Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa
File: c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa (raw, json)
Hash identifier: RzhBCIoQaQH65pJcUJzUhCVE10x/GK8BPhsPrTnGSpk=
Subject key identifier: 02:48:2D:2F:0F:CB:F9:DD:AF:0C:00:E1:4A:CC:8F:40:B2:A1:00:A8
Certificate issuer: /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial: 010D0C9F432858425D3E037DDEEC86799F111AA0
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa
Signing time: Wed 28 Jun 2023 01:00:17 +0000
ROA not before: Wed 28 Jun 2023 01:00:17 +0000
ROA not after: Tue 26 Sep 2023 01:00:17 +0000
asID: 3477
IP address blocks: 140.90.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:5d:3e:03:7d:de:ec:86:79:9f:11:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Validity
Not Before: Jun 28 01:00:17 2023 GMT
Not After : Sep 26 01:00:17 2023 GMT
Subject: CN=7a3fd809-be1a-4491-b2a8-a59b40f905f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:08:ad:3d:6b:a1:2c:99:ad:38:5d:a8:e9:
3b:a9:ef:8e:44:59:ea:8a:a6:3d:c7:fb:13:8f:61:
62:f9:e8:a5:13:26:06:39:da:a4:64:14:a6:0b:d6:
1a:d9:91:d4:b6:c8:f0:47:7c:d2:68:e1:66:59:dd:
81:d2:a9:59:88:70:da:d0:b6:86:ba:57:3d:1b:4e:
3a:63:3b:28:71:50:17:e7:f6:ab:49:12:03:b0:29:
33:8c:32:23:72:bb:e3:47:28:9c:af:1b:ef:e9:63:
81:63:23:8f:09:48:2a:70:e6:c5:93:a4:5a:54:d5:
f5:7a:ca:fb:18:ea:57:91:15:2a:2f:09:48:92:fb:
d9:db:ae:9f:6d:33:69:af:77:b6:70:5d:df:c9:77:
ed:fc:2b:75:4f:c4:79:d2:1e:a2:08:66:bc:19:5f:
cf:e9:1e:4b:09:37:f8:1c:91:e8:22:37:da:c0:e3:
ae:60:83:49:87:d4:6c:3f:72:46:d4:05:d6:4e:70:
fe:1a:df:ad:be:cd:4f:25:60:00:59:43:9b:b9:fd:
a2:3a:00:57:bd:48:a8:81:d5:80:a2:0f:07:4d:ed:
64:d9:59:b5:95:68:62:4c:9c:2a:09:98:82:6b:c7:
63:37:b8:99:d6:ca:47:4b:0b:ff:fc:46:da:e3:95:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:2D:2F:0F:CB:F9:DD:AF:0C:00:E1:4A:CC:8F:40:B2:A1:00:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/c5fa6dda-bc6c-316a-a05b-4efdf6055c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
X509v3 Authority Key Identifier:
keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
sbgp-ipAddrBlock: critical
IPv4:
140.90.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:46:28:1d:33:58:91:b4:d7:90:6a:57:79:b4:18:7f:e1:c4:
2e:e5:ea:ae:8b:8f:c9:58:db:6e:03:b0:c7:a1:5f:6e:61:5f:
68:88:7c:4a:49:1b:d8:1f:b0:8e:7f:47:80:2e:c4:76:1a:b7:
8c:35:f4:7a:77:f2:96:30:a8:a7:d3:f5:19:92:34:82:4d:dc:
2f:50:7b:13:82:74:63:8f:42:90:de:9c:2f:d0:dc:c8:08:ad:
fb:ca:24:bd:30:af:ed:72:43:57:a9:04:a9:0c:82:15:2e:f7:
91:dd:0c:c3:36:01:52:34:89:d0:64:2b:ba:58:c8:36:f1:b6:
ad:f5:f4:88:1a:c0:2b:31:ed:a4:b3:4e:d4:15:37:9b:42:73:
d7:c9:2e:b5:4c:3e:70:ff:96:1c:d9:15:2a:74:73:38:92:3f:
cc:bf:ee:e9:ec:50:0b:5e:da:aa:e8:5e:94:61:65:77:c6:5b:
1a:dd:fd:f0:33:01:c0:ca:51:c0:fa:56:06:98:0e:d8:0c:16:
ee:c7:21:83:f6:cb:31:a6:1c:79:c8:56:e2:e1:ac:18:29:7d:
32:6f:7c:fe:80:b0:da:12:0a:10:23:11:62:4d:37:f1:4c:0f:
70:f5:5a:54:13:b0:ad:89:b6:7d:55:99:af:34:a8:78:d7:b1:
ae:5b:98:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJdPgN93uyGeZ8RGqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMwNGE5ZWEtZGRhZC00NDQyLWJkYWItOGQ4OTE2ZmY3
OGY5MB4XDTIzMDYyODAxMDAxN1oXDTIzMDkyNjAxMDAxN1owLzEtMCsGA1UEAxMk
N2EzZmQ4MDktYmUxYS00NDkxLWIyYTgtYTU5YjQwZjkwNWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztsIrT1roSyZrThdqOk7qe+ORFnqiqY9x/sT
j2Fi+eilEyYGOdqkZBSmC9Ya2ZHUtsjwR3zSaOFmWd2B0qlZiHDa0LaGulc9G046
YzsocVAX5/arSRIDsCkzjDIjcrvjRyicrxvv6WOBYyOPCUgqcObFk6RaVNX1esr7
GOpXkRUqLwlIkvvZ266fbTNpr3e2cF3fyXft/Ct1T8R50h6iCGa8GV/P6R5LCTf4
HJHoIjfawOOuYINJh9RsP3JG1AXWTnD+Gt+tvs1PJWAAWUObuf2iOgBXvUiogdWA
og8HTe1k2Vm1lWhiTJwqCZiCa8djN7iZ1spHSwv//Eba45WUOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJILS8Py/ndrwwA4UrMj0CyoQCoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzA0
YTllYS1kZGFkLTQ0NDItYmRhYi04ZDg5MTZmZjc4ZjkvYzVmYTZkZGEtYmM2Yy0z
MTZhLWEwNWItNGVmZGY2MDU1Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMwNGE5ZWEtZGRhZC00NDQyLWJk
YWItOGQ4OTE2ZmY3OGY5LzQzMDRhOWVhLWRkYWQtNDQ0Mi1iZGFiLThkODkxNmZm
NzhmOS5jcmwwHwYDVR0jBBgwFoAUfmIVAkIhp7ubOsiZ2sLLjiMotEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzA0YTllYS1kZGFkLTQ0NDItYmRhYi04ZDg5
MTZmZjc4ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlGKB0zWJG015BqV3m0GH/hxC7l6q6Lj8lY224DsMehX25hX2iIfEpJ
G9gfsI5/R4AuxHYat4w19Hp38pYwqKfT9RmSNIJN3C9QexOCdGOPQpDenC/Q3MgI
rfvKJL0wr+1yQ1epBKkMghUu95HdDMM2AVI0idBkK7pYyDbxtq319IgawCsx7aSz
TtQVN5tCc9fJLrVMPnD/lhzZFSp0cziSP8y/7unsUAte2qroXpRhZXfGWxrd/fAz
AcDKUcD6VgaYDtgMFu7HIYP2yzGmHHnIVuLhrBgpfTJvfP6AsNoSChAjEWJNN/FM
D3D1WlQTsK2Jtn1Vma80qHjXsa5bmOA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:46 2024 by rpki-client on console-ams.rpki-client.org