Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddd27722-0fe2-386d-a480-fb3a456f1555.roa
File: ddd27722-0fe2-386d-a480-fb3a456f1555.roa (raw, json)
Hash identifier: pLYFYp6J2dNgWtDff8IVIZzD27eTCGzMN7RQP4D6USs=
Subject key identifier: 8D:04:3D:5D:0F:E5:CD:C6:51:B8:3B:36:31:D0:44:7E:16:3D:65:D9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931658EB90672F58C2CDB580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddd27722-0fe2-386d-a480-fb3a456f1555.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 35911
IP address blocks: 209.226.56.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:58:eb:90:67:2f:58:c2:cd:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=403e80ea-19de-402b-8b91-50b6c1e69547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:ba:37:92:97:65:de:47:62:ee:d4:d0:5f:
1a:66:51:ca:ba:b1:ea:38:d3:ce:ee:db:01:d3:1d:
29:24:f6:71:4b:3e:80:e5:eb:18:81:fd:96:32:59:
39:16:49:ae:fa:98:b1:77:8b:9e:39:df:86:b2:32:
c8:d4:2f:4c:17:fc:bf:2a:0a:1e:e9:ca:e7:b0:a9:
8f:53:84:9a:69:af:be:bd:8e:a8:3a:4b:6e:60:73:
e2:38:9d:23:0b:54:5a:ce:80:3e:4b:de:ca:ed:df:
18:2e:e6:27:a5:74:82:ad:a8:e2:f2:2f:41:da:37:
75:8a:1e:97:40:b6:26:de:b0:38:21:c2:48:f0:db:
31:3c:e8:1e:ad:d7:75:8b:51:8a:b7:c8:aa:35:24:
76:8c:35:1e:b9:9b:89:d1:e2:8f:ba:a8:9a:c5:86:
4b:2a:2e:be:2e:79:e2:a5:c3:0d:50:ae:ad:85:b5:
18:c0:e2:e5:f2:90:21:24:4a:e9:6c:34:53:23:6c:
40:b5:20:77:08:f3:75:86:91:14:b3:55:63:70:94:
d8:d7:d5:25:66:09:a8:d0:93:13:2f:c1:4b:56:f1:
ad:cf:85:5e:18:4b:c6:ae:0a:02:39:77:90:3e:e4:
ec:c7:38:34:27:64:ce:16:59:68:1b:bf:c2:81:ae:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:3D:5D:0F:E5:CD:C6:51:B8:3B:36:31:D0:44:7E:16:3D:65:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ddd27722-0fe2-386d-a480-fb3a456f1555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:53:39:ce:71:de:dc:86:57:5a:21:d7:8e:bb:6d:a2:ee:6b:
17:fd:41:1c:e9:b2:94:81:72:20:f2:9b:55:a7:67:db:ad:8c:
4c:6a:2b:c6:5c:e5:d1:8b:f5:69:1b:92:53:99:80:2b:d2:ae:
01:b6:d2:a7:7c:5f:73:29:74:98:4c:3d:59:55:ce:a7:45:8e:
5e:60:45:2c:78:42:40:5b:f2:44:bd:0f:24:40:18:c3:51:64:
b3:f3:56:c5:f4:dd:d6:2a:88:a0:ef:22:91:88:31:b3:25:44:
f3:0d:19:66:c4:d6:ac:89:e7:d4:7f:6f:18:fe:ea:51:23:1d:
d4:85:f4:80:11:3e:d5:e1:bb:34:1c:d2:9e:08:b8:9c:67:58:
15:29:6f:d5:2f:a9:c5:3e:a8:ff:22:20:f3:7b:18:1c:b7:f5:
30:f9:af:95:b1:8a:64:66:d9:09:06:84:eb:b8:11:4d:ea:e4:
0d:ee:66:9a:30:c5:e7:7a:d5:e8:a5:a7:be:49:91:df:ed:19:
37:7b:66:9f:54:5e:2d:66:f4:cf:4c:ef:a3:b2:de:18:37:d7:
35:6f:38:03:35:cd:53:d1:4a:52:98:8c:23:26:b3:36:fb:0f:
d8:52:94:f7:88:9b:70:5e:fa:f2:a7:69:93:36:e6:73:5d:5f:
57:b0:06:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFljrkGcvWMLNtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDAzZTgwZWEtMTlkZS00MDJiLThiOTEtNTBiNmMxZTY5NTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX66N5KXZd5HYu7U0F8aZlHKurHqONPO7tsB
0x0pJPZxSz6A5esYgf2WMlk5Fkmu+pixd4ueOd+GsjLI1C9MF/y/Kgoe6crnsKmP
U4Saaa++vY6oOktuYHPiOJ0jC1RazoA+S97K7d8YLuYnpXSCraji8i9B2jd1ih6X
QLYm3rA4IcJI8NsxPOgerdd1i1GKt8iqNSR2jDUeuZuJ0eKPuqiaxYZLKi6+Lnni
pcMNUK6thbUYwOLl8pAhJErpbDRTI2xAtSB3CPN1hpEUs1VjcJTY19UlZgmo0JMT
L8FLVvGtz4VeGEvGrgoCOXeQPuTsxzg0J2TOFlloG7/Cga4I0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0EPV0P5c3GUbg7NjHQRH4WPWXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZGRkMjc3MjItMGZlMi0z
ODZkLWE0ODAtZmIzYTQ1NmYxNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0eI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAClTOc5x3tyGV1oh1467baLuaxf9QRzpspSBciDym1WnZ9utjExqK8Zc
5dGL9WkbklOZgCvSrgG20qd8X3MpdJhMPVlVzqdFjl5gRSx4QkBb8kS9DyRAGMNR
ZLPzVsX03dYqiKDvIpGIMbMlRPMNGWbE1qyJ59R/bxj+6lEjHdSF9IARPtXhuzQc
0p4IuJxnWBUpb9UvqcU+qP8iIPN7GBy39TD5r5WximRm2QkGhOu4EU3q5A3uZpow
xed61eilp75Jkd/tGTd7Zp9UXi1m9M9M76Oy3hg31zVvOAM1zVPRSlKYjCMmszb7
D9hSlPeIm3Be+vKnaZM25nNdX1ewBiA=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org