Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a3da307-07f5-3d64-9c27-e9015b20076f.roa
File: 4a3da307-07f5-3d64-9c27-e9015b20076f.roa (raw, json)
Hash identifier: BmDTLFig06hWi8ypSvYJJ22IV/np8AOkOv58zrxkDZw=
Subject key identifier: 0E:29:99:61:F2:4F:D7:70:68:53:E1:7F:5A:92:BA:2F:1B:DC:50:BB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931628F94511BC15EA7FC4FC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a3da307-07f5-3d64-9c27-e9015b20076f.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 29974
IP address blocks: 207.236.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:28:f9:45:11:bc:15:ea:7f:c4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=502a4a85-fe59-41f7-9288-3b0507950390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:14:3e:e5:3e:c1:cb:db:ae:e1:0a:c9:a9:
4c:dc:63:12:e6:82:a7:6c:c2:cd:d0:8e:59:5c:7d:
e4:89:cd:8e:5b:9a:0c:33:7a:cf:e3:98:ba:ab:07:
d0:0d:10:60:01:04:6e:8a:c7:66:e0:08:d8:1f:45:
e0:30:a9:47:d8:04:80:82:ce:b0:de:bf:24:68:6f:
bd:62:cc:89:46:bc:22:c4:41:e6:98:69:7b:c2:8c:
85:87:8c:94:98:3f:f1:e3:81:68:cb:0e:70:4f:9d:
92:79:40:d4:3c:32:85:78:71:f6:cc:6c:a5:1b:a9:
2f:b2:a2:68:9d:5b:de:ba:9b:d5:72:a2:98:8b:04:
5c:6d:43:41:db:8d:5d:5c:d3:64:4e:92:2e:d5:d3:
d1:9f:13:40:b2:3e:42:ad:7b:ff:76:44:22:11:92:
e5:9e:fb:c5:1f:34:f5:20:e4:44:ed:7a:58:59:46:
0f:e9:47:c0:75:49:e9:91:62:a3:4a:06:81:30:3e:
79:cf:0d:ca:f2:ec:65:c1:6e:50:d5:9a:46:2c:ab:
af:7e:80:36:90:d5:c4:52:a9:ab:7d:e6:63:ee:47:
c2:79:20:e7:d6:b7:f9:8d:9e:2f:0e:45:02:b2:ff:
24:75:cb:25:2e:35:6e:d0:e4:3c:af:5e:22:1f:6f:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:99:61:F2:4F:D7:70:68:53:E1:7F:5A:92:BA:2F:1B:DC:50:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a3da307-07f5-3d64-9c27-e9015b20076f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ee:2a:02:4c:75:8e:e1:c7:d6:a6:b8:b8:30:99:13:64:8d:
2f:0a:3a:6b:34:23:ca:2b:c3:0c:c8:d5:f7:a7:9a:f1:db:dd:
89:b9:79:33:e3:9d:7a:48:ff:9f:44:d7:a4:6d:d4:58:61:e6:
83:81:07:16:d6:21:e1:c8:4b:46:0d:4c:e6:4e:32:8c:73:0e:
81:74:6c:0b:5c:73:dd:12:06:f9:70:d6:08:b0:2d:08:66:e4:
9b:1d:30:ad:c6:61:de:00:d0:5e:7c:3d:00:0b:66:49:18:b4:
70:82:f8:2d:e6:80:70:d7:21:e7:cb:71:9f:36:46:29:5b:73:
61:b7:94:5e:c8:db:00:82:e9:16:25:51:2b:b9:b6:9d:be:bd:
2b:e2:9e:a7:3b:6f:e9:e3:1a:b8:c7:3b:52:cc:55:e8:d2:23:
37:d7:ae:09:5c:3e:4b:56:1b:8b:74:6c:4d:01:af:27:5e:a8:
18:54:49:06:a5:95:b7:a8:b7:e0:83:10:4b:71:2c:d7:02:32:
6c:07:b5:23:86:08:e3:80:6a:44:2f:6f:1a:96:09:48:36:b7:
47:57:62:34:72:25:6d:b4:2b:ee:39:85:95:bc:39:41:e2:be:
69:eb:9d:d7:6a:fa:05:ba:1c:5c:c6:72:92:78:59:c2:9e:fb:
46:a1:0c:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFij5RRG8Fep/xPwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NTAyYTRhODUtZmU1OS00MWY3LTkyODgtM2IwNTA3OTUwMzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloEUPuU+wcvbruEKyalM3GMS5oKnbMLN0I5Z
XH3kic2OW5oMM3rP45i6qwfQDRBgAQRuisdm4AjYH0XgMKlH2ASAgs6w3r8kaG+9
YsyJRrwixEHmmGl7woyFh4yUmD/x44Foyw5wT52SeUDUPDKFeHH2zGylG6kvsqJo
nVveupvVcqKYiwRcbUNB241dXNNkTpIu1dPRnxNAsj5CrXv/dkQiEZLlnvvFHzT1
IORE7XpYWUYP6UfAdUnpkWKjSgaBMD55zw3K8uxlwW5Q1ZpGLKuvfoA2kNXEUqmr
feZj7kfCeSDn1rf5jZ4vDkUCsv8kdcslLjVu0OQ8r14iH2/sZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4pmWHyT9dwaFPhf1qSui8b3FC7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGEzZGEzMDctMDdmNS0z
ZDY0LTljMjctZTkwMTViMjAwNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+zwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3uKgJMdY7hx9amuLgwmRNkjS8KOms0I8orwwzI1fenmvHb3Ym5eTPj
nXpI/59E16Rt1Fhh5oOBBxbWIeHIS0YNTOZOMoxzDoF0bAtcc90SBvlw1giwLQhm
5JsdMK3GYd4A0F58PQALZkkYtHCC+C3mgHDXIefLcZ82Rilbc2G3lF7I2wCC6RYl
USu5tp2+vSvinqc7b+njGrjHO1LMVejSIzfXrglcPktWG4t0bE0BrydeqBhUSQal
lbeot+CDEEtxLNcCMmwHtSOGCOOAakQvbxqWCUg2t0dXYjRyJW20K+45hZW8OUHi
vmnrnddq+gW6HFzGcpJ4WcKe+0ahDF8=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org