Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4407c123-0491-3448-a350-d5000f51f616.roa
File: 4407c123-0491-3448-a350-d5000f51f616.roa (raw, json)
Hash identifier: D2nQnoeoKJUAhY1YmaqivAAz0YnMKfdqRaeN8wvor1g=
Subject key identifier: 6C:5E:5D:2A:4B:F0:A5:1A:C0:36:FF:CC:F6:46:76:2A:64:AA:C8:40
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315CFA9145BC3381B07F400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4407c123-0491-3448-a350-d5000f51f616.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 207.164.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:cf:a9:14:5b:c3:38:1b:07:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=90963f8e-eb3b-421f-adec-0b6181823b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c6:4e:31:87:26:00:e1:e3:26:c3:8c:18:fd:
13:14:8b:40:bb:50:ab:29:23:b0:1f:e5:1c:6a:bf:
0c:5b:8b:80:d8:1a:55:a6:bb:ed:6d:f5:0a:aa:fc:
57:18:a1:8c:c9:d6:65:d1:20:d8:58:53:e6:64:65:
f8:fb:76:c5:55:a0:88:13:2a:06:1d:a2:c7:48:6c:
92:c4:50:aa:86:22:bb:89:e2:6d:c0:18:1e:7c:92:
5b:6d:95:36:f1:11:67:39:ea:97:4b:77:c4:11:2d:
77:d2:9c:de:b0:ad:7c:f8:9e:ec:b7:73:9e:97:be:
32:b5:60:17:3c:92:bc:95:44:7b:5c:28:ee:33:fd:
24:b0:66:2c:96:02:94:3e:29:57:63:2d:4c:91:8d:
4b:92:cf:a4:a6:14:a4:c3:3d:67:5c:3a:69:00:aa:
a9:45:84:74:61:a5:86:90:6e:93:da:e4:4d:12:34:
87:9f:8d:fc:5b:11:bf:76:d1:86:ee:45:27:2e:76:
84:98:90:e8:7d:38:64:75:c2:83:21:03:f5:2f:80:
a3:ce:7b:d8:be:56:35:c5:f6:32:98:59:1f:77:f3:
ba:14:42:41:65:2f:c0:43:86:46:9b:f7:b6:a6:72:
19:63:02:33:93:de:4f:5e:61:37:cb:98:c9:1f:71:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:5D:2A:4B:F0:A5:1A:C0:36:FF:CC:F6:46:76:2A:64:AA:C8:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4407c123-0491-3448-a350-d5000f51f616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:67:b4:59:93:e4:6e:de:80:06:8b:6f:3c:76:d3:71:a5:a2:
5e:05:d0:e5:84:b7:0d:f2:1c:33:4c:6c:d6:98:a8:3a:4f:ca:
57:4d:52:be:4f:e9:7d:3c:8c:fe:a7:e5:72:56:3c:ae:ac:dc:
c5:95:5c:68:56:72:69:1e:10:0e:a6:63:9e:37:ff:ae:ba:87:
f9:dd:ad:61:5b:33:45:01:ee:18:3d:ac:3f:a0:a7:9f:1a:cd:
b8:9a:33:67:c8:93:a7:61:d3:9f:14:cf:c7:4a:04:2b:29:0a:
1f:51:69:6d:2d:3f:0d:82:07:c9:a8:57:3d:9b:bc:a8:91:9f:
d7:5f:b5:46:7d:04:bf:96:49:45:ca:3a:77:e0:48:60:48:42:
b8:33:77:57:6d:6e:00:2a:53:72:fc:70:5c:f7:ac:6f:fc:c3:
40:af:54:58:bb:9d:f6:f8:12:cb:d9:96:89:ab:bd:0e:62:f8:
ec:91:e8:42:35:41:49:fd:df:8a:7f:e4:4a:fe:1e:b1:8a:ad:
7e:9f:b6:88:6b:58:57:3b:38:40:1c:4e:43:83:0b:16:5d:44:
b7:8b:96:30:fa:52:fe:48:ff:ed:94:ce:b8:71:a9:61:e5:5d:
da:90:ba:1b:fd:97:6d:f0:0d:c0:77:28:68:2f:26:ec:14:64:
bf:04:c8:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFc+pFFvDOBsH9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
OTA5NjNmOGUtZWIzYi00MjFmLWFkZWMtMGI2MTgxODIzYjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsZOMYcmAOHjJsOMGP0TFItAu1CrKSOwH+Uc
ar8MW4uA2BpVprvtbfUKqvxXGKGMydZl0SDYWFPmZGX4+3bFVaCIEyoGHaLHSGyS
xFCqhiK7ieJtwBgefJJbbZU28RFnOeqXS3fEES130pzesK18+J7st3Oel74ytWAX
PJK8lUR7XCjuM/0ksGYslgKUPilXYy1MkY1Lks+kphSkwz1nXDppAKqpRYR0YaWG
kG6T2uRNEjSHn438WxG/dtGG7kUnLnaEmJDofThkdcKDIQP1L4CjznvYvlY1xfYy
mFkfd/O6FEJBZS/AQ4ZGm/e2pnIZYwIzk95PXmE3y5jJH3Em+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxeXSpL8KUawDb/zPZGdipkqshAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDQwN2MxMjMtMDQ5MS0z
NDQ4LWEzNTAtZDUwMDBmNTFmNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6ROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlntFmT5G7egAaLbzx203Glol4F0OWEtw3yHDNMbNaYqDpPyldNUr5P
6X08jP6n5XJWPK6s3MWVXGhWcmkeEA6mY543/666h/ndrWFbM0UB7hg9rD+gp58a
zbiaM2fIk6dh058Uz8dKBCspCh9RaW0tPw2CB8moVz2bvKiRn9dftUZ9BL+WSUXK
OnfgSGBIQrgzd1dtbgAqU3L8cFz3rG/8w0CvVFi7nfb4EsvZlomrvQ5i+OyR6EI1
QUn934p/5Er+HrGKrX6ftohrWFc7OEAcTkODCxZdRLeLljD6Uv5I/+2UzrhxqWHl
XdqQuhv9l23wDcB3KGgvJuwUZL8EyC4=
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org