Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a648c06-ebf5-3fe0-9443-f9e8d1870fe2.roa
File: 1a648c06-ebf5-3fe0-9443-f9e8d1870fe2.roa (raw, json)
Hash identifier: m3Bb2yCaQ+SLu1Y3AMxdUGV03Ira3ZP4hKBBeQ1w5fE=
Subject key identifier: BF:E0:45:58:F1:BB:86:6B:29:59:C6:88:6B:FE:8C:80:D2:90:85:52
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285841AF75052CD2ACABFF9F85E680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a648c06-ebf5-3fe0-9443-f9e8d1870fe2.roa
Signing time: Tue 25 Apr 2023 12:00:00 +0000
ROA not before: Tue 25 Apr 2023 12:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:af:75:05:2c:d2:ac:ab:ff:9f:85:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 25 12:00:00 2023 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=8c1d49db-0beb-49e1-b411-f52ea210c143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:3a:dc:08:da:78:35:0a:c2:7e:b9:f6:47:
d5:6c:1e:74:27:02:a5:a3:be:87:df:e7:78:07:5a:
8f:66:84:7e:ec:5a:1c:05:b4:47:53:60:c3:72:c2:
bf:8a:81:74:e7:b4:20:6f:76:0d:1e:8c:3c:ab:38:
ca:fb:8f:b3:7b:13:bb:9f:e8:28:6e:90:db:54:9c:
f8:8b:5e:12:07:a1:47:a4:38:6a:37:6a:8b:e4:67:
af:c6:26:bb:1c:8a:60:d0:82:fc:e3:b4:6d:26:88:
52:08:3c:3d:b4:79:86:fb:b0:c3:32:49:f3:6b:35:
ea:cf:99:84:81:0c:76:34:f8:ac:28:30:77:2b:89:
8d:22:d9:5d:ac:40:25:12:a8:e0:b0:a5:b1:ed:35:
0e:ca:c2:e7:bb:b9:f9:06:20:f7:cb:ad:01:d0:2d:
e6:da:2b:55:e8:8a:08:b7:f2:7a:f2:8e:5c:fc:0e:
cc:b0:14:2e:ae:7c:d4:01:ab:7e:e3:85:a1:4f:5f:
3d:41:bb:46:d1:99:a1:e5:39:08:c4:29:dd:cd:07:
08:37:b4:d8:44:fa:6b:78:c1:4b:80:84:88:c3:ea:
6a:96:17:d6:3c:5c:b2:50:59:93:27:a0:11:25:18:
45:e2:83:cf:bf:ea:2f:16:3a:ab:0c:bf:6d:c2:8f:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:45:58:F1:BB:86:6B:29:59:C6:88:6B:FE:8C:80:D2:90:85:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a648c06-ebf5-3fe0-9443-f9e8d1870fe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:86:9f:61:fd:53:96:a8:28:3f:12:a6:7a:81:a0:a2:25:f7:
a3:05:d4:a9:a1:12:be:56:7b:b0:0f:16:27:d4:89:6d:f2:ad:
72:15:70:c4:1d:46:a8:ef:84:91:23:c3:95:19:eb:3c:38:6a:
15:60:8d:5b:82:60:02:af:c5:c2:e4:51:3e:f5:93:ee:ba:22:
91:6f:c2:3f:15:72:23:0e:80:c4:95:46:b0:2c:ca:26:98:b7:
5f:17:b4:2f:fb:cb:55:43:05:f3:d7:39:3c:5b:df:6f:77:ac:
1a:0b:ff:ee:73:9d:6e:cf:0f:48:e5:00:a3:41:7b:37:a0:db:
28:cd:31:83:f9:6f:0b:0f:32:4b:59:20:51:45:8c:92:3c:7f:
74:e0:84:6b:44:29:63:f4:a8:19:48:23:fe:c1:c3:42:30:39:
f1:c8:43:b9:d9:4c:b7:7d:74:79:f9:5f:7f:41:54:01:84:c4:
8b:5c:57:43:74:e0:1b:50:a2:55:43:c7:2b:25:5f:98:d2:51:
5c:83:9c:38:0a:d9:8f:72:a5:a2:92:3c:9c:c6:d7:70:93:2a:
97:83:d3:d6:ec:51:15:c6:2f:3a:99:4f:62:69:00:c1:3e:3b:
58:cd:0c:98:27:b8:2b:14:57:2a:3b:98:d6:12:3d:0b:08:05:
8d:9c:4f:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGvdQUs0qyr/5+F5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDQyNTEyMDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
OGMxZDQ5ZGItMGJlYi00OWUxLWI0MTEtZjUyZWEyMTBjMTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3g63AjaeDUKwn659kfVbB50JwKlo76H3+d4
B1qPZoR+7FocBbRHU2DDcsK/ioF057Qgb3YNHow8qzjK+4+zexO7n+gobpDbVJz4
i14SB6FHpDhqN2qL5Gevxia7HIpg0IL847RtJohSCDw9tHmG+7DDMknzazXqz5mE
gQx2NPisKDB3K4mNItldrEAlEqjgsKWx7TUOysLnu7n5BiD3y60B0C3m2itV6IoI
t/J68o5c/A7MsBQurnzUAat+44WhT189QbtG0Zmh5TkIxCndzQcIN7TYRPpreMFL
gISIw+pqlhfWPFyyUFmTJ6ARJRhF4oPPv+ovFjqrDL9two8zIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/gRVjxu4ZrKVnGiGv+jIDSkIVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWE2NDhjMDYtZWJmNS0z
ZmUwLTk0NDMtZjllOGQxODcwZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhyBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiGn2H9U5aoKD8SpnqBoKIl96MF1KmhEr5We7APFifUiW3yrXIVcMQd
RqjvhJEjw5UZ6zw4ahVgjVuCYAKvxcLkUT71k+66IpFvwj8VciMOgMSVRrAsyiaY
t18XtC/7y1VDBfPXOTxb3293rBoL/+5znW7PD0jlAKNBezeg2yjNMYP5bwsPMktZ
IFFFjJI8f3TghGtEKWP0qBlII/7Bw0IwOfHIQ7nZTLd9dHn5X39BVAGExItcV0N0
4BtQolVDxyslX5jSUVyDnDgK2Y9ypaKSPJzG13CTKpeD09bsURXGLzqZT2JpAME+
O1jNDJgnuCsUVyo7mNYSPQsIBY2cT/8=
-----END CERTIFICATE-----
Generated at Wed Jul 26 04:17:50 2023 by rpki-client on console-ams.rpki-client.org