f:7b:da:19:21:ae:40:7b:e1:d7:31:c4:
72:5b:4f:cc:29:92:42:6c:8c:7c:dc:32:6c:cf:92:0a:1a:68:
0a:8f:cc:09:6a:42:82:80:0a:cc:f5:58:46:3d:68:95:40:54:
b0:56:b5:9d:3d:b4:00:49:d5:ad:15:9a:dd:aa:83:ee:49:a2:
9d:fb:b0:28:cb:44:46:4c:e6:09:f9:bd:90:fc:11:82:ac:6f:
45:d4:46:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5BHxOJ3RoNxG7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MTU3YTYwMzUtYzE0ZC00MDhjLTgwM2EtOTdlYjdiYWFhMDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2TZxZ7KeBoYEiV5KDdxBX3D35RXhowZmXIG
wZIbml0jt8vTfyIhkWaXInTORFyc1CwGxHyIpz8KQ/wqOe+GwJC73MaziN6+AnTq
zy7LTaiFHB6GrYJWI2dxs7ilZ/RY4BP+87spwGERAFXjKyFsa1zVTFiLHilZiomE
bzOErke5R7QUUrIZPlr7/5rzd88CiAhBvt2oOqTXhushE8i9hxXqMVoh9KmtNBDR
nrzY2MMAnKrWeB9vTvHJ+6x09Uug/OlOVqiX2sIN1X1+ipe3knFZhw0pnENRvIcP
8GDh+OMItTa8phwoyfo+3gLmISU09uV17bpjOKsTeHLHi0pLTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFevSJV3DWumLfC72TENDY4AUnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzNmYzFiMjEtOWIwOC0z
ZGFkLTlmYzgtY2EzMDYwMmU2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0b2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSZdScQrX+96v1E0PXfJbCaALS4RCq50dO7qhitgnYL8sBlHC/sH2Dy
mrb+fMYyFps1t5RSvvv6HOgjsdFZu0S0eiUd7ove6N7rVDOX+xRKpNuF92KCegc2
XRx03y4RGEGgynDYkQdC6//wLPaakp/4id3YsqAP+u9A0wPf4khL+83/YuuDiq2W
ZxA06HnGbenUtCZmVILpvd4pKFG3xl46FnD3awCxu3972hkhrkB74dcxxHJbT8wp
kkJsjHzcMmzPkgoaaAqPzAlqQoKACsz1WEY9aJVAVLBWtZ09tABJ1a0Vmt2qg+5J
op37sCjLREZM5gn5vZD8EYKsb0XURns=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org