Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/00870f51-c88f-3f6f-b9c6-981ff9768636.roa
File: 00870f51-c88f-3f6f-b9c6-981ff9768636.roa (raw, json)
Hash identifier: neHLbp4oC1Sh2TcayiZDt6YUPIXFByvVR7fd2K/rFu0=
Subject key identifier: DF:C5:D3:22:EF:67:C4:9E:DD:5F:39:83:F5:28:C1:CF:17:BA:6C:0F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4CFEF9964679C7F2BD780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/00870f51-c88f-3f6f-b9c6-981ff9768636.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 142.198.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:cf:ef:99:64:67:9c:7f:2b:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=bcf5575d-ebd9-4e22-b4f0-478e2d262031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:6b:d8:ea:70:ff:04:ca:f5:fc:cd:94:e1:
29:ab:94:5d:21:9a:50:85:04:7c:d3:e2:0f:e0:68:
b6:47:22:40:5d:40:4d:67:43:01:3f:87:6b:aa:2d:
93:7f:f8:44:e8:a8:71:81:61:90:e3:85:fe:0c:53:
fd:de:a4:35:3d:b4:94:7f:5e:43:b9:a6:b5:ce:32:
6d:96:fb:5b:07:17:70:f0:d4:f5:47:f0:d3:35:d3:
93:8e:0e:09:ab:8b:f4:e0:eb:ef:3e:36:21:49:52:
ed:13:65:54:51:81:8e:f0:5a:bd:f4:52:3a:18:50:
9e:48:ed:21:14:07:1c:00:20:43:e0:27:bf:dd:26:
e7:61:3e:0d:bc:90:fe:32:4c:ed:ac:88:ee:1b:14:
43:fa:cc:2c:11:e9:d0:c1:4b:7f:20:b3:cc:c1:62:
a0:f6:b0:c9:fb:1d:2f:ed:4a:bf:dc:d6:eb:40:c1:
c3:aa:5a:f0:ea:e5:17:f0:fe:a8:e4:b9:9a:dc:ee:
1f:15:8f:f6:51:f7:cd:4a:45:fb:bb:ed:a1:da:be:
26:12:09:f9:40:22:b6:01:36:ae:31:21:04:a0:c6:
d5:fb:3b:0a:ee:72:8b:83:69:9b:46:97:46:45:53:
65:79:cd:db:03:24:df:ff:e7:86:13:33:59:9f:5a:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:D3:22:EF:67:C4:9E:DD:5F:39:83:F5:28:C1:CF:17:BA:6C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/00870f51-c88f-3f6f-b9c6-981ff9768636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e0:32:a4:c2:ec:93:7e:61:f5:52:79:66:c5:c6:46:b1:23:
09:08:5c:61:41:42:90:89:0e:92:62:e3:2a:4f:5f:8b:5d:b3:
ba:25:74:33:66:9d:7a:67:8c:16:d1:0f:5d:e6:65:22:9c:3d:
3a:8e:36:a9:86:ca:64:a0:2a:86:36:5f:48:b6:5f:d8:a1:ce:
ac:4d:a6:83:fa:76:9e:75:8f:d0:79:65:d6:52:3e:a0:e7:a1:
de:f7:40:b7:1e:3b:e5:fe:0f:b1:0c:86:12:49:ab:a3:04:6f:
10:37:42:eb:bc:92:24:dd:23:92:3f:da:f8:5b:c8:ba:32:07:
71:65:e1:5d:8b:6d:0a:c2:d0:37:59:7a:5a:bb:99:99:c8:ea:
66:1f:8e:3b:68:47:ca:f4:4f:01:75:fc:38:3b:1b:d1:4a:05:
b5:f1:5b:e4:27:b1:1f:a8:7c:47:42:35:26:c9:96:b3:58:93:
f1:46:58:87:d9:74:d3:f3:11:29:93:a4:2b:fc:c8:75:9a:2d:
d3:53:41:ca:58:e5:52:87:07:29:fe:83:b1:a4:da:d3:48:34:
af:a0:90:51:06:e4:29:3c:17:7b:0f:9b:31:e4:fd:e1:75:b5:
df:73:fc:46:e4:b8:60:85:fc:94:64:8e:b7:b2:ff:b1:3f:e1:
d8:9e:a7:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEOa5M/vmWRnnH8r14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
YmNmNTU3NWQtZWJkOS00ZTIyLWI0ZjAtNDc4ZTJkMjYyMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuupr2Opw/wTK9fzNlOEpq5RdIZpQhQR80+IP
4Gi2RyJAXUBNZ0MBP4drqi2Tf/hE6KhxgWGQ44X+DFP93qQ1PbSUf15Duaa1zjJt
lvtbBxdw8NT1R/DTNdOTjg4Jq4v04OvvPjYhSVLtE2VUUYGO8Fq99FI6GFCeSO0h
FAccACBD4Ce/3SbnYT4NvJD+MkztrIjuGxRD+swsEenQwUt/ILPMwWKg9rDJ+x0v
7Uq/3NbrQMHDqlrw6uUX8P6o5Lma3O4fFY/2UffNSkX7u+2h2r4mEgn5QCK2ATau
MSEEoMbV+zsK7nKLg2mbRpdGRVNlec3bAyTf/+eGEzNZn1ryuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN/F0yLvZ8Se3V85g/Uowc8XumwPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDA4NzBmNTEtYzg4Zi0z
ZjZmLWI5YzYtOTgxZmY5NzY4NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjsYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACuAypMLsk35h9VJ5ZsXGRrEjCQhcYUFCkIkOkmLjKk9fi12zuiV0M2ad
emeMFtEPXeZlIpw9Oo42qYbKZKAqhjZfSLZf2KHOrE2mg/p2nnWP0Hll1lI+oOeh
3vdAtx475f4PsQyGEkmrowRvEDdC67ySJN0jkj/a+FvIujIHcWXhXYttCsLQN1l6
WruZmcjqZh+OO2hHyvRPAXX8ODsb0UoFtfFb5CexH6h8R0I1JsmWs1iT8UZYh9l0
0/MRKZOkK/zIdZot01NByljlUocHKf6DsaTa00g0r6CQUQbkKTwXew+bMeT94XW1
33P8RuS4YIX8lGSOt7L/sT/h2J6n1Q==
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org