Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f6148a6-8165-30a6-9ef4-2c6939e8384a.roa
File: 6f6148a6-8165-30a6-9ef4-2c6939e8384a.roa (raw, json)
Hash identifier: j5d/r5dnSzsaXCA7vxRSZPOasICwG9dGz5rtnn0ME70=
Subject key identifier: 6E:C1:18:E6:10:E4:F9:45:53:DA:A9:19:6B:9F:94:B9:4E:C7:24:15
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931610B18C8E5E418992DF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f6148a6-8165-30a6-9ef4-2c6939e8384a.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 207.236.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:10:b1:8c:8e:5e:41:89:92:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=64ece950-7d7c-4ef6-9416-39282c68d3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:cc:92:f9:14:95:f9:65:61:f2:d6:0d:84:
7f:8d:be:a3:3b:36:e2:91:b2:6b:0b:7e:db:17:96:
d1:a1:61:2b:f5:c2:4a:d5:a8:9c:de:d6:03:35:47:
66:3c:a8:ee:9d:26:4e:df:89:60:0f:22:44:02:fc:
27:e2:5f:d6:e4:00:4d:8a:82:98:ec:ab:17:de:5c:
0d:11:59:0f:de:8d:48:6f:89:f4:00:52:cb:74:06:
2c:09:89:ee:04:f4:f7:74:27:7c:2c:e8:41:9d:11:
5e:f0:0b:05:58:06:88:63:3b:c8:ff:55:66:54:ab:
16:52:ca:01:ce:fd:91:67:bc:d9:b8:91:12:43:9e:
be:97:58:33:21:c7:19:b6:b4:ed:1e:0b:25:b0:c5:
17:dc:0d:b9:eb:77:c6:df:30:b6:f7:ac:a9:ca:37:
22:9e:c9:59:a6:3d:d0:e5:40:e5:6e:8a:b3:37:37:
18:f9:8a:30:a0:ac:b2:b8:21:6c:b4:f9:4e:a4:21:
68:f5:0b:0c:bd:81:88:4e:0d:97:36:ab:5b:2b:d8:
b4:47:6b:95:a0:c4:f6:e6:06:95:fb:5a:ea:b3:f1:
d7:fb:32:cc:c2:e8:6e:c3:14:03:32:ad:8b:f8:5e:
6b:63:af:29:6b:88:1a:cb:79:eb:b1:ee:99:11:ce:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:18:E6:10:E4:F9:45:53:DA:A9:19:6B:9F:94:B9:4E:C7:24:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6f6148a6-8165-30a6-9ef4-2c6939e8384a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:27:ff:c6:7e:18:17:df:8b:0e:a5:37:36:8f:3d:4e:87:4b:
10:cf:24:5f:3c:fc:0b:bb:3b:91:ac:ef:37:e8:d9:7d:58:93:
46:65:52:4f:ef:7c:74:48:41:75:c8:c1:cc:7c:02:a9:1b:2e:
b5:cf:e5:f9:aa:d4:78:21:29:af:c1:ce:d2:26:c9:b3:d1:ee:
3d:ef:62:fb:a4:d0:67:d3:37:49:30:6b:6c:4c:e0:28:bc:d8:
bf:21:f4:8b:f1:1d:56:57:97:2c:c9:7a:51:48:c3:41:86:a9:
4f:7b:73:a9:d7:fd:7b:53:ad:ac:c1:1c:8a:28:07:cf:be:1c:
e1:d4:b4:b9:51:d0:bd:7b:b5:17:36:b4:8a:7c:f7:20:d6:90:
ff:6a:c2:bd:0d:83:8d:d5:9d:ee:a0:c5:f2:55:3f:59:ba:5f:
e1:44:96:5c:9f:a0:0a:da:18:bf:45:0c:85:c3:51:97:53:51:
df:a1:77:75:6c:ea:db:68:47:ed:33:fe:4f:bc:54:94:de:94:
0f:4e:45:d2:fc:48:8a:3f:5b:63:cb:88:ed:32:d6:d6:1c:42:
ba:d5:66:f2:d3:8d:ea:ec:36:9a:14:07:63:df:3f:6b:a7:b7:
55:e7:2d:90:fe:e9:4c:5a:65:0b:2f:bb:55:fd:db:3d:dd:79:
bc:de:07:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFhCxjI5eQYmS34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjRlY2U5NTAtN2Q3Yy00ZWY2LTk0MTYtMzkyODJjNjhkM2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zfMkvkUlfllYfLWDYR/jb6jOzbikbJrC37b
F5bRoWEr9cJK1aic3tYDNUdmPKjunSZO34lgDyJEAvwn4l/W5ABNioKY7KsX3lwN
EVkP3o1Ib4n0AFLLdAYsCYnuBPT3dCd8LOhBnRFe8AsFWAaIYzvI/1VmVKsWUsoB
zv2RZ7zZuJESQ56+l1gzIccZtrTtHgslsMUX3A2563fG3zC296ypyjcinslZpj3Q
5UDlboqzNzcY+YowoKyyuCFstPlOpCFo9QsMvYGITg2XNqtbK9i0R2uVoMT25gaV
+1rqs/HX+zLMwuhuwxQDMq2L+F5rY68pa4gay3nrse6ZEc69YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7BGOYQ5PlFU9qpGWuflLlOxyQVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmY2MTQ4YTYtODE2NS0z
MGE2LTllZjQtMmM2OTM5ZTgzODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+xTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIn/8Z+GBffiw6lNzaPPU6HSxDPJF88/Au7O5Gs7zfo2X1Yk0ZlUk/v
fHRIQXXIwcx8AqkbLrXP5fmq1HghKa/BztImybPR7j3vYvuk0GfTN0kwa2xM4Ci8
2L8h9IvxHVZXlyzJelFIw0GGqU97c6nX/XtTrazBHIooB8++HOHUtLlR0L17tRc2
tIp89yDWkP9qwr0Ng43Vne6gxfJVP1m6X+FEllyfoAraGL9FDIXDUZdTUd+hd3Vs
6ttoR+0z/k+8VJTelA9ORdL8SIo/W2PLiO0y1tYcQrrVZvLTjersNpoUB2PfP2un
t1XnLZD+6UxaZQsvu1X92z3debzeB48=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org