Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/597c99d1-4661-328d-8c69-4818fc8d07d9.roa
File: 597c99d1-4661-328d-8c69-4818fc8d07d9.roa (raw, json)
Hash identifier: iuqwOr48BRCplkDTH+RcP8/vy5LotkdqAaApTzg60a8=
Subject key identifier: F2:8F:50:B8:93:70:12:8C:4D:9E:3C:F6:31:F7:38:3E:28:58:2D:B3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313C2C3459048B9CC7BD180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/597c99d1-4661-328d-8c69-4818fc8d07d9.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 70.26.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:c2:c3:45:90:48:b9:cc:7b:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=3d186986-e8fc-4494-a195-ad20ae2e4cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:9e:ed:d8:a5:cf:06:e0:f8:4d:ff:31:a1:
a0:6a:67:51:1f:71:10:18:eb:71:60:f6:e3:e4:a6:
38:d0:a4:a1:04:d2:ac:d6:6f:20:c7:8c:f1:c0:5e:
32:11:d6:c2:fe:d8:ca:4f:2f:22:50:03:75:e0:b0:
01:55:92:44:4f:50:e5:38:db:7d:05:6a:22:11:1a:
69:5b:61:3d:ec:c6:10:2b:6e:05:f1:ca:5d:d2:e3:
bf:c7:57:ba:50:0e:16:f2:c8:9b:75:69:fa:58:a5:
63:fc:59:5b:21:45:04:5f:ad:fe:66:6f:d7:c4:ce:
22:8a:bd:87:16:16:40:b9:ad:15:7d:cb:89:78:b8:
4b:3d:dd:8f:48:67:86:ad:07:9b:4f:19:e9:e2:ff:
69:59:45:fe:fc:c6:7b:5c:2b:3d:26:20:01:99:d5:
da:8d:e7:8a:2e:9a:90:48:ed:77:78:3d:25:a8:b1:
6e:55:54:4e:44:49:db:e3:56:7c:6c:50:99:6d:d8:
7b:f3:c2:e5:2c:ac:38:d9:35:8f:5a:0a:89:e4:38:
35:83:c6:30:d4:ab:57:ce:1c:5e:68:af:cd:e5:ad:
f0:09:1e:8e:e5:61:5b:80:03:b9:ee:37:b5:a1:19:
72:6c:ec:b2:99:f6:98:c8:e8:f4:7a:77:f4:a7:0e:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:50:B8:93:70:12:8C:4D:9E:3C:F6:31:F7:38:3E:28:58:2D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/597c99d1-4661-328d-8c69-4818fc8d07d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.26.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:51:dd:f4:8f:2e:de:39:10:74:3a:2b:9f:a1:15:46:a6:6d:
44:8f:f4:ab:cb:15:bd:54:1d:22:e4:4b:28:bb:ae:63:e1:e6:
16:ea:39:6a:0d:07:43:e6:7a:4d:ad:1f:9f:3f:41:ad:15:8a:
cf:48:ac:a3:1e:47:ec:2a:b9:c1:ce:98:ea:5d:61:ee:77:7f:
c7:ab:1f:10:f4:51:cc:e6:1c:5f:af:03:be:f8:77:ca:b2:54:
bb:32:02:e9:f6:dd:f2:f5:6f:b6:81:52:7d:0f:8d:22:38:9a:
c8:18:8d:8f:b1:94:63:a5:b5:ed:c6:13:45:90:10:87:4f:19:
ba:b1:13:4a:5e:67:c0:34:f9:4b:a8:34:f8:77:3d:8a:ac:1b:
c7:7e:69:37:92:b4:53:a8:e9:a6:81:cd:ed:2f:db:12:04:38:
05:f5:1b:17:a3:9b:52:6d:77:4d:86:99:59:17:f9:ad:d0:e4:
a2:ca:35:83:a4:57:c7:5f:f8:7e:17:8d:8f:a3:62:80:f6:a7:
60:f0:7c:8d:21:0b:1a:5c:b9:13:0e:c7:d9:e4:93:69:ef:29:
55:75:68:bd:86:12:6c:c8:33:8d:de:2d:33:1e:33:4c:0e:3a:
85:34:15:8a:cc:a9:06:8a:a1:6a:27:e1:9a:78:ca:4d:70:56:
9b:98:4c:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTE8LDRZBIucx70YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
M2QxODY5ODYtZThmYy00NDk0LWExOTUtYWQyMGFlMmU0Y2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqWe7dilzwbg+E3/MaGgamdRH3EQGOtxYPbj
5KY40KShBNKs1m8gx4zxwF4yEdbC/tjKTy8iUAN14LABVZJET1DlONt9BWoiERpp
W2E97MYQK24F8cpd0uO/x1e6UA4W8sibdWn6WKVj/FlbIUUEX63+Zm/XxM4iir2H
FhZAua0VfcuJeLhLPd2PSGeGrQebTxnp4v9pWUX+/MZ7XCs9JiABmdXajeeKLpqQ
SO13eD0lqLFuVVROREnb41Z8bFCZbdh788LlLKw42TWPWgqJ5Dg1g8Yw1KtXzhxe
aK/N5a3wCR6O5WFbgAO57je1oRlybOyymfaYyOj0enf0pw6p/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKPULiTcBKMTZ489jH3OD4oWC2zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTk3Yzk5ZDEtNDY2MS0z
MjhkLThjNjktNDgxOGZjOGQwN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRho4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJR3fSPLt45EHQ6K5+hFUambUSP9KvLFb1UHSLkSyi7rmPh5hbqOWoN
B0Pmek2tH58/Qa0Vis9IrKMeR+wqucHOmOpdYe53f8erHxD0UczmHF+vA774d8qy
VLsyAun23fL1b7aBUn0PjSI4msgYjY+xlGOlte3GE0WQEIdPGbqxE0peZ8A0+Uuo
NPh3PYqsG8d+aTeStFOo6aaBze0v2xIEOAX1Gxejm1Jtd02GmVkX+a3Q5KLKNYOk
V8df+H4XjY+jYoD2p2DwfI0hCxpcuRMOx9nkk2nvKVV1aL2GEmzIM43eLTMeM0wO
OoU0FYrMqQaKoWon4Zp4yk1wVpuYTII=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org