Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71a915c2-9183-35e7-b64a-47f93e449a07.roa
File: 71a915c2-9183-35e7-b64a-47f93e449a07.roa (raw, json)
Hash identifier: 1pgbW7QN0h8GTxcfMPXoHdGCh5yCQwMlmLGL1gv3a2w=
Subject key identifier: 4B:C9:C4:2E:D9:37:C8:DD:5F:19:2C:66:BF:30:78:35:22:04:BB:87
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE44C093695752E13D6CD40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71a915c2-9183-35e7-b64a-47f93e449a07.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 70.28.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:4c:09:36:95:75:2e:13:d6:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=653b12c5-b5a9-47a2-8339-4e64c1081b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:c5:3a:e4:cd:1d:b9:d9:ed:e6:43:2b:69:
a6:fc:a9:71:cc:0e:f2:49:d8:0f:4a:b5:4d:10:a6:
0e:ae:cb:1b:3b:61:f0:a4:fb:2b:31:79:69:30:ed:
b8:1c:ee:e2:63:c5:c9:77:84:c4:c6:66:87:b5:d9:
70:59:cc:8d:a6:7a:b0:39:df:84:6d:3c:57:2b:eb:
ef:7c:ce:2e:ab:46:9b:41:fd:1c:36:81:ca:cb:07:
90:e7:85:a3:fa:5c:87:4b:aa:61:d9:d4:32:ad:cf:
6e:74:d0:3a:86:ab:87:fd:85:0a:d3:ef:d3:ca:97:
71:df:11:d6:49:60:cb:dd:dd:1f:46:35:1e:4c:24:
95:d5:42:e3:e9:94:67:93:6b:36:f9:39:52:8c:42:
ed:c4:96:74:eb:70:bd:47:19:72:92:c3:77:a9:f1:
35:8c:a3:33:bc:48:eb:be:c8:b0:9f:a3:0a:31:f7:
e5:14:b7:a9:1f:7f:64:40:af:5b:0d:ff:ec:9f:17:
53:1d:87:e8:ff:29:f0:17:4a:29:9f:4a:b8:5d:16:
f1:f6:67:2c:2a:df:34:bd:07:98:7f:e3:6a:7b:b8:
26:63:ec:42:5e:55:83:e2:1d:bd:4a:67:29:4d:58:
ef:39:be:74:82:e1:af:7c:b0:f8:cb:e0:eb:8a:0e:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:C4:2E:D9:37:C8:DD:5F:19:2C:66:BF:30:78:35:22:04:BB:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/71a915c2-9183-35e7-b64a-47f93e449a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:d9:8e:a9:3d:f0:b9:ae:ad:c1:23:1c:8a:2b:0c:91:76:b9:
58:e7:10:30:8b:67:04:23:f3:67:a9:b7:c2:4f:4a:f4:87:10:
ac:70:b5:1c:0c:bd:01:26:47:b1:63:e5:7d:d7:3c:34:02:3a:
28:7c:b6:8f:84:53:ff:2e:68:4c:a4:d7:72:e3:e2:ff:30:e3:
00:2c:20:6c:a9:c3:87:f3:b1:e4:9f:5c:85:17:91:47:76:40:
cd:b6:6b:42:19:c7:a9:16:70:34:f6:a6:45:3f:96:22:83:75:
09:01:f3:a7:c4:9a:5e:dd:b7:1f:b6:11:ca:4b:e0:11:06:cb:
3a:96:44:99:eb:74:54:a6:23:cc:9a:11:34:11:f3:8a:16:7f:
09:40:cd:f6:bb:9c:f3:39:4d:0b:8e:c7:2e:74:a0:30:77:4d:
ca:74:42:97:4b:23:14:16:88:cf:71:c8:d5:a7:81:56:07:e3:
8f:79:26:c4:54:45:20:2b:24:4a:76:5d:8b:59:18:39:2b:29:
36:50:7c:ed:6d:0b:62:8f:5e:9d:7e:a8:50:4a:11:cb:c8:c8:
e1:28:a7:a2:10:9b:4e:1b:9b:4a:a6:0c:3c:98:0e:56:11:07:
28:ed:a9:b9:15:bd:1b:66:bf:94:5d:ca:fa:14:5c:b4:dd:08:
67:b0:e6:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5EwJNpV1LhPWzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NjUzYjEyYzUtYjVhOS00N2EyLTgzMzktNGU2NGMxMDgxYjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbnFOuTNHbnZ7eZDK2mm/KlxzA7ySdgPSrVN
EKYOrssbO2HwpPsrMXlpMO24HO7iY8XJd4TExmaHtdlwWcyNpnqwOd+EbTxXK+vv
fM4uq0abQf0cNoHKyweQ54Wj+lyHS6ph2dQyrc9udNA6hquH/YUK0+/Typdx3xHW
SWDL3d0fRjUeTCSV1ULj6ZRnk2s2+TlSjELtxJZ063C9RxlyksN3qfE1jKMzvEjr
vsiwn6MKMfflFLepH39kQK9bDf/snxdTHYfo/ynwF0opn0q4XRbx9mcsKt80vQeY
f+Nqe7gmY+xCXlWD4h29SmcpTVjvOb50guGvfLD4y+Drig6bTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvJxC7ZN8jdXxksZr8weDUiBLuHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNzFhOTE1YzItOTE4My0z
NWU3LWI2NGEtNDdmOTNlNDQ5YTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhz1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbZjqk98LmurcEjHIorDJF2uVjnEDCLZwQj82ept8JPSvSHEKxwtRwM
vQEmR7Fj5X3XPDQCOih8to+EU/8uaEyk13Lj4v8w4wAsIGypw4fzseSfXIUXkUd2
QM22a0IZx6kWcDT2pkU/liKDdQkB86fEml7dtx+2EcpL4BEGyzqWRJnrdFSmI8ya
ETQR84oWfwlAzfa7nPM5TQuOxy50oDB3Tcp0QpdLIxQWiM9xyNWngVYH4495JsRU
RSArJEp2XYtZGDkrKTZQfO1tC2KPXp1+qFBKEcvIyOEop6IQm04bm0qmDDyYDlYR
ByjtqbkVvRtmv5RdyvoUXLTdCGew5oo=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org