Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e5226b4-58a4-357e-ae8f-4cb0898802e2.roa
File: 1e5226b4-58a4-357e-ae8f-4cb0898802e2.roa (raw, json)
Hash identifier: csaC7VvA06Bcrj0hHfAcqubUmnsFvM5NxGZndxroPBA=
Subject key identifier: 14:51:7F:AF:72:42:4B:E1:0C:3D:19:38:94:E8:A8:48:A1:E4:CC:4C
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE5B7BBA6B09D7F8AD9F080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e5226b4-58a4-357e-ae8f-4cb0898802e2.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 398721
IP address blocks: 209.226.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:b7:bb:a6:b0:9d:7f:8a:d9:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=67c53b5a-e50e-47d3-ac7e-28c9dd23c1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:4d:73:6a:36:53:ae:b0:e3:bf:a2:76:10:
50:49:c7:12:5e:31:e1:db:5a:36:c4:55:6c:56:db:
d9:2e:4c:78:d3:8f:b8:b9:0f:71:ff:9e:26:be:36:
da:c3:05:69:24:a3:1b:36:2c:b2:34:b1:b2:da:ca:
be:67:cd:c9:b2:87:f8:8e:32:67:86:2f:c9:20:37:
24:e8:48:2e:b3:17:40:c3:6f:b1:0c:22:af:d5:ff:
6a:84:97:52:fb:e1:57:bd:0d:b8:3e:fe:53:82:54:
e8:72:96:aa:80:60:ff:19:f6:d7:45:54:7d:cb:34:
1f:d8:e7:11:3e:36:36:85:e6:2d:cf:83:93:30:12:
0d:93:1d:f3:f6:e4:eb:47:b6:d6:39:b1:6f:1a:8a:
b7:df:7d:8a:1e:35:98:f1:45:e0:ac:15:e6:59:95:
af:e3:d1:53:cb:61:49:a0:9e:b0:52:9c:ac:7b:6a:
1c:1f:00:73:70:08:7d:1b:3c:f9:0d:96:07:6b:34:
1d:24:a4:e4:3d:eb:09:96:b8:95:52:15:4d:42:83:
31:e0:11:07:a3:8c:f2:41:8e:4e:8d:85:08:6f:40:
b9:f7:26:63:f1:a5:4c:94:4d:7e:7f:da:c3:58:e7:
d0:2d:30:17:ba:bc:f8:f5:9f:1b:e4:5c:d4:c7:8f:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:7F:AF:72:42:4B:E1:0C:3D:19:38:94:E8:A8:48:A1:E4:CC:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e5226b4-58a4-357e-ae8f-4cb0898802e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d6:7e:56:cb:97:90:46:4b:9f:a9:b1:f1:22:46:ef:31:82:
ff:93:61:dd:5e:81:5d:05:f8:07:89:41:fb:e3:fc:e3:38:e7:
7b:6c:6a:28:52:44:6e:ad:24:fa:b8:50:76:67:fb:a6:86:63:
e3:a9:b5:b7:73:00:6c:7e:63:f3:43:7c:9d:f3:81:eb:ef:35:
a7:e6:3c:8e:87:22:89:b9:28:3f:ad:77:e1:1f:0b:b8:3c:5e:
5a:6f:2a:aa:2f:05:52:3b:e4:07:2a:54:f1:a1:a0:f0:90:1c:
8f:ff:2e:d1:dd:04:28:0a:6c:f7:60:9d:50:6e:db:ed:a8:ee:
a6:a9:7c:47:6d:2c:2b:ac:60:eb:2c:b8:39:28:02:6c:93:e3:
61:20:eb:97:70:7e:d9:c9:94:50:09:dd:69:8b:a7:37:00:9a:
c3:25:24:ba:be:2d:54:b3:ac:9a:3b:ae:c6:6f:d5:9c:b8:e5:
ad:00:1c:a8:87:17:dd:f2:5c:e1:41:e0:03:0f:4e:70:25:96:
88:8c:35:e9:70:fd:60:39:22:c1:33:35:76:45:22:f4:85:5f:
cc:d2:f1:40:9a:61:1e:0f:99:0d:da:59:db:70:85:56:f3:05:
a8:ed:18:91:5e:18:56:51:a7:a4:c4:d4:f0:15:6e:bf:98:6a:
41:ed:9c:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5be7prCdf4rZ8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NjdjNTNiNWEtZTUwZS00N2QzLWFjN2UtMjhjOWRkMjNjMWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YxNc2o2U66w47+idhBQSccSXjHh21o2xFVs
VtvZLkx404+4uQ9x/54mvjbawwVpJKMbNiyyNLGy2sq+Z83Jsof4jjJnhi/JIDck
6EgusxdAw2+xDCKv1f9qhJdS++FXvQ24Pv5TglTocpaqgGD/GfbXRVR9yzQf2OcR
PjY2heYtz4OTMBINkx3z9uTrR7bWObFvGoq3332KHjWY8UXgrBXmWZWv49FTy2FJ
oJ6wUpyse2ocHwBzcAh9Gzz5DZYHazQdJKTkPesJlriVUhVNQoMx4BEHo4zyQY5O
jYUIb0C59yZj8aVMlE1+f9rDWOfQLTAXurz49Z8b5FzUx4/FBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRRf69yQkvhDD0ZOJToqEih5MxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWU1MjI2YjQtNThhNC0z
NTdlLWFlOGYtNGNiMDg5ODgwMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7WflbLl5BGS5+psfEiRu8xgv+TYd1egV0F+AeJQfvj/OM453tsaihS
RG6tJPq4UHZn+6aGY+OptbdzAGx+Y/NDfJ3zgevvNafmPI6HIom5KD+td+EfC7g8
XlpvKqovBVI75AcqVPGhoPCQHI//LtHdBCgKbPdgnVBu2+2o7qapfEdtLCusYOss
uDkoAmyT42Eg65dwftnJlFAJ3WmLpzcAmsMlJLq+LVSzrJo7rsZv1Zy45a0AHKiH
F93yXOFB4AMPTnAlloiMNelw/WA5IsEzNXZFIvSFX8zS8UCaYR4PmQ3aWdtwhVbz
BajtGJFeGFZRp6TE1PAVbr+YakHtnFk=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org