Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/038601df-d9e4-36c2-8e70-d92d5c3b64ed.roa
File: 038601df-d9e4-36c2-8e70-d92d5c3b64ed.roa (raw, json)
Hash identifier: gTXUiEWZNAOP9vatz3l5kBM+YNY7lClj0kb8D3214NE=
Subject key identifier: 68:62:21:CF:56:21:33:32:C1:D2:5A:E5:9A:87:04:F4:4C:81:64:B9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB03E6894C52C879D4A3300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/038601df-d9e4-36c2-8e70-d92d5c3b64ed.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21724
IP address blocks: 206.47.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:3e:68:94:c5:2c:87:9d:4a:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=e433045d-4443-4b52-999c-b20c9d052ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:b8:ec:57:d0:7b:3c:2e:c7:bb:24:48:1d:
d8:f4:4e:e9:1e:87:eb:3e:0e:7e:b6:b9:e4:02:40:
34:83:b3:8e:77:0e:03:37:51:ea:de:2d:76:a8:15:
5e:26:bc:6f:eb:81:6e:9d:00:06:13:82:a8:72:f7:
b1:fd:7a:14:58:04:70:46:b3:b9:5e:a5:43:a1:b8:
7c:af:d4:62:85:ef:c4:a1:c1:db:65:78:da:fa:df:
7f:e3:13:20:d4:be:90:b2:c1:d2:ff:a7:e7:79:d4:
0b:30:66:eb:79:6a:02:85:5c:14:93:01:9e:94:01:
6e:ac:61:28:c3:0c:38:9d:2a:f5:2c:34:fe:38:90:
38:55:4b:a6:4d:b4:f4:e8:b5:d3:4f:42:35:28:c3:
5f:f0:19:c1:d0:e6:28:17:43:5f:ae:35:cc:43:09:
1a:ff:e3:58:7a:25:7c:3b:cf:a6:00:5c:49:b2:1c:
c2:70:a7:b2:a0:e8:28:42:47:aa:9d:b0:4d:61:52:
1d:1e:04:34:04:c9:f4:71:b5:56:0c:56:53:75:1b:
44:cd:fa:3d:ec:d9:1c:09:ae:6e:63:54:f1:78:b1:
8b:46:28:67:4a:26:85:68:0d:4a:8f:75:66:e7:94:
06:9c:da:85:d9:70:a9:54:7f:a1:83:45:c3:bd:63:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:21:CF:56:21:33:32:C1:D2:5A:E5:9A:87:04:F4:4C:81:64:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/038601df-d9e4-36c2-8e70-d92d5c3b64ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:46:58:c5:75:5b:e8:2b:c5:d1:96:08:34:19:7a:65:47:59:
b2:be:67:d7:98:ac:f7:54:0b:96:e8:72:12:2f:14:58:c1:79:
43:6d:90:e4:5e:bf:06:c8:7a:35:23:74:73:17:e6:6e:d4:25:
b7:e9:9a:e9:00:16:93:68:6e:67:0f:77:25:d5:3f:14:b8:21:
87:a1:38:fc:85:22:0e:77:6a:91:46:2e:63:57:a0:94:87:cd:
39:0e:2e:62:16:ec:f3:87:61:fb:c4:c5:94:f0:47:9d:c6:4d:
51:35:78:86:3c:58:9d:16:fe:5e:db:21:d8:fb:ad:63:88:b2:
ab:91:2f:2d:ac:1d:7a:1c:2d:cf:cf:9b:6c:da:32:24:ea:49:
d1:76:72:5a:e4:84:5b:14:46:33:73:46:fb:8f:aa:e9:9b:5c:
f6:af:3a:4b:ce:8a:ce:a6:7a:28:fc:6d:ac:5f:03:ef:c2:e2:
e9:b6:b5:75:b6:35:f7:7e:58:eb:7d:66:4f:54:e1:3c:4b:7b:
37:3a:3b:95:0b:65:ad:8f:dd:50:1b:f2:ba:1a:41:62:ae:ac:
20:9e:80:39:15:ac:ff:d5:b2:c0:70:01:0b:6c:9c:fa:9a:fd:
75:52:21:42:fa:97:dc:a4:47:17:bb:d4:76:62:ac:af:2f:37:
f0:21:d8:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsD5olMUsh51KMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTQzMzA0NWQtNDQ0My00YjUyLTk5OWMtYjIwYzlkMDUyZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibS47FfQezwux7skSB3Y9E7pHofrPg5+trnk
AkA0g7OOdw4DN1Hq3i12qBVeJrxv64FunQAGE4Kocvex/XoUWARwRrO5XqVDobh8
r9Rihe/EocHbZXja+t9/4xMg1L6QssHS/6fnedQLMGbreWoChVwUkwGelAFurGEo
www4nSr1LDT+OJA4VUumTbT06LXTT0I1KMNf8BnB0OYoF0NfrjXMQwka/+NYeiV8
O8+mAFxJshzCcKeyoOgoQkeqnbBNYVIdHgQ0BMn0cbVWDFZTdRtEzfo97NkcCa5u
Y1TxeLGLRihnSiaFaA1Kj3Vm55QGnNqF2XCpVH+hg0XDvWM7vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhiIc9WITMywdJa5ZqHBPRMgWS5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDM4NjAxZGYtZDllNC0z
NmMyLThlNzAtZDkyZDVjM2I2NGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi+aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdGWMV1W+grxdGWCDQZemVHWbK+Z9eYrPdUC5bochIvFFjBeUNtkORe
vwbIejUjdHMX5m7UJbfpmukAFpNobmcPdyXVPxS4IYehOPyFIg53apFGLmNXoJSH
zTkOLmIW7POHYfvExZTwR53GTVE1eIY8WJ0W/l7bIdj7rWOIsquRLy2sHXocLc/P
m2zaMiTqSdF2clrkhFsURjNzRvuPqumbXPavOkvOis6meij8baxfA+/C4um2tXW2
Nfd+WOt9Zk9U4TxLezc6O5ULZa2P3VAb8roaQWKurCCegDkVrP/VssBwAQtsnPqa
/XVSIUL6l9ykRxe71HZirK8vN/Ah2Gc=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org