Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bf1695b-c6a9-3e69-b2ad-d475954b7ad6.roa
File: 0bf1695b-c6a9-3e69-b2ad-d475954b7ad6.roa (raw, json)
Hash identifier: EcQsXsjSHuPLQNa4gyMHpVpM7JzZyLMaDGel3QmcELE=
Subject key identifier: 21:13:F3:8A:63:2C:2A:76:B2:B9:E3:43:3F:E5:06:26:60:A1:2E:57
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0B00AD4BAD4A3B767D300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bf1695b-c6a9-3e69-b2ad-d475954b7ad6.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.156.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:b0:0a:d4:ba:d4:a3:b7:67:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=1a7b440d-1a37-4d29-ad4b-83252be4090f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:fd:b1:de:77:f0:f8:a6:e0:aa:db:ce:b0:
67:09:de:2b:4f:e7:fe:61:58:c7:52:31:b3:e0:ee:
97:61:3b:df:59:bd:fd:1c:95:af:c5:92:0e:45:3c:
32:f1:52:c7:5e:65:18:f7:59:1e:51:78:c0:04:6d:
84:20:4c:22:cf:04:21:19:f5:ac:fb:7c:29:bc:c9:
84:15:c8:d8:6d:ce:71:1e:33:76:25:2b:46:a2:d8:
de:ff:d7:3f:26:88:7a:70:ee:ab:db:bd:cd:94:d1:
a4:8a:65:0b:ae:94:69:ad:5b:0d:91:79:b2:22:c8:
f1:7b:c5:4c:02:36:69:f9:73:4f:ed:3a:aa:b8:07:
7c:04:11:1a:60:3a:82:97:83:27:83:44:9e:32:1b:
ae:f4:3e:5f:d0:22:21:f1:61:45:06:60:25:a7:0b:
e1:6c:96:22:1b:fb:fd:36:eb:95:c7:d6:5a:3a:de:
fb:ba:bf:d1:1f:f8:64:ba:d7:dc:00:c5:ba:8e:b0:
25:ab:77:c6:a0:42:36:f5:7a:db:3e:8c:08:d7:d5:
77:56:39:92:0d:05:bf:0b:63:ce:76:e9:0a:fd:93:
07:d4:64:fb:a5:c3:5c:ff:cb:e9:f0:0d:13:7b:ef:
c4:0d:8d:9f:43:d7:9f:1b:f5:70:6c:32:36:1e:b7:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:F3:8A:63:2C:2A:76:B2:B9:E3:43:3F:E5:06:26:60:A1:2E:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0bf1695b-c6a9-3e69-b2ad-d475954b7ad6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b0:81:46:d8:53:61:a0:42:17:4c:5d:af:5a:7f:05:90:63:
d6:4e:d0:a0:d4:2f:b2:39:44:35:ab:67:c8:af:c8:fb:eb:c9:
96:cf:66:db:e1:54:e2:e8:5a:f4:e4:86:b7:57:9e:d4:a1:33:
c5:50:d1:3d:4a:04:14:b3:d0:6c:83:02:48:cd:30:9b:e2:33:
dd:d3:1a:d4:7a:9f:cb:68:91:59:9d:b9:f2:cc:be:d3:84:99:
5b:ed:ca:d4:6f:8a:f4:f4:17:18:fb:33:cb:5b:72:ff:0e:5a:
1b:d1:77:2b:b7:25:98:36:5d:71:43:b3:52:18:cf:52:b7:75:
67:2f:a4:87:d9:01:92:66:fc:70:5a:d5:2a:85:5a:f2:b0:8a:
10:47:19:fd:90:b1:ed:20:fe:b4:8c:4a:18:b5:0e:4d:a2:ac:
ab:05:71:30:c6:61:46:31:89:1c:a4:2a:4f:4b:b3:0a:33:74:
8d:52:f2:de:ef:95:b6:eb:2c:14:0f:c8:09:ff:14:1f:e2:a5:
e5:43:8c:63:aa:e0:ea:67:d3:72:a3:8b:95:3c:10:01:e2:0d:
c6:80:d0:d6:87:9d:bb:67:8d:60:18:c8:1c:9a:f0:95:f0:97:
bc:91:d2:aa:27:bb:03:0b:d0:d8:ba:ff:23:37:4d:db:5c:ed:
cd:d3:04:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsLAK1LrUo7dn0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MWE3YjQ0MGQtMWEzNy00ZDI5LWFkNGItODMyNTJiZTQwOTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP/9sd538Pim4KrbzrBnCd4rT+f+YVjHUjGz
4O6XYTvfWb39HJWvxZIORTwy8VLHXmUY91keUXjABG2EIEwizwQhGfWs+3wpvMmE
FcjYbc5xHjN2JStGotje/9c/Joh6cO6r273NlNGkimULrpRprVsNkXmyIsjxe8VM
AjZp+XNP7TqquAd8BBEaYDqCl4Mng0SeMhuu9D5f0CIh8WFFBmAlpwvhbJYiG/v9
NuuVx9ZaOt77ur/RH/hkutfcAMW6jrAlq3fGoEI29XrbPowI19V3VjmSDQW/C2PO
dukK/ZMH1GT7pcNc/8vp8A0Te+/EDY2fQ9efG/VwbDI2HrdCFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCET84pjLCp2srnjQz/lBiZgoS5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGJmMTY5NWItYzZhOS0z
ZTY5LWIyYWQtZDQ3NTk1NGI3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6ScMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2wgUbYU2GgQhdMXa9afwWQY9ZO0KDUL7I5RDWrZ8ivyPvryZbPZtvh
VOLoWvTkhrdXntShM8VQ0T1KBBSz0GyDAkjNMJviM93TGtR6n8tokVmdufLMvtOE
mVvtytRvivT0Fxj7M8tbcv8OWhvRdyu3JZg2XXFDs1IYz1K3dWcvpIfZAZJm/HBa
1SqFWvKwihBHGf2Qse0g/rSMShi1Dk2irKsFcTDGYUYxiRykKk9LswozdI1S8t7v
lbbrLBQPyAn/FB/ipeVDjGOq4Opn03Kji5U8EAHiDcaA0NaHnbtnjWAYyBya8JXw
l7yR0qonuwML0Ni6/yM3Tdtc7c3TBCA=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org