Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/174033ca-ebaa-37ad-8e8b-391dfeb81672.roa
File: 174033ca-ebaa-37ad-8e8b-391dfeb81672.roa (raw, json)
Hash identifier: WlKyDwSTnfW+2YtP/2SdSAPp02QnyAUBJHuF3xa6HMM=
Subject key identifier: F5:8E:59:3E:D7:A0:E5:14:BF:08:35:F7:95:7F:B9:BE:12:D0:DD:74
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0B307348B6C21E324E300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/174033ca-ebaa-37ad-8e8b-391dfeb81672.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:b3:07:34:8b:6c:21:e3:24:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=4839c9db-0d60-4b29-bb98-64c3a5002ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:d3:43:92:32:25:f9:d7:0d:0f:e2:ae:84:
03:ae:aa:41:75:94:72:2c:b8:02:cf:5c:e3:7f:33:
84:1c:08:b8:db:32:7a:e0:ad:f9:5b:e6:ff:09:3d:
fa:6a:ea:99:80:cf:81:c4:b8:0b:87:d2:d8:f0:e3:
71:54:2d:8d:96:27:1b:71:8f:45:d1:81:e6:b6:92:
5f:f1:03:23:a3:39:54:d6:e2:23:bf:ec:9c:36:d3:
b4:1f:8b:6f:a8:3e:89:ec:85:0d:ba:82:fb:45:35:
31:53:e8:ec:23:a5:d5:fd:5b:b6:77:f6:a0:db:c7:
d4:df:ac:95:a5:fc:f3:4c:e4:da:e0:07:fc:80:31:
44:23:17:b1:68:54:64:3d:9e:c2:b7:8b:f9:9c:51:
2d:b5:fc:52:4d:4a:f2:bc:91:f4:f6:1c:1a:f6:2c:
a3:ab:cb:be:87:6d:1a:89:66:cd:e4:37:fe:7e:20:
99:43:da:2a:a6:18:d9:33:35:a5:28:8b:03:88:c9:
be:f1:1d:88:eb:03:ba:4d:8d:73:43:cc:5f:e3:f9:
c8:da:dc:94:36:3b:69:e5:50:f3:f4:97:61:ed:61:
3d:39:6c:51:e4:8f:0d:a2:40:a4:23:a7:1f:0b:7b:
fa:a6:7b:d7:24:14:cd:b0:ec:57:84:d0:12:02:e6:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:59:3E:D7:A0:E5:14:BF:08:35:F7:95:7F:B9:BE:12:D0:DD:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/174033ca-ebaa-37ad-8e8b-391dfeb81672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:94:4f:a6:d5:04:23:f5:4c:3c:68:90:62:b0:83:e4:c3:84:
d1:bc:ea:9d:9e:46:b1:d7:f3:b8:83:41:50:d5:6e:b5:ff:06:
13:98:1c:97:ae:ea:bb:52:44:d4:11:8c:a0:51:6f:60:73:f0:
e2:2d:b7:ac:65:12:cd:a7:cc:f2:3a:b3:37:dc:51:1e:d8:e7:
0f:bf:86:bf:72:58:72:dd:b8:37:ea:6d:c2:2b:b4:06:f5:6d:
82:d1:e6:09:b7:f7:19:53:c0:d1:2a:51:99:e8:cd:25:c9:01:
1b:f0:0c:cd:70:ee:d9:3e:b5:c2:7b:06:fe:03:60:ef:c5:8c:
0b:62:bf:b0:6f:ff:1a:65:18:10:d4:d5:c4:66:d9:94:b0:ae:
97:c3:e7:35:9b:43:68:00:25:e1:7a:4e:47:04:ee:03:92:34:
ab:7d:ec:4c:57:0d:b0:3a:01:a4:89:fd:e0:cd:06:fd:7e:50:
e5:cd:f2:3f:08:be:b1:37:85:64:c3:9c:f6:bd:3a:58:ee:16:
63:8b:91:53:d2:41:2b:aa:24:5a:d6:63:6e:51:d6:5b:51:4a:
04:8d:18:8d:3b:e0:0d:1f:51:1e:cf:c0:64:6d:e5:17:81:c5:
04:59:a7:f0:2d:20:6f:3b:4d:5e:e7:70:99:ae:b7:9e:6c:fb:
b5:85:65:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsLMHNItsIeMk4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
NDgzOWM5ZGItMGQ2MC00YjI5LWJiOTgtNjRjM2E1MDAyZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnDTQ5IyJfnXDQ/iroQDrqpBdZRyLLgCz1zj
fzOEHAi42zJ64K35W+b/CT36auqZgM+BxLgLh9LY8ONxVC2NlicbcY9F0YHmtpJf
8QMjozlU1uIjv+ycNtO0H4tvqD6J7IUNuoL7RTUxU+jsI6XV/Vu2d/ag28fU36yV
pfzzTOTa4Af8gDFEIxexaFRkPZ7Ct4v5nFEttfxSTUryvJH09hwa9iyjq8u+h20a
iWbN5Df+fiCZQ9oqphjZMzWlKIsDiMm+8R2I6wO6TY1zQ8xf4/nI2tyUNjtp5VDz
9Jdh7WE9OWxR5I8NokCkI6cfC3v6pnvXJBTNsOxXhNASAuZLEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWOWT7XoOUUvwg195V/ub4S0N10MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTc0MDMzY2EtZWJhYS0z
N2FkLThlOGItMzkxZGZlYjgxNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6SmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuUT6bVBCP1TDxokGKwg+TDhNG86p2eRrHX87iDQVDVbrX/BhOYHJeu
6rtSRNQRjKBRb2Bz8OItt6xlEs2nzPI6szfcUR7Y5w+/hr9yWHLduDfqbcIrtAb1
bYLR5gm39xlTwNEqUZnozSXJARvwDM1w7tk+tcJ7Bv4DYO/FjAtiv7Bv/xplGBDU
1cRm2ZSwrpfD5zWbQ2gAJeF6TkcE7gOSNKt97ExXDbA6AaSJ/eDNBv1+UOXN8j8I
vrE3hWTDnPa9OljuFmOLkVPSQSuqJFrWY25R1ltRSgSNGI074A0fUR7PwGRt5ReB
xQRZp/AtIG87TV7ncJmut55s+7WFZcI=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org