Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/206cb5e8-638e-3dc3-ac1d-af647afe09e9.roa
File: 206cb5e8-638e-3dc3-ac1d-af647afe09e9.roa (raw, json)
Hash identifier: Du7dYbhzR0Xuy1Q/13y/9UOT3gpH+Sscm+kqOVwEfKc=
Subject key identifier: 96:5C:13:C3:F8:27:EA:C4:51:D2:64:94:8C:59:87:76:F8:13:4B:19
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE470BCE91991A8D1A4D7C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/206cb5e8-638e-3dc3-ac1d-af647afe09e9.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 577
IP address blocks: 74.15.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:70:bc:e9:19:91:a8:d1:a4:d7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=76ca0657-1d7c-468b-baa6-747b078742bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:8e:0a:88:08:66:02:02:d5:c2:9e:b1:86:
92:31:c5:14:0f:1a:5e:f8:9d:ca:a1:a6:0a:9a:c5:
e5:a1:cf:26:1a:e8:7f:ea:6c:6f:d3:f4:b9:da:f2:
fd:a5:11:db:b7:9a:e3:05:1e:fd:14:f1:93:98:dc:
90:98:18:01:ed:c6:a5:74:a0:2e:60:ad:57:3a:5d:
29:37:7e:87:11:df:2b:9b:ca:30:d3:1b:10:0a:ad:
e7:62:84:ad:01:7c:37:a5:2d:ba:74:2f:53:3e:66:
9b:c4:a9:04:c9:4c:c4:3b:9d:f9:a9:ae:15:d4:24:
73:3d:47:27:a9:44:02:57:28:e9:b0:a4:e6:6e:68:
b2:44:38:f0:e3:e2:28:0d:8a:54:bf:77:f8:9c:ad:
a5:03:5d:e6:ce:95:f1:30:cf:54:9c:af:b6:a1:c8:
27:34:3a:a9:76:c1:e2:db:3d:64:ed:79:f9:f2:d1:
76:79:95:1b:bf:72:9f:31:9d:bb:6f:09:19:5c:01:
e5:97:e5:05:45:87:83:f1:a8:9a:8a:f9:6b:6f:87:
e2:4f:85:e4:fe:51:7d:30:83:de:16:ce:ef:95:91:
67:56:32:45:1b:78:14:ea:12:20:e0:6c:25:13:41:
1b:70:2e:44:15:67:4a:be:5e:ee:f3:e3:23:7f:63:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:13:C3:F8:27:EA:C4:51:D2:64:94:8C:59:87:76:F8:13:4B:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/206cb5e8-638e-3dc3-ac1d-af647afe09e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
74.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d8:06:e5:09:0f:0e:b0:00:67:ad:e9:96:e7:51:41:0b:b4:
27:44:99:b5:df:b8:5e:67:a1:61:42:61:05:05:b8:b2:50:f5:
b3:70:71:19:99:25:85:35:ce:bf:92:be:27:eb:a9:4c:3f:e3:
48:ce:7d:50:c9:a7:95:b9:83:d2:db:6c:23:9c:f4:80:67:de:
57:42:87:16:e0:8d:4b:1e:d8:a4:4a:c3:3b:4b:db:05:ad:34:
d5:fe:2d:40:14:de:40:91:0d:3e:26:ed:37:e5:fb:e2:04:91:
a0:01:01:8a:be:a1:07:f2:72:fd:a4:66:2b:cb:8f:68:0e:45:
ef:63:7e:14:c6:3e:dd:cf:fe:c5:07:ec:43:59:61:f0:bd:32:
ab:9a:35:a1:4d:8f:7d:cb:71:ef:45:4a:ed:82:33:83:ac:32:
3a:80:5c:90:cd:f0:b8:c6:f6:64:35:bc:8e:b6:df:6a:e2:8f:
29:fc:ae:04:06:36:4f:f1:a8:0e:35:22:4f:d7:a6:4c:86:0f:
e1:73:f8:f3:f8:4a:99:90:8c:53:55:de:23:9e:a4:d9:b4:b4:
7a:0d:8a:a3:bb:5b:8e:69:7c:85:9c:82:ec:03:66:ff:f6:6e:
09:37:6b:a2:2d:9a:41:c5:88:3a:41:55:65:61:2f:70:7f:6f:
ff:a9:f5:92
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEOa5HC86RmRqNGk18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NzZjYTA2NTctMWQ3Yy00NjhiLWJhYTYtNzQ3YjA3ODc0MmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo6OCogIZgIC1cKesYaSMcUUDxpe+J3KoaYK
msXloc8mGuh/6mxv0/S52vL9pRHbt5rjBR79FPGTmNyQmBgB7caldKAuYK1XOl0p
N36HEd8rm8ow0xsQCq3nYoStAXw3pS26dC9TPmabxKkEyUzEO535qa4V1CRzPUcn
qUQCVyjpsKTmbmiyRDjw4+IoDYpUv3f4nK2lA13mzpXxMM9UnK+2ocgnNDqpdsHi
2z1k7Xn58tF2eZUbv3KfMZ27bwkZXAHll+UFRYeD8aiaivlrb4fiT4Xk/lF9MIPe
Fs7vlZFnVjJFG3gU6hIg4GwlE0EbcC5EFWdKvl7u8+Mjf2ONOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJZcE8P4J+rEUdJklIxZh3b4E0sZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjA2Y2I1ZTgtNjM4ZS0z
ZGMzLWFjMWQtYWY2NDdhZmUwOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASg8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZdgG5QkPDrAAZ63pludRQQu0J0SZtd+4XmehYUJhBQW4slD1s3BxGZkl
hTXOv5K+J+upTD/jSM59UMmnlbmD0ttsI5z0gGfeV0KHFuCNSx7YpErDO0vbBa00
1f4tQBTeQJENPibtN+X74gSRoAEBir6hB/Jy/aRmK8uPaA5F72N+FMY+3c/+xQfs
Q1lh8L0yq5o1oU2Pfctx70VK7YIzg6wyOoBckM3wuMb2ZDW8jrbfauKPKfyuBAY2
T/GoDjUiT9emTIYP4XP48/hKmZCMU1XeI56k2bS0eg2Ko7tbjml8hZyC7ANm//Zu
CTdroi2aQcWIOkFVZWEvcH9v/6n1kg==
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org