Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5af2ac57-077a-3eec-b806-9a359c2a24f6.roa
File: 5af2ac57-077a-3eec-b806-9a359c2a24f6.roa (raw, json)
Hash identifier: ui4yhThpV7PvKxFAtEQujAKQQfAcUvZaGm2FIYTPU74=
Subject key identifier: 28:7C:30:80:CB:BA:97:70:97:44:EA:CC:B4:87:32:FA:CA:A4:F3:86
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE57CE6F86AD8DE912CC980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5af2ac57-077a-3eec-b806-9a359c2a24f6.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 855
IP address blocks: 207.34.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:7c:e6:f8:6a:d8:de:91:2c:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=1229b3d5-b337-46a1-aa14-8269105d6bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:de:00:7c:f8:1a:82:6e:88:fc:3c:76:22:
14:6d:0c:89:23:e6:c8:cd:4a:02:1f:b8:f6:58:de:
0b:7a:5c:d2:77:8e:8b:90:82:b0:9a:6d:2f:f6:a4:
81:72:95:a3:73:e3:b0:65:db:0e:69:2b:21:36:81:
5b:5f:e0:2f:7b:64:b4:79:22:7e:97:42:fe:67:05:
5a:cd:88:1c:09:02:8a:c1:07:18:88:19:b2:50:cb:
e4:b1:81:44:24:8d:34:39:ae:d7:c2:55:33:ee:55:
e8:ff:4f:59:e6:ed:52:25:30:9d:25:e7:88:7e:0a:
14:6c:fd:f6:4f:a7:e6:e1:91:ed:45:40:2f:dc:51:
ad:4a:15:d5:08:fa:67:43:21:5a:9f:41:76:98:68:
5c:17:31:a9:5f:c3:7d:ca:11:b0:4c:a9:60:14:34:
4b:87:13:66:c6:c4:c2:61:e0:67:63:bf:90:1a:f6:
bd:3c:4c:35:a6:6e:32:25:cb:08:9a:6c:b2:51:c9:
63:74:09:5a:74:17:cc:8f:55:a9:e8:42:2c:1b:ff:
f9:49:51:1b:7a:48:0d:28:c9:e5:5f:d3:e1:31:3b:
9d:e1:bc:d7:da:3a:6b:41:77:86:89:57:8e:4f:a4:
0a:75:11:60:d7:18:3b:39:58:08:8e:e7:aa:1c:5a:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7C:30:80:CB:BA:97:70:97:44:EA:CC:B4:87:32:FA:CA:A4:F3:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5af2ac57-077a-3eec-b806-9a359c2a24f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ee:dc:94:d7:fa:67:88:24:9e:53:fe:88:2b:10:dc:ac:fb:
30:2d:01:b2:fd:36:84:a5:15:d6:7b:d1:be:3e:ac:7f:ff:23:
05:53:08:a4:df:12:5e:bb:fa:0d:f2:a6:70:f8:54:d7:a7:88:
52:b7:85:dc:29:73:e9:80:a5:94:44:38:b9:ed:5c:22:c9:dc:
08:ee:b4:48:41:d4:0f:6e:90:ee:7a:82:9c:90:46:66:ba:44:
56:a5:45:69:e8:c0:1b:83:31:7c:49:24:e5:07:4f:c9:b1:83:
cf:5e:c3:b5:5c:99:19:8d:29:3f:d1:05:0b:6b:9c:33:7d:7c:
62:4e:fa:9b:f2:5c:81:a3:15:1d:25:be:c7:59:9d:08:f9:5c:
79:11:ba:6e:2c:ce:ad:16:14:00:54:51:41:1a:22:7c:23:3d:
dd:b0:04:75:5d:b8:c6:de:e9:7c:be:8d:6d:dd:6a:fe:ba:c4:
13:3c:a4:cd:f2:5d:1e:d9:0e:91:7a:a9:76:3b:08:8b:5c:67:
58:2e:03:d0:57:9d:a5:9a:ea:08:09:0c:c4:03:e5:be:58:cc:
ff:45:c9:60:5d:c2:00:a9:44:68:73:e7:42:2e:bc:55:26:4c:
28:18:dc:ba:46:5a:34:4a:7f:5a:99:2a:e8:40:4a:b5:50:8c:
de:91:e5:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5Xzm+GrY3pEsyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MTIyOWIzZDUtYjMzNy00NmExLWFhMTQtODI2OTEwNWQ2YmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcveAHz4GoJuiPw8diIUbQyJI+bIzUoCH7j2
WN4LelzSd46LkIKwmm0v9qSBcpWjc+OwZdsOaSshNoFbX+Ave2S0eSJ+l0L+ZwVa
zYgcCQKKwQcYiBmyUMvksYFEJI00Oa7XwlUz7lXo/09Z5u1SJTCdJeeIfgoUbP32
T6fm4ZHtRUAv3FGtShXVCPpnQyFan0F2mGhcFzGpX8N9yhGwTKlgFDRLhxNmxsTC
YeBnY7+QGva9PEw1pm4yJcsImmyyUcljdAladBfMj1Wp6EIsG//5SVEbekgNKMnl
X9PhMTud4bzX2jprQXeGiVeOT6QKdRFg1xg7OVgIjueqHFrn3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCh8MIDLupdwl0TqzLSHMvrKpPOGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWFmMmFjNTctMDc3YS0z
ZWVjLWI4MDYtOWEzNTljMmEyNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyIYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDu3JTX+meIJJ5T/ogrENys+zAtAbL9NoSlFdZ70b4+rH//IwVTCKTf
El67+g3ypnD4VNeniFK3hdwpc+mApZREOLntXCLJ3AjutEhB1A9ukO56gpyQRma6
RFalRWnowBuDMXxJJOUHT8mxg89ew7VcmRmNKT/RBQtrnDN9fGJO+pvyXIGjFR0l
vsdZnQj5XHkRum4szq0WFABUUUEaInwjPd2wBHVduMbe6Xy+jW3dav66xBM8pM3y
XR7ZDpF6qXY7CItcZ1guA9BXnaWa6ggJDMQD5b5YzP9FyWBdwgCpRGhz50IuvFUm
TCgY3LpGWjRKf1qZKuhASrVQjN6R5UA=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org