Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d66231f-1f78-30c8-b89a-1ca7ef2021f3.roa
File: 3d66231f-1f78-30c8-b89a-1ca7ef2021f3.roa (raw, json)
Hash identifier: vpY5lxpxAT1a28pgUBa+o/mRuTGCjmU9I+zgOCmEras=
Subject key identifier: 4A:9B:FD:98:C7:7F:99:3E:7B:EC:FC:BD:35:E0:71:D4:78:48:BE:77
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB099C359364E89EF8E5970
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d66231f-1f78-30c8-b89a-1ca7ef2021f3.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:99:c3:59:36:4e:89:ef:8e:59:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=abffa7b4-b1b1-4a82-94c1-38df4020afa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:2a:63:b7:79:2d:c9:1a:57:ed:f4:8c:9f:
79:39:1a:7d:a5:fa:aa:1a:e9:8d:c6:22:36:b5:88:
de:25:22:60:85:b5:8e:05:9e:3d:c3:fd:fe:d7:91:
ea:22:8a:75:a9:e7:35:d1:5f:6c:83:f5:93:a2:5c:
63:d0:b6:e7:96:69:39:a8:05:33:a6:4d:55:74:b7:
1a:e6:bc:d3:a2:ec:4c:18:5e:78:2f:6d:4b:c7:77:
2a:46:71:35:76:fa:35:10:c8:e9:4d:51:42:c5:62:
4f:89:62:c6:46:06:8b:ce:b7:c3:ef:8b:03:01:6c:
f3:d1:33:ee:df:9f:74:63:ab:10:44:20:c5:c7:b4:
78:47:42:bf:33:d5:58:8f:74:05:d0:1f:f5:a6:89:
f3:e2:83:01:3a:7d:d5:aa:14:1d:ca:3a:50:ea:6b:
f4:3c:9d:9d:14:25:9d:cd:31:8d:ea:e7:3a:09:36:
ee:cc:fc:22:0d:39:8d:24:4c:69:c8:69:10:58:b1:
78:6b:86:1f:a8:1b:d8:65:fc:63:35:73:44:6b:89:
6d:cf:c3:ec:ac:ef:de:ce:3e:f5:a6:d3:d1:21:41:
95:32:ce:ac:41:0c:e5:c5:85:85:57:4e:f8:12:6e:
7e:92:7d:3f:2f:10:bd:b5:4c:1d:39:65:69:29:9f:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:FD:98:C7:7F:99:3E:7B:EC:FC:BD:35:E0:71:D4:78:48:BE:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d66231f-1f78-30c8-b89a-1ca7ef2021f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0f:67:31:e2:0e:19:ab:30:af:ec:85:64:f4:ad:9d:53:de:
42:28:43:eb:9c:59:b6:2d:4e:da:ea:2c:df:ac:d3:61:6b:f1:
0c:98:d5:ad:44:fc:33:71:48:55:31:0b:63:27:25:be:47:0b:
5f:52:2f:ee:c4:cf:66:54:e3:11:c7:0d:17:01:04:61:a9:e9:
20:ce:5f:12:e5:0c:07:6a:70:1b:85:5a:3c:9a:a8:6a:6f:9d:
a1:65:8c:4c:43:d6:d8:89:e1:a2:7e:3f:91:a0:5c:1d:29:3c:
a0:3c:02:a8:3f:50:88:b5:c0:f3:0c:51:2e:52:b8:70:fd:88:
5d:7b:0b:47:6e:f7:45:71:3c:5f:e7:51:64:31:a1:53:cf:e3:
f6:66:63:75:67:4e:03:fb:34:63:1d:95:2e:ba:c4:47:fc:9f:
cb:c6:2e:f7:fe:36:4e:cf:db:a4:42:ee:85:33:ec:6c:21:d7:
45:38:4b:2e:0c:aa:26:28:c4:a0:44:32:3f:ed:92:95:d0:55:
1d:93:d3:b4:ab:48:9d:b0:d2:df:53:af:8b:d1:21:e9:17:29:
12:7a:84:7e:b2:25:71:84:6f:66:d1:d9:60:32:7d:6e:ef:32:
11:3f:29:99:a8:a7:ca:37:a6:61:c9:74:dc:82:6e:ca:53:6a:
68:5d:c4:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsJnDWTZOie+OWXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YWJmZmE3YjQtYjFiMS00YTgyLTk0YzEtMzhkZjQwMjBhZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG0qY7d5LckaV+30jJ95ORp9pfqqGumNxiI2
tYjeJSJghbWOBZ49w/3+15HqIop1qec10V9sg/WTolxj0Lbnlmk5qAUzpk1VdLca
5rzTouxMGF54L21Lx3cqRnE1dvo1EMjpTVFCxWJPiWLGRgaLzrfD74sDAWzz0TPu
3590Y6sQRCDFx7R4R0K/M9VYj3QF0B/1ponz4oMBOn3VqhQdyjpQ6mv0PJ2dFCWd
zTGN6uc6CTbuzPwiDTmNJExpyGkQWLF4a4YfqBvYZfxjNXNEa4ltz8PsrO/ezj71
ptPRIUGVMs6sQQzlxYWFV074Em5+kn0/LxC9tUwdOWVpKZ9evwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqb/ZjHf5k+e+z8vTXgcdR4SL53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2Q2NjIzMWYtMWY3OC0z
MGM4LWI4OWEtMWNhN2VmMjAyMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6Q2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMPZzHiDhmrMK/shWT0rZ1T3kIoQ+ucWbYtTtrqLN+s02Fr8QyY1a1E
/DNxSFUxC2MnJb5HC19SL+7Ez2ZU4xHHDRcBBGGp6SDOXxLlDAdqcBuFWjyaqGpv
naFljExD1tiJ4aJ+P5GgXB0pPKA8Aqg/UIi1wPMMUS5SuHD9iF17C0du90VxPF/n
UWQxoVPP4/ZmY3VnTgP7NGMdlS66xEf8n8vGLvf+Nk7P26RC7oUz7Gwh10U4Sy4M
qiYoxKBEMj/tkpXQVR2T07SrSJ2w0t9Tr4vRIekXKRJ6hH6yJXGEb2bR2WAyfW7v
MhE/KZmop8o3pmHJdNyCbspTamhdxCA=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:44 2024 by rpki-client on console-ams.rpki-client.org