Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57208818-3928-3a88-8697-fe87e9656af8.roa
File: 57208818-3928-3a88-8697-fe87e9656af8.roa (raw, json)
Hash identifier: c4MG3IrSvGMhZ+QxJ99rWy2BKZ47tPTzE34kQFy7kMo=
Subject key identifier: E8:1C:2D:A4:1A:6C:5E:8C:19:20:BB:42:56:CD:71:E8:87:BF:94:E0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493150FC8C91723580A526800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57208818-3928-3a88-8697-fe87e9656af8.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:0f:c8:c9:17:23:58:0a:52:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1b44ebb6-4acb-4992-a9a4-097be6889e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:4d:58:21:9f:c6:2e:4b:dd:9a:d9:2b:5e:
22:ed:4b:60:a7:f5:c6:5b:13:9f:b1:a9:a3:7f:28:
ce:c9:ae:f5:b7:d9:f0:09:e8:fd:d0:4d:1c:2c:94:
01:9c:c5:3e:32:b0:62:df:75:2d:9f:3a:e7:d4:77:
6b:a2:69:c5:5b:a7:4a:83:fe:68:af:bc:d3:95:ca:
4c:76:e4:3d:28:97:54:1d:68:95:e5:ce:a0:b2:75:
5a:dd:69:52:3d:19:ab:e5:7f:31:11:96:34:bf:3f:
d3:41:80:15:d0:9c:a8:ae:19:45:8e:6d:8b:00:ac:
c6:59:2e:88:ee:3b:6e:9d:01:d4:c3:2d:45:36:09:
3c:52:ec:41:40:42:9b:8b:49:25:a9:61:a8:b1:bf:
ec:73:06:cf:b1:d6:cb:15:27:b5:7c:ae:85:06:91:
b7:f2:ce:9d:b7:7f:bb:c9:92:47:7f:e7:97:a6:ba:
46:b0:70:a2:4b:a5:cf:47:3c:bc:57:a1:08:d9:4d:
b2:b6:8f:ed:e5:44:d3:5a:32:84:ab:d2:e3:a4:b4:
75:3d:89:b0:a8:a2:ef:77:e7:61:56:3c:2c:4d:e8:
46:2f:39:0e:2f:a8:84:cc:78:84:d4:1b:5a:8f:26:
ad:31:2b:54:6d:51:ac:09:a6:e4:13:0b:6d:a8:f4:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:2D:A4:1A:6C:5E:8C:19:20:BB:42:56:CD:71:E8:87:BF:94:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/57208818-3928-3a88-8697-fe87e9656af8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:af:95:c1:89:44:dc:9e:be:37:1d:14:ea:67:2c:65:93:81:
b3:8e:65:29:78:55:b6:6d:a1:bb:fa:96:5b:ad:78:af:4c:b2:
ba:9c:20:fc:08:11:34:cc:e3:30:16:91:80:99:cd:ef:06:b8:
d5:27:ce:36:bd:2f:af:0b:a0:c7:a8:20:db:1f:21:7e:1c:f8:
68:15:c7:5b:07:fa:e6:c4:26:ef:fd:3c:ac:02:af:a5:09:c7:
17:74:5d:8b:95:b7:7c:ce:d5:43:e1:27:fd:6c:7f:fd:08:c6:
62:4e:d5:5b:a1:5a:2d:bc:48:a0:e1:59:51:98:06:75:e0:1e:
be:03:57:94:0b:b3:d5:05:5a:48:96:2e:02:52:6c:83:10:ec:
7e:5f:35:a0:59:a9:ee:d3:e6:b0:49:ff:d2:90:18:e2:4c:96:
ce:ba:a1:a4:e8:7f:67:63:48:e6:14:8d:af:65:07:88:99:e0:
5f:82:aa:1b:2e:6b:1e:47:d6:26:2f:90:a2:ad:f3:14:0f:e3:
85:63:a2:14:87:7e:26:e0:51:b1:5a:4e:22:8b:46:10:c7:78:
04:09:20:d5:45:3e:6b:ea:f2:28:b2:e7:a9:22:05:e2:e8:8e:
e1:eb:51:51:dd:4a:20:15:9e:2e:56:5d:16:7a:0a:df:af:44:
1f:1b:c7:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFQ/IyRcjWApSaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWI0NGViYjYtNGFjYi00OTkyLWE5YTQtMDk3YmU2ODg5ZTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCJNWCGfxi5L3ZrZK14i7Utgp/XGWxOfsamj
fyjOya71t9nwCej90E0cLJQBnMU+MrBi33Utnzrn1HdromnFW6dKg/5or7zTlcpM
duQ9KJdUHWiV5c6gsnVa3WlSPRmr5X8xEZY0vz/TQYAV0JyorhlFjm2LAKzGWS6I
7jtunQHUwy1FNgk8UuxBQEKbi0klqWGosb/scwbPsdbLFSe1fK6FBpG38s6dt3+7
yZJHf+eXprpGsHCiS6XPRzy8V6EI2U2yto/t5UTTWjKEq9LjpLR1PYmwqKLvd+dh
VjwsTehGLzkOL6iEzHiE1BtajyatMStUbVGsCabkEwttqPS+/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOgcLaQabF6MGSC7QlbNceiHv5TgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTcyMDg4MTgtMzkyOC0z
YTg4LTg2OTctZmU4N2U5NjU2YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyvlcGJRNyevjcdFOpnLGWTgbOOZSl4VbZtobv6lluteK9MsrqcIPwI
ETTM4zAWkYCZze8GuNUnzja9L68LoMeoINsfIX4c+GgVx1sH+ubEJu/9PKwCr6UJ
xxd0XYuVt3zO1UPhJ/1sf/0IxmJO1VuhWi28SKDhWVGYBnXgHr4DV5QLs9UFWkiW
LgJSbIMQ7H5fNaBZqe7T5rBJ/9KQGOJMls66oaTof2djSOYUja9lB4iZ4F+Cqhsu
ax5H1iYvkKKt8xQP44VjohSHfibgUbFaTiKLRhDHeAQJINVFPmvq8iiy56kiBeLo
juHrUVHdSiAVni5WXRZ6Ct+vRB8bx/c=
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org