Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1a34594-b674-3b76-8e4b-28823eea9517.roa
File: a1a34594-b674-3b76-8e4b-28823eea9517.roa (raw, json)
Hash identifier: EeMxiatc2tI0c6YMQSJ/edaVldIGQu1mZ67ZrxP+EeA=
Subject key identifier: 12:08:41:F7:11:12:71:02:AA:2B:4F:88:8C:9B:64:E0:08:F3:FB:8F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0DAFC9D5547970747E300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1a34594-b674-3b76-8e4b-28823eea9517.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.236.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:da:fc:9d:55:47:97:07:47:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=46ebb5ee-5058-414b-8eef-60e983d30602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:17:32:4e:82:dc:46:c5:4c:68:a1:81:cd:
e2:25:14:76:ca:06:cb:cd:fe:c6:d5:05:97:84:31:
0d:a6:71:cc:de:a3:23:c6:92:ee:0a:d6:28:24:b3:
36:e2:cb:63:df:f6:58:32:a1:62:1a:dd:36:e4:94:
f5:8c:67:7e:e2:e2:6b:a9:78:ec:c5:17:5e:cc:99:
1c:7a:a9:26:bf:6e:fc:6a:ef:7f:de:af:49:88:5a:
06:b1:e9:42:0f:55:bd:fe:0f:c8:f2:08:97:b0:8e:
70:35:b7:32:50:62:99:ed:a6:2a:d8:3c:59:67:7e:
c6:0b:88:d2:51:aa:d9:9f:a9:b5:0f:dd:00:ac:f5:
66:0a:bd:cd:4f:b7:76:38:d1:be:34:0b:15:92:31:
29:04:28:46:c1:5c:10:34:75:89:b4:12:8d:1f:dc:
82:4a:2e:45:3e:e1:fe:59:22:e3:c2:c0:9a:ad:f9:
7b:c7:c0:72:72:b7:72:9f:d9:b7:e1:e7:9c:24:76:
0e:09:6d:bc:45:a1:a6:e5:98:30:4f:dd:ca:92:1e:
3c:8c:87:6d:ec:00:f0:b3:50:81:54:24:26:89:70:
d1:01:6a:b4:5a:f8:bc:38:53:91:c6:9f:c0:ef:99:
d4:8c:d2:82:1b:0d:7f:66:f7:19:62:09:ae:18:10:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:41:F7:11:12:71:02:AA:2B:4F:88:8C:9B:64:E0:08:F3:FB:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1a34594-b674-3b76-8e4b-28823eea9517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:10:6f:ed:8d:e7:0e:b8:35:96:79:6c:29:e6:4d:74:41:45:
c4:75:8e:87:c3:16:e5:6e:95:14:2c:e6:57:92:1d:d8:7d:95:
90:41:e8:09:64:71:4a:03:06:07:45:59:7e:76:5e:80:0c:0c:
11:cc:22:59:f1:f2:69:79:bd:3b:25:85:33:15:78:f7:38:22:
4c:58:99:a2:a2:d4:e6:0f:5c:39:f4:ab:6e:f6:2e:19:cc:7d:
0b:d9:e5:25:44:35:d7:74:8f:c8:8d:a8:5c:a3:32:79:48:8f:
17:2d:ad:81:65:53:f7:6c:9f:00:93:53:f9:11:83:1f:2e:bf:
20:a4:16:20:6d:53:68:48:fe:97:57:c2:ab:4f:77:58:2e:71:
85:06:99:3a:f6:5a:4a:1f:a3:65:14:60:98:d8:23:9d:ea:25:
fa:ba:10:a2:2f:f7:91:99:ab:6b:bf:11:83:49:44:b3:f8:d5:
04:8f:39:13:01:05:49:ff:7e:1d:e5:37:80:61:79:6c:f7:6d:
6c:09:61:ad:dc:8f:bf:65:e3:37:3b:03:3b:ec:6d:e2:db:39:
45:ce:f0:81:68:6e:b4:24:fc:d6:fd:ba:4d:00:c1:72:1f:e4:
4a:39:32:89:6e:c9:60:ff:f4:cf:72:34:38:22:97:b9:44:d5:
59:72:40:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsNr8nVVHlwdH4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
NDZlYmI1ZWUtNTA1OC00MTRiLThlZWYtNjBlOTgzZDMwNjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaUXMk6C3EbFTGihgc3iJRR2ygbLzf7G1QWX
hDENpnHM3qMjxpLuCtYoJLM24stj3/ZYMqFiGt025JT1jGd+4uJrqXjsxRdezJkc
eqkmv278au9/3q9JiFoGselCD1W9/g/I8giXsI5wNbcyUGKZ7aYq2DxZZ37GC4jS
UarZn6m1D90ArPVmCr3NT7d2ONG+NAsVkjEpBChGwVwQNHWJtBKNH9yCSi5FPuH+
WSLjwsCarfl7x8Bycrdyn9m34eecJHYOCW28RaGm5ZgwT93Kkh48jIdt7ADws1CB
VCQmiXDRAWq0Wvi8OFORxp/A75nUjNKCGw1/ZvcZYgmuGBDDPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIIQfcREnECqitPiIybZOAI8/uPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTFhMzQ1OTQtYjY3NC0z
Yjc2LThlNGItMjg4MjNlZWE5NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+yOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMQb+2N5w64NZZ5bCnmTXRBRcR1jofDFuVulRQs5leSHdh9lZBB6Alk
cUoDBgdFWX52XoAMDBHMIlnx8ml5vTslhTMVePc4IkxYmaKi1OYPXDn0q272LhnM
fQvZ5SVENdd0j8iNqFyjMnlIjxctrYFlU/dsnwCTU/kRgx8uvyCkFiBtU2hI/pdX
wqtPd1gucYUGmTr2Wkofo2UUYJjYI53qJfq6EKIv95GZq2u/EYNJRLP41QSPORMB
BUn/fh3lN4BheWz3bWwJYa3cj79l4zc7AzvsbeLbOUXO8IFobrQk/Nb9uk0AwXIf
5Eo5MoluyWD/9M9yNDgil7lE1VlyQBA=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org