Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9fb5be3-1720-3c4e-8ef2-bcf9e8beff49.roa
File: a9fb5be3-1720-3c4e-8ef2-bcf9e8beff49.roa (raw, json)
Hash identifier: Myv7VoccmMtl1Qr+w8g94XX2y5Zdj7w0kSUq3g7n2L8=
Subject key identifier: B7:62:53:B0:14:A3:EA:83:67:9F:4B:22:54:8D:FE:BF:18:72:66:85
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285842AA1177A8C353F323E945F770
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9fb5be3-1720-3c4e-8ef2-bcf9e8beff49.roa
Signing time: Mon 24 Jul 2023 12:00:00 +0000
ROA not before: Mon 24 Jul 2023 12:00:00 +0000
ROA not after: Tue 24 Oct 2023 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:11:77:a8:c3:53:f3:23:e9:45:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jul 24 12:00:00 2023 GMT
Not After : Oct 24 04:00:00 2023 GMT
Subject: CN=597a5fdb-e0ef-4ed0-ae12-d8b15cf025be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:0e:9b:e4:17:48:1d:15:65:b1:eb:0d:96:
80:62:bc:48:b0:e0:af:d8:ab:f4:74:4e:87:0d:c6:
1c:0b:b8:72:14:51:a6:81:7d:38:7b:e4:cd:cb:32:
a1:87:ed:ee:43:41:bd:4b:32:eb:e0:4a:41:6a:c6:
be:36:d5:72:e0:26:d2:47:ff:46:fc:8c:3b:22:3d:
47:19:ef:41:0f:66:68:03:45:5b:a4:e1:3f:05:98:
03:4a:8d:45:9f:97:70:a5:87:c8:72:b3:28:fe:d5:
38:2c:cc:b1:13:dd:2d:fb:f2:2c:f8:e3:7a:01:34:
17:66:38:15:0e:24:5c:8c:29:5e:d4:3d:c2:1f:18:
ab:ac:d6:8d:50:96:91:3a:7d:62:90:6d:97:c7:dd:
62:f4:b0:8f:01:0b:9b:b8:c1:67:2c:22:7e:2d:4d:
04:7b:36:cd:2e:7f:e4:a0:e1:b7:37:a3:b7:01:2a:
72:7e:07:9c:ca:fb:ce:80:b3:81:27:1b:e5:90:8d:
c4:5e:b4:78:e3:32:05:aa:e9:74:76:1f:53:15:a5:
88:fd:79:52:bb:4c:78:06:8f:02:a2:30:bc:69:8a:
cd:25:98:31:31:1d:a2:50:64:cf:66:97:f7:0b:ec:
72:8f:ab:01:5b:ad:3c:6d:b1:17:eb:5e:eb:b1:6e:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:53:B0:14:A3:EA:83:67:9F:4B:22:54:8D:FE:BF:18:72:66:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9fb5be3-1720-3c4e-8ef2-bcf9e8beff49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:a7:97:8f:ee:fe:cc:8d:db:c5:f6:f6:f1:60:50:52:c0:52:
d0:44:64:c2:70:e4:1b:4c:65:26:72:a3:4b:59:6a:06:19:85:
ef:40:fb:04:36:5f:da:40:43:82:e0:eb:f3:99:16:30:d0:ed:
51:c9:9b:e2:2c:ac:5e:c3:c7:f5:68:6d:c7:43:a1:9f:4a:80:
8b:be:ff:a4:49:71:d0:5c:75:9a:99:93:83:42:c9:c0:a6:d8:
b2:49:df:dd:82:19:70:80:53:d9:4a:2d:16:7a:78:a5:ea:3d:
14:d3:6e:17:59:08:b2:cd:7e:6f:5f:69:38:4f:2b:f5:94:77:
3e:57:2d:41:1c:09:36:df:5d:09:e3:81:85:5d:a2:59:22:2d:
8f:79:47:28:5a:57:ff:b6:ee:eb:b6:2d:0a:41:c2:0b:86:90:
f2:a0:39:44:a7:56:e9:71:78:f5:cf:d0:ca:8d:01:e4:c9:81:
70:8c:19:bc:bf:e4:36:12:64:b6:53:c8:07:f2:5f:be:52:e8:
03:ad:f6:c1:b6:b0:58:92:30:b6:0f:2f:23:d5:f1:ee:3c:bb:
e2:42:d2:ae:7e:7e:c8:91:0d:1b:43:54:81:d4:b4:b9:46:b7:
58:00:5c:03:de:b4:d3:57:48:d7:0e:d0:67:c7:84:9f:a4:bd:
1e:98:38:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqEXeow1PzI+lF93AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
NTk3YTVmZGItZTBlZi00ZWQwLWFlMTItZDhiMTVjZjAyNWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCgOm+QXSB0VZbHrDZaAYrxIsOCv2Kv0dE6H
DcYcC7hyFFGmgX04e+TNyzKhh+3uQ0G9SzLr4EpBasa+NtVy4CbSR/9G/Iw7Ij1H
Ge9BD2ZoA0VbpOE/BZgDSo1Fn5dwpYfIcrMo/tU4LMyxE90t+/Is+ON6ATQXZjgV
DiRcjCle1D3CHxirrNaNUJaROn1ikG2Xx91i9LCPAQubuMFnLCJ+LU0EezbNLn/k
oOG3N6O3ASpyfgecyvvOgLOBJxvlkI3EXrR44zIFqul0dh9TFaWI/XlSu0x4Bo8C
ojC8aYrNJZgxMR2iUGTPZpf3C+xyj6sBW608bbEX617rsW57mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdiU7AUo+qDZ59LIlSN/r8YcmaFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTlmYjViZTMtMTcyMC0z
YzRlLThlZjItYmNmOWU4YmVmZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRhz8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJanl4/u/syN28X29vFgUFLAUtBEZMJw5BtMZSZyo0tZagYZhe9A+wQ2
X9pAQ4Lg6/OZFjDQ7VHJm+IsrF7Dx/VobcdDoZ9KgIu+/6RJcdBcdZqZk4NCycCm
2LJJ392CGXCAU9lKLRZ6eKXqPRTTbhdZCLLNfm9faThPK/WUdz5XLUEcCTbfXQnj
gYVdolkiLY95RyhaV/+27uu2LQpBwguGkPKgOUSnVulxePXP0MqNAeTJgXCMGby/
5DYSZLZTyAfyX75S6AOt9sG2sFiSMLYPLyPV8e48u+JC0q5+fsiRDRtDVIHUtLlG
t1gAXAPetNNXSNcO0GfHhJ+kvR6YONU=
-----END CERTIFICATE-----
Generated at Tue Oct 24 04:07:35 2023 by rpki-client on console-ams.rpki-client.org