Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f7009b70-7aab-3fdd-a444-0571771269a1.roa
File: f7009b70-7aab-3fdd-a444-0571771269a1.roa (raw, json)
Hash identifier: mjd7httIf2KENf+Ojpue18TooqKDPGtabyg+aXJwPcU=
Subject key identifier: 17:0E:0C:E4:CE:10:DA:6D:A5:BD:EC:99:E0:FB:97:07:21:7F:68:4D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB000922B6EAF8D8F60BF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f7009b70-7aab-3fdd-a444-0571771269a1.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 204.101.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:00:92:2b:6e:af:8d:8f:60:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=ee0fa9b8-7729-46b0-ae75-3e2871d63003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:4c:88:6e:6c:66:ee:06:9b:e8:a9:35:3e:
69:60:23:c7:df:33:6f:10:7c:ff:eb:90:a4:9c:4e:
73:49:85:8e:c4:56:4a:79:96:45:b1:8c:1c:4b:fc:
7d:c8:21:d0:36:00:94:52:55:5a:20:d4:c0:d5:83:
36:45:ee:15:44:81:b1:63:0e:40:1c:08:9a:82:53:
d3:28:26:66:ce:97:47:a5:44:12:eb:60:f2:77:32:
cd:ea:b1:9d:e1:62:ed:22:be:4f:82:58:a8:77:58:
1e:87:36:94:d9:d4:f7:87:ef:03:83:23:0e:ec:69:
e7:f7:04:41:5a:c2:2b:6d:ae:5f:9c:76:c6:79:e5:
3d:ef:1a:be:b4:59:c1:35:7c:af:2e:c0:8e:22:00:
84:3e:22:87:73:5d:9e:ea:47:b0:fb:56:e8:89:56:
1f:20:c3:84:5a:9e:4a:f8:db:cf:f8:a0:a0:bd:b1:
40:92:2b:1b:8d:e2:39:00:de:fb:eb:b0:f0:83:5a:
d0:e1:97:2f:10:16:16:47:b5:5d:56:50:de:12:61:
54:bf:32:6e:f3:23:f8:11:b3:1b:17:81:d1:32:4a:
7b:9a:82:ec:5f:57:c0:7d:3b:a8:35:d0:16:34:6c:
0e:50:42:42:eb:70:b5:4c:2d:7a:39:fe:71:19:1c:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:0C:E4:CE:10:DA:6D:A5:BD:EC:99:E0:FB:97:07:21:7F:68:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f7009b70-7aab-3fdd-a444-0571771269a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:1c:9c:1c:93:e1:75:06:ba:7c:c9:29:5e:4f:b3:76:fd:d6:
94:c3:08:3c:14:85:81:f3:20:7a:1a:cb:be:da:bd:36:4b:c6:
f6:af:33:30:b6:0d:6e:2a:52:0f:0e:05:c0:53:b8:21:ee:3b:
65:e1:a7:ae:ea:d0:29:02:ad:85:aa:8e:72:2c:5f:2c:8d:ba:
37:59:b6:53:3b:45:76:17:23:d4:f4:aa:8a:2f:8d:32:bf:f0:
06:d6:78:3a:ad:91:aa:0b:9c:eb:67:33:68:d8:ee:9b:c4:c1:
fd:c7:d8:50:0e:54:43:3a:f7:a1:14:12:d4:3d:6d:60:b2:2b:
ac:8b:bc:d3:89:08:6c:a6:7a:05:71:01:70:98:ed:20:b1:f6:
5e:b5:91:aa:3c:81:bd:c3:51:ea:2e:7b:d8:80:4b:a5:c0:5f:
24:7a:b5:cd:fc:32:26:37:4b:74:29:a8:02:d7:d6:ce:e3:c0:
2b:19:67:b2:db:51:44:42:a9:ca:87:f2:d3:a4:ca:63:e5:ec:
8c:ad:bb:a7:fc:6c:12:d0:5e:12:f3:0a:11:89:6d:49:69:61:
6e:01:87:a7:ef:4f:bb:cf:fe:d0:28:3c:56:f5:00:ec:b9:6c:
c8:79:69:20:c1:02:68:33:e5:d9:76:c4:7a:0f:85:24:b2:f3:
f2:33:c4:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsACSK26vjY9gv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZWUwZmE5YjgtNzcyOS00NmIwLWFlNzUtM2UyODcxZDYzMDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDJMiG5sZu4Gm+ipNT5pYCPH3zNvEHz/65Ck
nE5zSYWOxFZKeZZFsYwcS/x9yCHQNgCUUlVaINTA1YM2Re4VRIGxYw5AHAiaglPT
KCZmzpdHpUQS62DydzLN6rGd4WLtIr5Pgliod1gehzaU2dT3h+8DgyMO7Gnn9wRB
WsIrba5fnHbGeeU97xq+tFnBNXyvLsCOIgCEPiKHc12e6kew+1boiVYfIMOEWp5K
+NvP+KCgvbFAkisbjeI5AN7767Dwg1rQ4ZcvEBYWR7VdVlDeEmFUvzJu8yP4EbMb
F4HRMkp7moLsX1fAfTuoNdAWNGwOUEJC63C1TC16Of5xGRwfqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcODOTOENptpb3smeD7lwchf2hNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjcwMDliNzAtN2FhYi0z
ZmRkLWE0NDQtMDU3MTc3MTI2OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMcnByT4XUGunzJKV5Ps3b91pTDCDwUhYHzIHoay77avTZLxvavMzC2
DW4qUg8OBcBTuCHuO2Xhp67q0CkCrYWqjnIsXyyNujdZtlM7RXYXI9T0qoovjTK/
8AbWeDqtkaoLnOtnM2jY7pvEwf3H2FAOVEM696EUEtQ9bWCyK6yLvNOJCGymegVx
AXCY7SCx9l61kao8gb3DUeoue9iAS6XAXyR6tc38MiY3S3QpqALX1s7jwCsZZ7Lb
UURCqcqH8tOkymPl7Iytu6f8bBLQXhLzChGJbUlpYW4Bh6fvT7vP/tAoPFb1AOy5
bMh5aSDBAmgz5dl2xHoPhSSy8/IzxLw=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org