Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b888fc7-819e-3df3-9865-3ffa6269ab37.roa
File: 5b888fc7-819e-3df3-9865-3ffa6269ab37.roa (raw, json)
Hash identifier: bAy1JKJ2egDfLEFQfahk2enrVuV5vMqthbUi3MmZjrU=
Subject key identifier: A0:A9:C1:BF:2F:F8:25:40:18:DB:24:3B:2B:3A:FC:89:65:76:17:99
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314C6511B87EB88E61301A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b888fc7-819e-3df3-9865-3ffa6269ab37.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 198.235.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:c6:51:1b:87:eb:88:e6:13:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=52364967-1aa6-4c6b-ad67-09b1e90dba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:42:c8:be:4e:c1:5f:51:4a:12:ec:a1:5b:
3c:42:fe:2d:d7:36:7c:45:4c:60:4c:a1:85:be:25:
9d:24:9d:e5:ce:fa:00:f4:86:fd:3a:ed:7b:0f:33:
fd:85:15:d9:1a:84:58:0a:bd:09:f2:ea:7e:52:88:
d2:59:db:f8:a6:6d:44:ff:bc:47:22:34:fa:39:9f:
36:10:77:47:5e:7c:8e:fe:da:23:d9:2a:04:eb:ef:
ae:ca:e2:0d:55:38:07:78:e0:aa:30:05:42:11:3a:
6f:5f:e7:85:81:de:5b:5c:bc:43:58:d5:16:09:ad:
a6:1c:33:54:eb:5b:93:2e:be:ed:55:ff:da:ea:8a:
9d:f9:35:62:0f:b3:0f:2f:ac:0c:5a:03:f9:8a:cb:
c6:33:00:26:b8:96:a0:72:76:bb:ab:fe:db:ad:ee:
5d:06:ca:a3:53:0a:30:eb:c1:b8:f6:7b:d6:02:7b:
86:e1:66:20:09:fc:16:15:1d:2f:c0:92:fa:75:af:
a3:bd:81:f8:df:19:3d:e3:35:51:1b:a9:48:0e:6b:
8d:dd:1e:ef:b4:fa:b2:63:c2:7a:77:8a:21:d8:91:
8c:ce:02:da:c9:f4:16:d9:21:2a:4d:65:cd:4e:6f:
1f:18:53:af:7c:c6:68:95:2d:a2:e6:d6:66:54:be:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:C1:BF:2F:F8:25:40:18:DB:24:3B:2B:3A:FC:89:65:76:17:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b888fc7-819e-3df3-9865-3ffa6269ab37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
198.235.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:32:e3:f8:4d:d6:e4:da:64:26:c1:63:c4:eb:27:0c:b0:94:
d0:7a:a0:87:1a:78:c2:8b:a5:3f:bc:47:38:13:df:fd:76:5e:
55:e9:17:81:b6:21:2e:ac:79:02:35:ca:0f:78:74:11:b0:a1:
69:9f:ff:0e:ef:a6:6b:37:e8:7a:45:ff:40:1d:ad:bb:23:68:
0b:51:ea:bf:c4:7b:db:79:59:3a:c5:24:0d:46:e4:44:36:f0:
93:ca:96:56:1c:d7:06:39:64:96:5c:04:cd:1e:0d:b6:a8:1d:
ba:be:b8:d8:ca:dd:f9:83:dd:01:a5:dc:ac:ae:b3:4c:09:58:
34:54:25:6a:76:37:dd:09:fd:3c:b4:ce:ea:90:5f:67:3c:01:
02:fb:e9:05:83:8b:aa:2a:68:2b:3c:da:47:a4:9f:2d:ad:8a:
f9:be:1c:f2:ff:cb:46:03:7e:60:ef:7d:d9:12:c6:be:61:9d:
97:39:5b:4b:20:67:1f:19:e3:7e:89:cb:07:b7:40:bd:2c:11:
86:fd:61:ce:68:13:8c:c7:04:05:f3:25:76:34:7a:4f:c5:e6:
f1:46:1f:e1:0f:f6:6e:ba:43:56:0d:98:c9:7d:8c:ef:86:0d:
76:d5:1f:04:20:1b:a0:62:d6:4f:83:d4:7d:08:07:a7:07:3b:
2f:f3:1a:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFMZRG4friOYTAaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NTIzNjQ5NjctMWFhNi00YzZiLWFkNjctMDliMWU5MGRiYTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCJCyL5OwV9RShLsoVs8Qv4t1zZ8RUxgTKGF
viWdJJ3lzvoA9Ib9Ou17DzP9hRXZGoRYCr0J8up+UojSWdv4pm1E/7xHIjT6OZ82
EHdHXnyO/toj2SoE6++uyuINVTgHeOCqMAVCETpvX+eFgd5bXLxDWNUWCa2mHDNU
61uTLr7tVf/a6oqd+TViD7MPL6wMWgP5isvGMwAmuJagcna7q/7bre5dBsqjUwow
68G49nvWAnuG4WYgCfwWFR0vwJL6da+jvYH43xk94zVRG6lIDmuN3R7vtPqyY8J6
d4oh2JGMzgLayfQW2SEqTWXNTm8fGFOvfMZolS2i5tZmVL5mNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCpwb8v+CVAGNskOys6/IlldheZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWI4ODhmYzctODE5ZS0z
ZGYzLTk4NjUtM2ZmYTYyNjlhYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuvaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEky4/hN1uTaZCbBY8TrJwywlNB6oIcaeMKLpT+8RzgT3/12XlXpF4G2
IS6seQI1yg94dBGwoWmf/w7vpms36HpF/0AdrbsjaAtR6r/Ee9t5WTrFJA1G5EQ2
8JPKllYc1wY5ZJZcBM0eDbaoHbq+uNjK3fmD3QGl3Kyus0wJWDRUJWp2N90J/Ty0
zuqQX2c8AQL76QWDi6oqaCs82kekny2tivm+HPL/y0YDfmDvfdkSxr5hnZc5W0sg
Zx8Z436Jywe3QL0sEYb9Yc5oE4zHBAXzJXY0ek/F5vFGH+EP9m66Q1YNmMl9jO+G
DXbVHwQgG6Bi1k+D1H0IB6cHOy/zGn0=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org