Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64bed90d-fb0d-3dcf-8538-503cdfda69b7.roa
File: 64bed90d-fb0d-3dcf-8538-503cdfda69b7.roa (raw, json)
Hash identifier: 4DLuTFm+CWP4fKS+2KWIVx8hnbtGRv1TbXIaR/abAyQ=
Subject key identifier: 3B:59:4B:AE:72:EE:ED:E7:06:EC:37:FE:1A:F4:1C:31:D0:C8:BC:7F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315060520E8FB6217119E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64bed90d-fb0d-3dcf-8538-503cdfda69b7.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:06:05:20:e8:fb:62:17:11:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=896210b8-dae6-4ac0-9197-82735b2c4b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:b4:f7:5a:cd:1f:70:b7:09:3e:e1:99:5d:
4e:9d:2a:5b:de:30:5c:f1:89:ba:ab:b6:95:40:f7:
7f:14:51:45:1a:a7:b0:2c:78:47:80:29:c3:e4:0d:
8b:57:97:f5:33:58:b8:b4:e4:85:a9:0c:1f:c9:d6:
28:0c:33:56:95:c6:de:45:d9:b4:7e:56:ef:3f:61:
69:a9:91:98:26:03:92:3b:60:6d:ed:e9:9c:c6:93:
e9:d9:53:36:d5:f4:a7:cb:b7:d4:3d:03:8b:1a:e4:
48:14:cf:55:f0:ed:d4:d1:d8:e0:86:81:be:37:fd:
12:46:f1:5a:a7:8a:13:48:91:43:92:a1:a3:77:28:
b4:85:6c:7d:52:2e:c6:fd:89:03:94:0e:65:9d:3f:
44:84:8f:d7:82:a3:32:79:69:ee:9f:13:53:6a:24:
04:47:30:7c:41:56:9d:8d:56:46:28:d9:6f:da:ad:
ad:11:aa:c9:c4:e4:b4:79:c1:37:fd:ab:53:35:a4:
a6:96:05:14:8c:40:77:45:3f:a0:51:3e:89:b0:13:
ab:16:11:6f:26:82:fa:8d:e1:61:7e:5f:36:08:a6:
98:15:24:98:42:51:cd:ba:ce:35:04:0d:c5:73:37:
9c:83:6a:e2:4b:5d:e2:b8:7a:76:bb:a4:9a:24:f9:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:4B:AE:72:EE:ED:E7:06:EC:37:FE:1A:F4:1C:31:D0:C8:BC:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64bed90d-fb0d-3dcf-8538-503cdfda69b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:61:f4:e5:2d:e3:6e:6a:fb:ac:4b:ed:df:28:e5:cb:8b:9b:
ef:b8:10:41:48:d4:92:ef:7c:37:7e:21:e1:e9:e2:2d:f7:81:
0e:15:b7:d5:c3:c7:2e:af:1a:0f:af:da:40:a7:6b:51:d3:cf:
c7:58:7d:08:d3:17:53:af:55:a1:ca:d4:fe:35:e3:39:cf:ec:
c4:f0:ae:46:92:5e:80:ac:a0:ee:e3:6e:b7:0b:85:f5:f6:c4:
1b:ac:90:1d:e0:a3:2c:ed:08:9e:73:30:d0:ed:0a:a0:7d:91:
64:a9:bd:80:af:f7:d6:61:1f:8c:37:15:6e:65:1e:fc:db:df:
12:a0:9a:23:52:11:32:1e:56:be:4a:86:70:7e:08:7f:a7:71:
d4:db:18:db:cb:2e:23:07:de:56:a8:19:f7:64:b1:53:4c:fb:
55:87:36:c1:c0:4a:20:95:66:26:af:32:96:aa:06:ec:a3:0b:
d3:2c:5e:36:bb:84:12:cc:49:cf:b2:af:fd:64:10:27:56:86:
59:57:ae:5a:3f:98:03:d1:31:cb:11:d5:2e:1e:95:78:95:ca:
32:f1:34:6d:63:31:51:9d:f6:05:e3:73:ac:97:f2:76:bd:05:
f1:cc:8e:48:34:44:9f:d5:62:3c:a8:32:00:a9:9b:e2:53:0f:
a4:8f:fb:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFQYFIOj7YhcRnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ODk2MjEwYjgtZGFlNi00YWMwLTkxOTctODI3MzViMmM0YjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vm091rNH3C3CT7hmV1OnSpb3jBc8Ym6q7aV
QPd/FFFFGqewLHhHgCnD5A2LV5f1M1i4tOSFqQwfydYoDDNWlcbeRdm0flbvP2Fp
qZGYJgOSO2Bt7emcxpPp2VM21fSny7fUPQOLGuRIFM9V8O3U0djghoG+N/0SRvFa
p4oTSJFDkqGjdyi0hWx9Ui7G/YkDlA5lnT9EhI/XgqMyeWnunxNTaiQERzB8QVad
jVZGKNlv2q2tEarJxOS0ecE3/atTNaSmlgUUjEB3RT+gUT6JsBOrFhFvJoL6jeFh
fl82CKaYFSSYQlHNus41BA3Fczecg2riS13iuHp2u6SaJPm+jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtZS65y7u3nBuw3/hr0HDHQyLx/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjRiZWQ5MGQtZmIwZC0z
ZGNmLTg1MzgtNTAzY2RmZGE2OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5h9OUt425q+6xL7d8o5cuLm++4EEFI1JLvfDd+IeHp4i33gQ4Vt9XD
xy6vGg+v2kCna1HTz8dYfQjTF1OvVaHK1P414znP7MTwrkaSXoCsoO7jbrcLhfX2
xBuskB3goyztCJ5zMNDtCqB9kWSpvYCv99ZhH4w3FW5lHvzb3xKgmiNSETIeVr5K
hnB+CH+ncdTbGNvLLiMH3laoGfdksVNM+1WHNsHASiCVZiavMpaqBuyjC9MsXja7
hBLMSc+yr/1kECdWhllXrlo/mAPRMcsR1S4elXiVyjLxNG1jMVGd9gXjc6yX8na9
BfHMjkg0RJ/VYjyoMgCpm+JTD6SP++s=
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org