Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d5c5b4a-d8ed-3c4d-b356-29fdeb9f55f2.roa
File: 2d5c5b4a-d8ed-3c4d-b356-29fdeb9f55f2.roa (raw, json)
Hash identifier: LCo9CbBl/JhqIopnZITfvqXmEmQGvn6DbIU6MtdwYVY=
Subject key identifier: FD:C0:48:DE:E0:BC:B3:C5:44:6D:3C:38:70:2F:19:5F:B7:9F:EB:E0
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE44DB1AB53905E96A79FE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d5c5b4a-d8ed-3c4d-b356-29fdeb9f55f2.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 70.28.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:4d:b1:ab:53:90:5e:96:a7:9f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=60736c38-eac2-4dfe-8125-b5df35c5550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:6e:ab:3e:2b:30:cc:c7:19:ba:ae:5c:6f:
3b:2f:46:55:4d:a2:98:81:c7:78:5d:8e:54:96:21:
2e:53:89:6b:36:f2:5c:f9:3f:88:14:09:66:55:bc:
be:1c:d2:7d:15:02:e6:a9:88:d5:06:7c:3a:d4:d7:
c4:1a:03:13:5c:d8:6f:45:fe:03:b7:91:e7:68:c9:
b0:93:93:2b:a5:56:fd:71:1e:0e:78:ec:6f:33:46:
4d:8e:99:ac:bf:ba:31:ee:85:74:c3:d7:7b:7c:0d:
40:d4:5a:01:dd:ea:b3:91:dc:8a:7e:0e:5c:35:7b:
1a:01:75:2f:07:2a:08:ec:58:26:9d:05:66:e7:8d:
c8:01:84:0c:9c:b1:e4:e4:fb:01:73:9e:2c:f7:5a:
84:d1:23:18:83:ce:fe:66:2b:52:f8:9a:11:b3:d5:
bf:3b:6b:f2:f0:67:d5:3e:d0:02:cb:27:0d:c5:c7:
b8:64:d5:f8:33:3c:61:ba:bb:f7:ea:7d:99:8d:b0:
a3:c5:1f:59:d4:a0:74:a2:96:0d:08:8b:3e:19:db:
81:f4:fc:da:c3:77:1f:57:d0:fc:77:70:95:b9:fd:
89:d1:28:3c:8d:37:cc:8d:a5:32:76:31:66:5d:24:
90:43:df:3c:66:ec:06:31:7e:cb:4a:a2:36:7f:73:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:48:DE:E0:BC:B3:C5:44:6D:3C:38:70:2F:19:5F:B7:9F:EB:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d5c5b4a-d8ed-3c4d-b356-29fdeb9f55f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:01:62:03:74:15:78:e9:c6:be:6d:e5:68:cc:5f:62:9a:c1:
9f:21:b3:39:41:32:83:de:8d:b6:a1:86:bb:56:04:6c:ec:c7:
8e:67:26:09:76:ea:66:d0:26:fa:5e:43:0d:a0:c9:8c:bb:75:
75:3d:09:f2:57:7b:4e:bc:07:24:15:3c:f1:69:ac:a6:e3:58:
29:84:60:af:fa:fa:99:7d:42:b0:c2:a2:d4:6b:36:5b:c6:5e:
2e:f6:50:8c:31:b6:05:87:34:9b:13:05:bc:2e:13:f7:31:32:
3d:75:dc:1b:7c:b1:15:29:22:e6:62:de:c7:0d:bf:7d:62:c1:
13:19:d5:4c:ad:c9:98:f4:7f:24:bb:77:6c:5a:a5:85:9c:3e:
ca:f1:d9:3e:e0:71:06:84:a0:d2:b5:b8:98:6a:1a:75:9b:8c:
58:b6:01:63:fa:3f:33:86:83:15:dd:f7:73:46:be:2b:d4:f7:
82:fd:32:98:88:6b:cf:6b:06:60:0d:61:c8:98:c9:9b:a0:25:
7d:c3:05:63:78:c9:e4:fe:39:0a:41:0b:0d:41:9f:20:25:c5:
c2:4d:a0:d4:ee:7b:4c:3e:77:e3:fb:b9:38:03:42:d0:f5:e4:
d9:1d:7a:2c:ce:c4:30:ca:6d:19:11:9f:39:2c:e8:4d:b1:2a:
c7:49:b9:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5E2xq1OQXpann+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NjA3MzZjMzgtZWFjMi00ZGZlLTgxMjUtYjVkZjM1YzU1NTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjxuqz4rMMzHGbquXG87L0ZVTaKYgcd4XY5U
liEuU4lrNvJc+T+IFAlmVby+HNJ9FQLmqYjVBnw61NfEGgMTXNhvRf4Dt5HnaMmw
k5MrpVb9cR4OeOxvM0ZNjpmsv7ox7oV0w9d7fA1A1FoB3eqzkdyKfg5cNXsaAXUv
ByoI7FgmnQVm543IAYQMnLHk5PsBc54s91qE0SMYg87+ZitS+JoRs9W/O2vy8GfV
PtACyycNxce4ZNX4Mzxhurv36n2ZjbCjxR9Z1KB0opYNCIs+GduB9Pzaw3cfV9D8
d3CVuf2J0Sg8jTfMjaUydjFmXSSQQ988ZuwGMX7LSqI2f3NgzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3ASN7gvLPFRG08OHAvGV+3n+vgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmQ1YzViNGEtZDhlZC0z
YzRkLWIzNTYtMjlmZGViOWY1NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRhz8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8BYgN0FXjpxr5t5WjMX2KawZ8hszlBMoPejbahhrtWBGzsx45nJgl2
6mbQJvpeQw2gyYy7dXU9CfJXe068ByQVPPFprKbjWCmEYK/6+pl9QrDCotRrNlvG
Xi72UIwxtgWHNJsTBbwuE/cxMj113Bt8sRUpIuZi3scNv31iwRMZ1UytyZj0fyS7
d2xapYWcPsrx2T7gcQaEoNK1uJhqGnWbjFi2AWP6PzOGgxXd93NGvivU94L9MpiI
a89rBmANYciYyZugJX3DBWN4yeT+OQpBCw1BnyAlxcJNoNTue0w+d+P7uTgDQtD1
5NkdeizOxDDKbRkRnzks6E2xKsdJuSQ=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:14 2024 by rpki-client on console-fra.rpki-client.org