Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598fe2cf-72f0-3def-99ab-c2bb65334599.roa
File: 598fe2cf-72f0-3def-99ab-c2bb65334599.roa (raw, json)
Hash identifier: 8D7MFRknaukajrN9K0pF+EcT+P84FSA1DLKj2DFBK8k=
Subject key identifier: A3:9F:3E:7E:70:7F:09:5D:B8:F2:A9:B3:84:F8:0D:4F:AC:5E:3C:A6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931389E5AA5D17AF15AAA640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598fe2cf-72f0-3def-99ab-c2bb65334599.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 14112
IP address blocks: 66.201.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:89:e5:aa:5d:17:af:15:aa:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0a66bc99-c8cb-4dea-9ed8-75cfe2959abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:0b:59:11:b6:97:15:f7:9b:35:92:dd:bc:
c1:1a:93:ef:ae:e3:64:07:9a:65:f5:6d:17:fc:82:
a4:0a:62:cf:e2:33:3f:6b:48:ba:66:20:06:b6:69:
2a:aa:e9:24:85:b8:ec:4b:fd:dd:ef:6d:21:d5:16:
f5:91:07:35:85:ca:c5:5f:04:f2:e1:e2:d4:72:f9:
51:86:67:40:6e:75:74:9f:03:3e:7d:f9:e0:6b:56:
4a:dc:30:f5:15:c1:41:a6:ab:10:10:d6:3f:f3:47:
7c:70:82:ea:b2:8c:c8:ab:09:64:e1:75:73:53:ec:
60:ad:80:64:63:a6:52:80:2b:59:95:c5:d5:25:4f:
00:c3:25:25:bd:0f:9c:73:84:a0:3e:cb:20:c9:a9:
75:9c:fd:1a:f3:e8:80:0b:2a:f1:c1:69:de:dc:8d:
ec:39:ea:66:ee:47:1c:68:09:1a:13:78:07:c9:00:
9d:0f:f9:7c:b8:9b:07:40:23:a0:28:5d:43:6a:9d:
6c:44:99:c4:d6:7c:9f:56:de:6e:55:aa:79:f0:ea:
1e:4c:6c:58:ba:11:c5:37:b3:b0:fe:86:33:c4:ec:
cc:44:4d:7c:9a:1a:f3:bf:11:ec:ca:74:31:85:6c:
69:76:00:53:66:1b:e6:70:7d:d0:e1:39:03:a8:ff:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:3E:7E:70:7F:09:5D:B8:F2:A9:B3:84:F8:0D:4F:AC:5E:3C:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/598fe2cf-72f0-3def-99ab-c2bb65334599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
66.201.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:cd:ff:29:7d:52:95:03:f1:73:fc:85:99:b1:a7:1b:ef:f0:
65:de:ab:90:62:a5:a6:90:1e:ed:30:59:ea:06:fc:d2:6f:7a:
40:bd:65:c4:a9:76:f8:3d:7d:a4:5c:cb:de:61:a1:3d:67:fe:
22:24:b4:c5:dd:ad:e7:2c:e3:c0:1e:78:77:09:88:2f:b6:70:
2d:cd:5e:f1:d1:1d:d4:6d:6e:57:8a:bc:ec:d6:6a:2d:b2:ea:
d7:99:a0:34:00:81:c2:0d:09:58:ba:83:e7:32:4c:35:86:ae:
85:06:14:1a:d5:ce:d4:e6:8e:92:94:46:90:b6:ce:2a:6e:d4:
b4:95:af:d1:b8:26:58:0b:59:3f:4f:61:35:59:a8:3c:5c:76:
fb:32:42:6d:18:17:00:5a:10:cc:2a:44:88:47:29:50:cb:72:
17:24:d8:7a:56:a6:4d:75:66:a7:5d:c4:65:72:9c:82:1f:f1:
4a:9f:01:08:10:a9:85:44:96:65:3f:a2:b2:5f:9d:80:19:30:
be:3e:ac:8e:b1:af:90:0e:f9:33:30:af:9a:90:4c:ed:d6:24:
c3:11:f5:2c:5a:1f:d2:be:b6:1f:11:3e:9c:0e:7e:11:c6:7e:
e0:6c:a0:cf:c1:55:5e:16:57:bc:ac:75:34:a3:8f:62:a1:c5:
00:36:cc:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTE4nlql0XrxWqpkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MGE2NmJjOTktYzhjYi00ZGVhLTllZDgtNzVjZmUyOTU5YWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKwLWRG2lxX3mzWS3bzBGpPvruNkB5pl9W0X
/IKkCmLP4jM/a0i6ZiAGtmkqqukkhbjsS/3d720h1Rb1kQc1hcrFXwTy4eLUcvlR
hmdAbnV0nwM+ffnga1ZK3DD1FcFBpqsQENY/80d8cILqsozIqwlk4XVzU+xgrYBk
Y6ZSgCtZlcXVJU8AwyUlvQ+cc4SgPssgyal1nP0a8+iACyrxwWne3I3sOepm7kcc
aAkaE3gHyQCdD/l8uJsHQCOgKF1Dap1sRJnE1nyfVt5uVap58OoeTGxYuhHFN7Ow
/oYzxOzMRE18mhrzvxHsynQxhWxpdgBTZhvmcH3Q4TkDqP/TGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOfPn5wfwlduPKps4T4DU+sXjymMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTk4ZmUyY2YtNzJmMC0z
ZGVmLTk5YWItYzJiYjY1MzM0NTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQsnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbN/yl9UpUD8XP8hZmxpxvv8GXeq5BipaaQHu0wWeoG/NJvekC9ZcSp
dvg9faRcy95hoT1n/iIktMXdrecs48AeeHcJiC+2cC3NXvHRHdRtbleKvOzWai2y
6teZoDQAgcINCVi6g+cyTDWGroUGFBrVztTmjpKURpC2zipu1LSVr9G4JlgLWT9P
YTVZqDxcdvsyQm0YFwBaEMwqRIhHKVDLchck2HpWpk11ZqddxGVynIIf8UqfAQgQ
qYVElmU/orJfnYAZML4+rI6xr5AO+TMwr5qQTO3WJMMR9SxaH9K+th8RPpwOfhHG
fuBsoM/BVV4WV7ysdTSjj2KhxQA2zKw=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org