Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fade1bd6-3d53-3d80-80aa-cd5bd15d1916.roa
File: fade1bd6-3d53-3d80-80aa-cd5bd15d1916.roa (raw, json)
Hash identifier: /Er+va19+Kgx+UjPlB/i2vu8GJ4BddOGnW6VuMIuWeA=
Subject key identifier: 54:A3:43:23:17:57:1C:76:1D:EF:C9:3F:09:38:FF:E0:8B:00:DB:9E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314CA5EB8C6C169778B1200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fade1bd6-3d53-3d80-80aa-cd5bd15d1916.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 577
IP address blocks: 199.243.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:ca:5e:b8:c6:c1:69:77:8b:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e201df3c-7460-41c6-82e7-e0ce9ef201fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:fd:56:c2:f9:c7:ff:c3:cd:d2:98:c2:c1:
81:47:18:42:b6:f2:2b:c4:c5:63:d6:ad:1f:15:ba:
2e:f5:c8:73:2d:0a:c3:2a:28:42:ab:df:04:e8:90:
6a:80:71:39:62:40:b0:94:79:56:72:36:4f:8f:bc:
c6:c2:22:db:4a:d2:ad:41:00:07:50:79:0c:66:25:
ff:fe:79:19:a4:bb:14:44:f4:91:c2:ea:cf:7e:3f:
77:2b:4e:5b:3f:b6:15:22:0d:d9:37:27:70:f5:1f:
15:d8:e9:3b:36:69:1c:7f:a8:e2:36:c2:51:97:a6:
60:20:4c:bf:35:cc:12:fe:e1:6d:8c:a3:ee:f7:ef:
99:f0:c4:4b:43:ea:0c:97:a6:77:91:a6:f0:ad:83:
d3:21:8d:81:95:9b:d2:23:63:4a:2e:bf:12:dd:04:
82:0d:e6:3c:7d:ac:7b:f6:9b:1f:18:38:3e:0d:0c:
c1:c9:c2:08:26:1d:79:f1:cd:c3:a3:d8:30:01:fe:
e3:61:5d:27:fd:fb:56:5c:10:bc:54:d6:42:18:0d:
56:11:d3:d9:e0:7e:12:ef:9b:6c:dc:6e:1e:2b:80:
7d:b6:27:f0:04:b3:d1:c6:c7:c8:e6:45:81:96:94:
97:28:f8:02:6f:2c:89:c8:83:0e:ed:46:86:42:88:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A3:43:23:17:57:1C:76:1D:EF:C9:3F:09:38:FF:E0:8B:00:DB:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fade1bd6-3d53-3d80-80aa-cd5bd15d1916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:60:5c:39:d9:c3:d2:79:d7:80:84:58:92:ed:24:dd:92:a3:
9d:36:e8:ce:f3:79:08:a2:8b:25:82:95:c2:f8:74:72:3f:63:
6b:bb:a4:cf:aa:87:4e:40:5c:b7:39:c1:ad:8d:03:b5:1e:a1:
e3:d4:df:40:58:e8:6b:dd:91:ed:f9:20:ef:4f:a8:e3:9f:a1:
f5:7d:c2:09:62:91:2e:3b:1c:a4:70:c0:91:7b:3b:2d:6e:01:
39:45:4e:82:9d:be:b1:67:01:46:45:a1:a4:fe:2e:86:0e:68:
a5:bd:74:f0:29:a5:f4:73:46:31:6c:33:c7:31:00:11:ec:c2:
6f:f5:57:a1:af:7f:8a:de:af:46:6c:89:37:19:49:00:80:77:
c9:11:b3:8d:78:94:6a:f5:5e:03:aa:cb:77:11:a5:d7:6d:77:
dc:5d:fa:1f:00:ba:db:ae:f6:ca:e4:86:d7:4b:20:3c:23:8a:
8a:a1:95:11:1b:74:08:4d:a1:ec:67:b8:b4:05:4c:8b:84:39:
85:b3:fc:84:03:be:6c:d2:66:55:49:7f:07:5c:09:25:d2:9c:
40:01:6a:8d:f0:16:21:30:07:14:5f:af:d2:80:87:ee:7f:c9:
0b:64:c3:5c:9b:05:09:fd:0b:b0:83:1b:c1:68:f0:b5:d0:b4:
2b:4a:2f:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFMpeuMbBaXeLEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTIwMWRmM2MtNzQ2MC00MWM2LTgyZTctZTBjZTllZjIwMWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+79VsL5x//DzdKYwsGBRxhCtvIrxMVj1q0f
Fbou9chzLQrDKihCq98E6JBqgHE5YkCwlHlWcjZPj7zGwiLbStKtQQAHUHkMZiX/
/nkZpLsURPSRwurPfj93K05bP7YVIg3ZNydw9R8V2Ok7Nmkcf6jiNsJRl6ZgIEy/
NcwS/uFtjKPu9++Z8MRLQ+oMl6Z3kabwrYPTIY2BlZvSI2NKLr8S3QSCDeY8fax7
9psfGDg+DQzBycIIJh158c3Do9gwAf7jYV0n/ftWXBC8VNZCGA1WEdPZ4H4S75ts
3G4eK4B9tifwBLPRxsfI5kWBlpSXKPgCbyyJyIMO7UaGQogviwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSjQyMXVxx2He/JPwk4/+CLANueMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZmFkZTFiZDYtM2Q1My0z
ZDgwLTgwYWEtY2Q1YmQxNWQxOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGx/OAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxgXDnZw9J514CEWJLtJN2So5026M7zeQiiiyWClcL4dHI/Y2u7pM+q
h05AXLc5wa2NA7UeoePU30BY6Gvdke35IO9PqOOfofV9wglikS47HKRwwJF7Oy1u
ATlFToKdvrFnAUZFoaT+LoYOaKW9dPAppfRzRjFsM8cxABHswm/1V6Gvf4rer0Zs
iTcZSQCAd8kRs414lGr1XgOqy3cRpddtd9xd+h8Autuu9srkhtdLIDwjioqhlREb
dAhNoexnuLQFTIuEOYWz/IQDvmzSZlVJfwdcCSXSnEABao3wFiEwBxRfr9KAh+5/
yQtkw1ybBQn9C7CDG8Fo8LXQtCtKL1Q=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org