Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42159197-a6e9-35d6-8e64-a74b55b5df13.roa
File: 42159197-a6e9-35d6-8e64-a74b55b5df13.roa (raw, json)
Hash identifier: clcl+Ec34ZWC38jN9qJjzwaYjQ+mxJ/xVh2A83FKzVE=
Subject key identifier: F1:57:8C:52:AA:34:0F:E7:97:EE:51:B6:78:B8:DC:9E:93:F0:A7:F3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493145790ADB39FA5F36C3D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42159197-a6e9-35d6-8e64-a74b55b5df13.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 174.90.220.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:57:90:ad:b3:9f:a5:f3:6c:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=de3ebb5b-3975-457a-8bc2-1bb1132ba173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:5f:2d:14:0f:a3:a6:87:f3:fc:26:39:b5:
af:98:3f:0a:e3:0b:43:8a:64:b2:40:65:fe:15:9f:
6d:5a:46:90:58:3b:64:2e:3c:bb:b0:50:2b:9b:e4:
59:8f:df:47:ca:03:dc:ec:78:83:59:03:77:f1:65:
39:a5:bf:ca:44:a6:92:b9:6d:de:4a:e7:7d:c2:b5:
72:3c:ed:5b:ee:80:e2:8a:59:9e:15:9a:9f:16:5a:
c6:36:94:cf:73:24:55:3c:cb:41:7f:50:65:03:af:
17:44:89:d3:53:92:3a:09:e5:7f:71:db:01:a2:8e:
26:7b:68:7e:64:a8:e4:a5:c6:c0:33:09:a2:5c:48:
5d:2b:46:a1:4a:8f:ea:84:84:9c:60:b2:a2:a1:a3:
bf:6f:7e:f5:3f:50:f3:53:f8:5b:22:95:12:9d:5f:
de:f3:2e:67:72:57:81:90:65:78:4a:e5:a5:2b:57:
a7:b2:a2:03:a1:41:b7:ca:9e:be:6f:b5:32:e1:82:
25:53:1d:ed:18:03:4b:92:da:81:50:7c:3a:3c:c8:
6e:f7:85:26:cd:c7:4a:d8:53:8e:b7:ef:db:ca:da:
78:e3:ac:ce:87:ce:8f:e6:15:02:7e:16:ad:c8:88:
73:ae:66:9c:54:75:3a:01:79:3a:f0:60:3a:f5:e3:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:8C:52:AA:34:0F:E7:97:EE:51:B6:78:B8:DC:9E:93:F0:A7:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42159197-a6e9-35d6-8e64-a74b55b5df13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.220.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:fb:2a:d8:67:50:18:66:98:f5:f2:3d:50:94:55:59:a0:23:
81:d1:74:16:4c:48:2b:aa:be:1b:a6:ab:c1:65:f2:67:92:c7:
81:52:03:fa:95:b9:e2:9e:d2:90:d2:db:3a:93:5e:7d:a6:a6:
aa:d6:50:82:09:ab:71:a6:8a:d5:c0:3c:35:07:1f:63:95:80:
eb:8e:03:bc:f1:83:7a:e6:18:0f:4d:6c:73:d8:6f:09:99:56:
69:e4:0f:21:77:68:9e:8c:39:ef:79:9b:4e:7d:5d:c9:8f:8e:
e8:f5:76:2e:87:7e:a8:0f:9c:2c:cf:1e:a9:82:93:58:35:e1:
6e:ec:7f:41:13:6c:20:4d:68:86:14:12:5d:23:b8:47:a0:6e:
ba:97:f5:07:76:38:a3:40:0c:0c:b8:32:c9:25:99:00:61:e1:
06:ff:c6:62:07:58:40:08:ff:8e:5a:c4:26:e3:33:33:d3:3b:
29:a8:59:5a:97:6e:c7:ca:d5:15:c3:80:54:88:63:af:85:e0:
ba:f8:32:83:dd:61:c6:78:f9:f1:4e:4d:e2:b4:52:66:79:50:
0e:c3:af:be:24:a1:49:dc:0d:32:64:62:66:47:8f:ae:c2:a5:
15:f0:f0:95:64:55:d9:a7:6b:93:1e:4b:42:20:2f:eb:b8:6e:
33:f8:e9:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWESTFFeQrbOfpfNsPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGUzZWJiNWItMzk3NS00NTdhLThiYzItMWJiMTEzMmJhMTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uxfLRQPo6aH8/wmObWvmD8K4wtDimSyQGX+
FZ9tWkaQWDtkLjy7sFArm+RZj99HygPc7HiDWQN38WU5pb/KRKaSuW3eSud9wrVy
PO1b7oDiilmeFZqfFlrGNpTPcyRVPMtBf1BlA68XRInTU5I6CeV/cdsBoo4me2h+
ZKjkpcbAMwmiXEhdK0ahSo/qhIScYLKioaO/b371P1DzU/hbIpUSnV/e8y5ncleB
kGV4SuWlK1ensqIDoUG3yp6+b7Uy4YIlUx3tGANLktqBUHw6PMhu94UmzcdK2FOO
t+/bytp446zOh86P5hUCfhatyIhzrmacVHU6AXk68GA69eNHywIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPFXjFKqNA/nl+5Rtni43J6T8KfzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDIxNTkxOTctYTZlOS0z
NWQ2LThlNjQtYTc0YjU1YjVkZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrlrcgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAF+yrYZ1AYZpj18j1QlFVZoCOB0XQWTEgrqr4bpqvBZfJnkseBUgP6
lbnintKQ0ts6k159pqaq1lCCCatxporVwDw1Bx9jlYDrjgO88YN65hgPTWxz2G8J
mVZp5A8hd2iejDnveZtOfV3Jj47o9XYuh36oD5wszx6pgpNYNeFu7H9BE2wgTWiG
FBJdI7hHoG66l/UHdjijQAwMuDLJJZkAYeEG/8ZiB1hACP+OWsQm4zMz0zspqFla
l27HytUVw4BUiGOvheC6+DKD3WHGePnxTk3itFJmeVAOw6++JKFJ3A0yZGJmR4+u
wqUV8PCVZFXZp2uTHktCIC/ruG4z+Omu
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org