Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ce81ea9-fe99-3ad6-8c9e-66f8035c484b.roa
File: 4ce81ea9-fe99-3ad6-8c9e-66f8035c484b.roa (raw, json)
Hash identifier: XgmKBa2feKLQa0SAAcqfgskpYFyQetQMcga049ezs5E=
Subject key identifier: BC:29:00:BD:1A:A3:83:A6:9C:A6:7D:EE:91:01:3D:44:02:A8:DB:15
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE66DAF1D59243B72B19C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ce81ea9-fe99-3ad6-8c9e-66f8035c484b.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 2001:4c0:6000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:6d:af:1d:59:24:3b:72:b1:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=28f1566b-9f2e-4b36-8b4a-52a5714c93c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:d4:ab:68:54:7e:49:60:d1:95:76:c8:ad:
a2:24:40:e7:29:0b:fc:57:db:13:b5:77:b2:09:d0:
3f:10:52:c1:14:77:d1:52:43:a4:7c:10:de:2e:23:
a6:da:6e:8e:5a:b4:0a:fb:63:93:e2:ef:69:9e:0c:
17:41:24:70:39:c7:fd:bd:94:97:7a:15:f4:10:f5:
9b:91:10:d5:fc:1a:71:7f:4e:e9:6d:b7:8f:98:82:
a9:a9:2a:0e:76:3b:64:83:5e:f5:61:1c:ad:2a:bc:
c0:24:ef:49:4d:80:03:eb:ab:a3:5a:5c:26:90:b8:
e8:37:37:4b:b1:df:65:aa:7b:53:4a:08:34:8e:81:
20:df:fb:4c:48:7f:af:2d:ec:5d:80:a7:15:79:d4:
59:41:3a:dc:6d:22:6d:96:02:70:37:26:2f:1d:f6:
3b:56:f4:6e:a2:86:cd:91:48:04:e8:51:70:97:54:
37:51:b8:dc:78:a8:7c:c7:0b:64:13:ec:86:30:ab:
0a:bb:eb:8c:b8:9f:f1:e7:5e:1e:b8:8d:98:f2:79:
d3:b6:a5:50:bc:2d:2d:fd:6d:fa:59:cd:67:ba:ce:
16:72:98:24:a0:00:6c:fd:1a:81:f8:f3:83:0f:7f:
eb:a7:31:e2:40:ae:e7:7f:6b:7c:34:21:25:e6:56:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:00:BD:1A:A3:83:A6:9C:A6:7D:EE:91:01:3D:44:02:A8:DB:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ce81ea9-fe99-3ad6-8c9e-66f8035c484b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4c0:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:7f:ff:aa:6d:11:fc:08:90:2b:2f:c3:6c:eb:b5:21:bf:7d:
b7:93:27:80:e9:51:c5:1e:b8:88:47:eb:2c:ed:99:80:d1:46:
70:21:07:7b:fa:c6:35:ef:70:33:86:7c:4d:b1:f0:9a:4d:7e:
b8:7c:6f:4b:5c:5e:c0:c4:38:83:13:46:5f:ea:22:d9:26:88:
1c:91:50:01:22:cf:80:ae:47:2b:24:dc:45:3a:b2:c2:21:ff:
19:dd:07:2a:b7:af:b5:f2:ec:09:df:f7:3f:f7:32:c2:21:76:
3d:40:3e:a9:26:41:6a:26:4d:f2:3e:32:04:db:4d:97:4d:ab:
5d:98:a4:30:36:a2:15:2c:e0:98:d5:46:31:dc:06:f1:7a:26:
c1:36:6b:3f:89:9f:03:fa:ad:84:47:be:dc:e9:21:a6:98:81:
24:78:73:7e:93:c6:5e:6d:ed:13:dd:b5:15:76:44:a8:8d:3b:
7f:94:1f:b3:d5:28:1c:8c:14:37:57:bc:6d:55:9c:ca:91:4a:
a9:28:95:30:70:e6:d2:a4:1a:12:99:4d:e4:0f:a6:27:f5:dd:
74:af:67:5c:d1:25:db:dc:ea:38:8c:aa:cc:9e:66:cd:e6:8c:
5c:c0:c4:e2:4b:a5:27:69:3d:f7:14:74:91:71:7c:44:b6:56:
ef:67:9c:70
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEOa5m2vHVkkO3KxnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MjhmMTU2NmItOWYyZS00YjM2LThiNGEtNTJhNTcxNGM5M2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3HUq2hUfklg0ZV2yK2iJEDnKQv8V9sTtXey
CdA/EFLBFHfRUkOkfBDeLiOm2m6OWrQK+2OT4u9pngwXQSRwOcf9vZSXehX0EPWb
kRDV/Bpxf07pbbePmIKpqSoOdjtkg171YRytKrzAJO9JTYAD66ujWlwmkLjoNzdL
sd9lqntTSgg0joEg3/tMSH+vLexdgKcVedRZQTrcbSJtlgJwNyYvHfY7VvRuoobN
kUgE6FFwl1Q3UbjceKh8xwtkE+yGMKsKu+uMuJ/x514euI2Y8nnTtqVQvC0t/W36
Wc1nus4WcpgkoABs/RqB+PODD3/rpzHiQK7nf2t8NCEl5lbO5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLwpAL0ao4OmnKZ97pEBPUQCqNsVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGNlODFlYTktZmU5OS0z
YWQ2LThjOWUtNjZmODAzNWM0ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEwGAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACd//6ptEfwIkCsvw2zrtSG/fbeTJ4DpUcUeuIhH6yztmYDRRnAh
B3v6xjXvcDOGfE2x8JpNfrh8b0tcXsDEOIMTRl/qItkmiByRUAEiz4CuRysk3EU6
ssIh/xndByq3r7Xy7Anf9z/3MsIhdj1APqkmQWomTfI+MgTbTZdNq12YpDA2ohUs
4JjVRjHcBvF6JsE2az+JnwP6rYRHvtzpIaaYgSR4c36Txl5t7RPdtRV2RKiNO3+U
H7PVKByMFDdXvG1VnMqRSqkolTBw5tKkGhKZTeQPpif13XSvZ1zRJdvc6jiMqsye
Zs3mjFzAxOJLpSdpPfcUdJFxfES2Vu9nnHA=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org