Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2eec9ae1-6d2e-3398-9328-0a00b8124337.roa
File: 2eec9ae1-6d2e-3398-9328-0a00b8124337.roa (raw, json)
Hash identifier: CoHkZUBBRUai22TCGgogy0TVfOHHx5u7FqPbQpUxULc=
Subject key identifier: 7A:47:68:A0:49:69:E8:71:73:87:09:EC:C0:F8:C7:CD:24:C7:52:13
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315BF6902C8DBBE4E78AE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2eec9ae1-6d2e-3398-9328-0a00b8124337.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 398713
IP address blocks: 207.161.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:bf:69:02:c8:db:be:4e:78:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=428ce9ad-7c3f-4613-a109-8e7eec5e277a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:b3:80:c7:ee:9c:dd:20:63:d2:76:7f:59:
b0:d6:eb:7a:f1:88:d5:57:f1:f9:b1:f4:69:7e:ea:
80:b2:13:39:9c:45:19:26:b4:e9:66:09:f9:80:5d:
57:92:04:f1:71:5d:fe:7a:d4:78:0a:3c:fc:79:5b:
05:82:6e:24:e3:26:ee:c2:82:1b:e6:2c:5a:36:e2:
de:1d:45:b2:92:9f:68:31:08:ae:cb:fc:b0:d7:4f:
6f:40:8c:a4:64:4e:0b:fe:5a:49:76:8f:41:72:64:
8c:72:44:ee:47:8a:ea:e8:e3:75:d0:03:7e:2e:70:
1b:69:90:7d:d4:37:b2:71:77:6a:cf:e2:94:ac:f7:
75:12:78:0b:71:df:68:b4:0a:2c:9a:e2:9a:e6:59:
4a:af:58:06:eb:92:e4:f9:6d:dd:a2:64:68:24:a9:
d3:a1:03:55:ae:d2:80:69:2e:e2:80:a8:98:14:7a:
98:57:07:7f:0d:f4:25:9a:e7:b0:17:d6:1c:41:bd:
52:1c:59:15:8e:93:58:35:ed:8e:ec:6a:0d:f2:fd:
84:1f:69:48:d8:d5:98:d8:9c:af:de:25:71:78:e2:
63:86:68:92:f3:e2:bb:7e:f4:56:13:3a:58:33:33:
6f:1f:6f:64:dd:9e:7f:ef:e3:0b:0e:0d:3f:9e:67:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:68:A0:49:69:E8:71:73:87:09:EC:C0:F8:C7:CD:24:C7:52:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2eec9ae1-6d2e-3398-9328-0a00b8124337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.161.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:51:55:d7:a5:28:78:17:18:9e:24:68:39:5d:5d:c7:56:91:
56:2c:89:1f:c9:3a:67:42:41:0d:8f:88:2a:31:9a:d9:bd:c9:
11:f1:fd:5d:8f:f8:65:c6:5e:13:a7:2c:3d:52:5a:2a:3f:42:
7d:e2:0a:bd:3e:fe:53:db:73:94:d4:4c:f5:83:9e:ee:d1:f8:
ca:56:7e:77:9a:0a:82:3b:6b:23:89:39:7a:da:e4:98:1f:5a:
1f:99:65:8a:0e:3b:c1:c8:13:f0:29:66:f8:16:4b:d3:a4:25:
3c:92:bd:92:ea:78:f8:88:f1:2c:2a:54:90:3a:33:5a:fc:82:
9e:72:c3:45:80:de:eb:ec:04:9c:52:0d:26:02:17:e4:99:4c:
72:e0:d4:a3:a3:c9:1b:a5:e0:18:95:84:4d:a6:0f:45:ec:84:
d5:a7:4c:f8:cd:93:80:d5:dc:0e:1b:e6:5d:be:60:17:2a:55:
b0:92:87:92:2a:3a:6e:57:e2:e6:ca:9a:11:a0:71:0b:33:90:
db:0c:60:e0:8c:f3:db:ad:93:ca:f7:93:3a:11:cf:b5:8d:ac:
40:0e:dd:19:b9:5c:c7:e1:83:d3:7e:68:33:2c:92:fd:12:2c:
19:05:57:d4:5d:d7:f1:07:ba:c4:78:2d:74:5b:cd:83:d5:2b:
9a:9b:fd:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFb9pAsjbvk54rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDI4Y2U5YWQtN2MzZi00NjEzLWExMDktOGU3ZWVjNWUyNzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwmzgMfunN0gY9J2f1mw1ut68YjVV/H5sfRp
fuqAshM5nEUZJrTpZgn5gF1XkgTxcV3+etR4Cjz8eVsFgm4k4ybuwoIb5ixaNuLe
HUWykp9oMQiuy/yw109vQIykZE4L/lpJdo9BcmSMckTuR4rq6ON10AN+LnAbaZB9
1DeycXdqz+KUrPd1EngLcd9otAosmuKa5llKr1gG65Lk+W3domRoJKnToQNVrtKA
aS7igKiYFHqYVwd/DfQlmuewF9YcQb1SHFkVjpNYNe2O7GoN8v2EH2lI2NWY2Jyv
3iVxeOJjhmiS8+K7fvRWEzpYMzNvH29k3Z5/7+MLDg0/nmfbdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpHaKBJaehxc4cJ7MD4x80kx1ITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmVlYzlhZTEtNmQyZS0z
Mzk4LTkzMjgtMGEwMGI4MTI0MzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6HTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxRVdelKHgXGJ4kaDldXcdWkVYsiR/JOmdCQQ2PiCoxmtm9yRHx/V2P
+GXGXhOnLD1SWio/Qn3iCr0+/lPbc5TUTPWDnu7R+MpWfneaCoI7ayOJOXra5Jgf
Wh+ZZYoOO8HIE/ApZvgWS9OkJTySvZLqePiI8SwqVJA6M1r8gp5yw0WA3uvsBJxS
DSYCF+SZTHLg1KOjyRul4BiVhE2mD0XshNWnTPjNk4DV3A4b5l2+YBcqVbCSh5Iq
Om5X4ubKmhGgcQszkNsMYOCM89utk8r3kzoRz7WNrEAO3Rm5XMfhg9N+aDMskv0S
LBkFV9Rd1/EHusR4LXRbzYPVK5qb/Sk=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:25 2024 by rpki-client on console-fra.rpki-client.org