Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8aedc07e-0b92-3cc4-b43f-25ff231a53c8.roa
File: 8aedc07e-0b92-3cc4-b43f-25ff231a53c8.roa (raw, json)
Hash identifier: A9F7u4GX5ZPujK/RZT3d5BmrKSIFiWv/MfGXamcJqd8=
Subject key identifier: 6C:67:0C:E8:B6:53:B2:08:39:9E:F3:9B:EA:9F:01:38:FA:3F:7F:06
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFB0C7C9E09BE90A80EF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8aedc07e-0b92-3cc4-b43f-25ff231a53c8.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.117.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:b0:c7:c9:e0:9b:e9:0a:80:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=118b8d87-4f62-4b4a-b392-5e67e58cab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e9:ee:78:3e:fa:2c:4a:78:f4:39:b5:04:49:
4a:e5:aa:6b:75:88:bf:86:c6:e1:e0:94:6c:e1:0d:
5a:ec:1c:af:d1:f2:9d:17:13:40:17:7f:28:b9:6c:
0c:32:05:46:a6:38:e0:69:15:44:1f:f4:d7:9d:4d:
e0:29:5d:17:e4:a9:0d:12:b3:f2:0f:eb:5e:0f:8a:
14:d2:4c:99:fd:50:27:0a:21:40:2c:7f:a9:4c:10:
78:d7:c4:6d:b2:fd:77:24:fd:f5:1b:11:04:cf:3c:
02:b5:a7:c5:6f:5b:a9:e5:cc:06:67:2e:8a:59:76:
6a:42:76:e5:ca:53:a8:b9:e0:35:29:84:bd:59:52:
d4:ff:17:83:f2:8a:a0:12:9c:6c:6e:d2:85:00:80:
aa:4c:cf:cf:a1:d3:ac:cc:26:c4:12:67:32:41:37:
9d:ad:a4:8d:2a:d2:bb:0b:19:53:93:34:ba:8e:bc:
91:88:e8:9c:ba:41:c2:8a:1b:29:30:cb:ab:d1:fc:
dc:2e:b6:31:66:77:2f:56:c3:52:5f:9a:67:2d:53:
ec:13:f1:f0:fb:59:87:23:5d:d8:54:51:8a:aa:59:
4a:ea:05:28:e9:5c:19:b8:c7:c2:3c:94:75:3e:c6:
bb:c8:29:ff:4a:4d:ca:fb:dd:8e:64:e4:a5:d2:37:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:67:0C:E8:B6:53:B2:08:39:9E:F3:9B:EA:9F:01:38:FA:3F:7F:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8aedc07e-0b92-3cc4-b43f-25ff231a53c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:70:5b:89:e4:35:56:2f:78:93:39:01:70:7c:26:a5:c1:cf:
53:e5:60:ba:2e:52:6a:a0:05:21:cf:0e:02:91:c7:4b:da:32:
21:2a:8e:74:31:2d:fd:05:c7:f4:5c:72:af:e8:cb:43:d3:c1:
fd:df:0e:33:c0:b1:fc:de:9a:ee:d9:b5:3c:c4:24:66:60:42:
e8:fd:df:a0:33:84:e8:f3:25:9b:ae:a5:82:e1:2c:1f:94:51:
ec:7d:a1:27:1a:ce:4c:c1:e2:f3:1f:5e:c3:0b:e0:69:60:69:
e3:0c:25:42:14:fb:cf:30:2d:49:ba:94:d4:ef:aa:94:d2:7a:
aa:bd:44:b1:3f:23:8e:71:2c:1f:62:f8:f8:8f:16:0d:ce:13:
b2:9a:2b:c8:41:51:88:7a:f5:93:a6:cf:02:ba:52:8b:f7:20:
76:cb:35:fb:b3:5b:c9:95:d1:8c:7b:a9:79:61:13:34:d8:7e:
cc:a3:16:de:7a:74:8b:be:17:0b:04:63:d7:4d:49:d0:d7:7c:
ac:d7:78:7c:96:08:e2:e0:75:43:34:3c:59:1a:47:c7:e6:ca:
a5:b5:8f:7e:08:27:47:f9:56:b5:63:88:4d:a2:65:c0:c7:4e:
5b:88:3f:ae:20:1e:44:d9:46:1a:5e:e6:54:c0:e8:ee:36:c1:
1e:ac:6a:60
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEQdr7DHyeCb6QqA7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MTE4YjhkODctNGY2Mi00YjRhLWIzOTItNWU2N2U1OGNhYjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7enueD76LEp49Dm1BElK5aprdYi/hsbh4JRs
4Q1a7Byv0fKdFxNAF38ouWwMMgVGpjjgaRVEH/TXnU3gKV0X5KkNErPyD+teD4oU
0kyZ/VAnCiFALH+pTBB418Rtsv13JP31GxEEzzwCtafFb1up5cwGZy6KWXZqQnbl
ylOoueA1KYS9WVLU/xeD8oqgEpxsbtKFAICqTM/PodOszCbEEmcyQTedraSNKtK7
CxlTkzS6jryRiOicukHCihspMMur0fzcLrYxZncvVsNSX5pnLVPsE/Hw+1mHI13Y
VFGKqllK6gUo6VwZuMfCPJR1Psa7yCn/Sk3K+92OZOSl0jdwiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGxnDOi2U7IIOZ7zm+qfATj6P38GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGFlZGMwN2UtMGI5Mi0z
Y2M0LWI0M2YtMjVmZjIzMWE1M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjnUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEXBbieQ1Vi94kzkBcHwmpcHPU+Vgui5SaqAFIc8OApHHS9oyISqOdDEt
/QXH9Fxyr+jLQ9PB/d8OM8Cx/N6a7tm1PMQkZmBC6P3foDOE6PMlm66lguEsH5RR
7H2hJxrOTMHi8x9ewwvgaWBp4wwlQhT7zzAtSbqU1O+qlNJ6qr1EsT8jjnEsH2L4
+I8WDc4TsporyEFRiHr1k6bPArpSi/cgdss1+7NbyZXRjHupeWETNNh+zKMW3np0
i74XCwRj101J0Nd8rNd4fJYI4uB1QzQ8WRpHx+bKpbWPfggnR/lWtWOITaJlwMdO
W4g/riAeRNlGGl7mVMDo7jbBHqxqYA==
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org