Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d6bcafb-b4ec-34d5-ba59-85fdd1c0bf47.roa
File: 3d6bcafb-b4ec-34d5-ba59-85fdd1c0bf47.roa (raw, json)
Hash identifier: jCs1EZYHgutaZZaOtsbdT5HvikusdIDPbYsnNlRabLY=
Subject key identifier: 05:CF:99:CF:EE:1B:45:A4:77:B2:96:AD:26:EA:E8:98:A9:3F:3C:CE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5B94304397CC5582DE080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d6bcafb-b4ec-34d5-ba59-85fdd1c0bf47.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 209.226.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:b9:43:04:39:7c:c5:58:2d:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=af78b638-1512-4224-a5ed-897c247217ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:a3:4f:38:59:ee:77:b0:6f:70:1e:94:1c:
ec:61:95:c5:61:57:63:67:f6:37:6b:42:e3:04:76:
1d:57:27:60:44:7b:51:5c:5c:b4:9a:c8:78:02:e0:
f2:14:f5:05:77:2e:f4:af:b0:32:c5:45:54:61:53:
ad:66:e7:08:4b:b7:d1:f7:a1:97:4b:92:bf:e7:61:
bc:77:05:e6:13:b7:4f:70:93:7d:35:40:cf:6e:af:
ac:29:c5:b4:0c:8b:e8:41:68:1b:83:1f:91:94:a4:
6a:b4:92:0d:2b:9d:6a:61:13:8d:06:fb:37:b0:1f:
03:a4:1a:a0:12:62:10:c1:91:fe:94:b8:5a:16:55:
5e:2e:f7:22:ab:7c:0e:f7:e2:c7:a3:cf:dd:24:82:
e7:49:cf:19:d6:a4:6e:02:c3:8f:73:6c:58:28:37:
9b:32:da:b1:d6:51:63:6e:61:62:59:4c:b1:f7:f5:
15:8c:c8:3e:4e:d6:83:0f:0b:94:ad:8d:1c:c5:b5:
ef:9b:7a:47:b4:d9:5b:f8:79:30:f1:e2:70:0d:ad:
c6:9b:c5:7e:20:99:d9:02:ef:ca:c8:13:fa:0b:60:
86:7c:c6:78:14:c1:8a:a1:9b:4e:10:aa:5b:4d:e6:
d4:22:6f:24:49:31:0a:05:1a:be:42:54:56:b3:3e:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CF:99:CF:EE:1B:45:A4:77:B2:96:AD:26:EA:E8:98:A9:3F:3C:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d6bcafb-b4ec-34d5-ba59-85fdd1c0bf47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:fb:d8:42:7a:a3:59:a9:71:57:96:32:09:e0:da:13:e6:98:
4f:a3:a4:7b:1e:3a:bb:06:5c:3f:31:17:a5:15:46:de:0c:33:
94:11:aa:9b:d7:02:14:29:e3:dd:be:2b:6f:46:4f:28:fc:b3:
2d:0f:d5:9a:4d:4a:32:35:69:f1:27:7a:08:af:e8:62:09:ca:
8e:0b:b2:a7:43:7d:23:01:f7:bf:68:6b:83:5a:24:9f:20:d7:
fe:59:32:f1:19:61:61:37:64:d4:fa:91:ac:10:3d:81:e0:34:
bc:c7:82:e9:25:60:d1:41:3b:7c:3d:18:99:75:b7:89:1f:d8:
10:07:1d:69:87:b2:4d:f4:48:e3:34:6c:e5:4d:20:b9:bc:f7:
a5:df:f4:cc:38:c2:ad:8c:29:16:85:cb:d0:b1:5a:36:10:8e:
f4:51:ce:14:61:17:3b:f0:32:0f:ab:a3:29:c9:de:22:0e:55:
70:49:74:c6:8d:7f:9a:3b:00:ab:58:7a:53:d3:35:93:3c:04:
e8:6a:9b:08:8b:f1:3e:e0:8c:82:42:2f:70:a9:60:35:e0:a5:
54:e7:73:87:e1:6e:0f:41:8d:70:92:c9:83:68:79:7a:40:e7:
28:d9:d5:59:99:32:69:87:a8:c3:8a:6a:8c:aa:b8:12:56:dd:
87:06:1d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5blDBDl8xVgt4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
YWY3OGI2MzgtMTUxMi00MjI0LWE1ZWQtODk3YzI0NzIxN2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB2jTzhZ7newb3AelBzsYZXFYVdjZ/Y3a0Lj
BHYdVydgRHtRXFy0msh4AuDyFPUFdy70r7AyxUVUYVOtZucIS7fR96GXS5K/52G8
dwXmE7dPcJN9NUDPbq+sKcW0DIvoQWgbgx+RlKRqtJINK51qYRONBvs3sB8DpBqg
EmIQwZH+lLhaFlVeLvciq3wO9+LHo8/dJILnSc8Z1qRuAsOPc2xYKDebMtqx1lFj
bmFiWUyx9/UVjMg+TtaDDwuUrY0cxbXvm3pHtNlb+Hkw8eJwDa3Gm8V+IJnZAu/K
yBP6C2CGfMZ4FMGKoZtOEKpbTebUIm8kSTEKBRq+QlRWsz47kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXPmc/uG0Wkd7KWrSbq6JipPzzOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2Q2YmNhZmItYjRlYy0z
NGQ1LWJhNTktODVmZGQxYzBiZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFH72EJ6o1mpcVeWMgng2hPmmE+jpHseOrsGXD8xF6UVRt4MM5QRqpvX
AhQp492+K29GTyj8sy0P1ZpNSjI1afEnegiv6GIJyo4LsqdDfSMB979oa4NaJJ8g
1/5ZMvEZYWE3ZNT6kawQPYHgNLzHguklYNFBO3w9GJl1t4kf2BAHHWmHsk30SOM0
bOVNILm896Xf9Mw4wq2MKRaFy9CxWjYQjvRRzhRhFzvwMg+roynJ3iIOVXBJdMaN
f5o7AKtYelPTNZM8BOhqmwiL8T7gjIJCL3CpYDXgpVTnc4fhbg9BjXCSyYNoeXpA
5yjZ1VmZMmmHqMOKaoyquBJW3YcGHQs=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org