Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e4c51d8-5c68-3e91-840b-d5e4efcf8d6e.roa
File: 5e4c51d8-5c68-3e91-840b-d5e4efcf8d6e.roa (raw, json)
Hash identifier: TGqcEhqjGOB4PmRIXwFufX9PW+G909niOO83JfBaW4E=
Subject key identifier: 86:5C:CA:6A:51:8A:3C:5D:6B:C3:D9:B8:6F:A6:62:03:C8:19:78:79
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313A11E5A8F583856560A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e4c51d8-5c68-3e91-840b-d5e4efcf8d6e.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 67.69.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:a1:1e:5a:8f:58:38:56:56:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=fb6bfa21-cde3-4bbe-8644-1c93fa876343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:b8:25:4c:06:72:1b:6a:d2:d3:92:f9:b0:
66:da:00:a7:51:05:19:1c:85:5d:1a:de:ea:f9:88:
65:d3:32:30:f9:b0:35:6b:c3:57:19:51:27:8d:38:
c8:36:ac:4e:e4:07:75:0a:e2:14:da:49:56:e6:fd:
1c:31:80:b8:eb:21:99:c5:aa:f8:4c:6b:b0:fd:de:
f7:56:0b:1e:98:9c:98:58:c0:2e:39:ee:3b:ae:4a:
ee:0d:cb:c4:07:13:b9:f0:2e:79:ad:e5:18:87:7e:
81:ed:d4:c6:e2:dc:44:81:aa:75:85:40:79:ff:ad:
a8:21:4e:79:d7:22:37:67:ff:2b:af:bf:67:65:91:
18:a6:13:b2:8d:58:ad:98:53:ab:3e:39:36:8d:30:
cc:52:4d:ce:c7:1a:85:c0:6b:47:6b:85:f5:a6:b7:
86:95:80:65:1d:78:96:da:b6:f3:c4:ea:16:0b:8e:
71:4a:d7:86:e0:06:49:5d:6c:2f:79:e8:34:14:f0:
43:75:b3:d0:50:51:63:6f:9c:eb:66:4a:1a:fb:eb:
4f:b9:bd:17:7a:1d:9c:36:c4:b6:f9:17:3e:ba:86:
4a:dc:3a:b5:32:80:8b:65:71:39:ca:f9:7d:ed:26:
b1:a6:1c:3a:5e:a9:ea:72:2c:bc:a0:2f:82:e7:9e:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5C:CA:6A:51:8A:3C:5D:6B:C3:D9:B8:6F:A6:62:03:C8:19:78:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5e4c51d8-5c68-3e91-840b-d5e4efcf8d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.69.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:34:5a:f4:e3:eb:e3:2c:67:67:38:10:8a:d6:f1:f5:5e:bc:
cc:5b:e1:8b:e5:4a:c2:07:22:31:7c:8b:af:63:51:ae:5e:c5:
e4:96:a8:9d:22:37:7b:1b:13:54:c8:65:cd:50:4a:48:42:ee:
03:04:ec:d5:cc:d4:c9:8a:b4:6f:ec:eb:dd:62:68:cb:b3:4a:
5b:06:e4:74:6a:fe:6c:67:38:a6:1e:2e:bf:1d:39:db:04:a2:
41:bc:58:2b:33:40:b1:13:8f:25:8d:70:7d:81:fd:56:2d:51:
34:13:bc:ca:a2:2e:96:e3:04:7b:f0:52:fa:df:d9:de:12:0d:
b7:6b:68:b0:98:a2:22:23:8d:f6:e7:07:6b:5b:c8:ba:f0:66:
ef:61:ea:97:91:06:dc:05:f3:e9:e8:42:fd:d5:58:6a:b1:ea:
74:e8:f4:07:31:92:e7:45:99:31:bd:01:6a:1f:eb:09:9e:32:
6b:a4:14:ba:df:2c:80:ed:fa:59:5f:79:84:4a:a3:15:7f:6f:
eb:94:e1:15:89:93:84:6a:f2:3f:38:0e:2f:7b:f8:45:ab:f4:
cb:8b:d3:d9:de:f8:27:e6:07:8b:2f:ca:90:49:3c:7a:53:98:
dd:9c:0f:89:99:bd:ba:54:cf:77:90:e4:d4:23:f4:24:bf:c6:
69:f7:05:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTE6EeWo9YOFZWCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmI2YmZhMjEtY2RlMy00YmJlLTg2NDQtMWM5M2ZhODc2MzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrO4JUwGchtq0tOS+bBm2gCnUQUZHIVdGt7q
+Yhl0zIw+bA1a8NXGVEnjTjINqxO5Ad1CuIU2klW5v0cMYC46yGZxar4TGuw/d73
VgsemJyYWMAuOe47rkruDcvEBxO58C55reUYh36B7dTG4txEgap1hUB5/62oIU55
1yI3Z/8rr79nZZEYphOyjVitmFOrPjk2jTDMUk3OxxqFwGtHa4X1preGlYBlHXiW
2rbzxOoWC45xSteG4AZJXWwveeg0FPBDdbPQUFFjb5zrZkoa++tPub0Xeh2cNsS2
+Rc+uoZK3Dq1MoCLZXE5yvl97Saxphw6Xqnqciy8oC+C557S9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZcympRijxda8PZuG+mYgPIGXh5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWU0YzUxZDgtNWM2OC0z
ZTkxLTg0MGItZDVlNGVmY2Y4ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0VPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJc0WvTj6+MsZ2c4EIrW8fVevMxb4YvlSsIHIjF8i69jUa5exeSWqJ0i
N3sbE1TIZc1QSkhC7gME7NXM1MmKtG/s691iaMuzSlsG5HRq/mxnOKYeLr8dOdsE
okG8WCszQLETjyWNcH2B/VYtUTQTvMqiLpbjBHvwUvrf2d4SDbdraLCYoiIjjfbn
B2tbyLrwZu9h6peRBtwF8+noQv3VWGqx6nTo9AcxkudFmTG9AWof6wmeMmukFLrf
LIDt+llfeYRKoxV/b+uU4RWJk4Rq8j84Di97+EWr9MuL09ne+CfmB4svypBJPHpT
mN2cD4mZvbpUz3eQ5NQj9CS/xmn3BX0=
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org