Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7dc6d117-e5d3-36de-91ac-9fbe99807072.roa
File: 7dc6d117-e5d3-36de-91ac-9fbe99807072.roa (raw, json)
Hash identifier: uTAZ9Xzr/OFe992Y9Zg6s+ovFa49Ba8Gl37JoatPU98=
Subject key identifier: 01:6A:6A:F9:81:3F:33:D3:AD:EA:B5:00:F7:38:D1:67:65:F3:86:04
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB05081F0A07894CED04780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7dc6d117-e5d3-36de-91ac-9fbe99807072.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 35911
IP address blocks: 206.47.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:50:81:f0:a0:78:94:ce:d0:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=c7c05a91-cbef-42b0-a998-3b6711633005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:8d:c0:4e:12:2b:1b:71:8b:1b:b0:08:4d:
6d:51:07:53:80:56:f2:15:48:b1:05:34:11:d5:77:
0b:92:eb:68:cd:84:aa:cd:b9:78:01:6a:7a:e4:30:
de:f5:ec:a8:92:68:7e:8e:59:21:7f:07:a2:c8:19:
ab:ce:cf:11:1d:0e:44:b0:4e:28:c7:da:e2:fb:35:
be:49:73:56:dd:0a:e6:53:62:a3:90:7b:a3:e5:49:
8d:48:8c:7e:80:bc:1d:21:0d:b0:1f:53:be:6e:11:
d4:70:da:91:55:5c:ac:64:3a:fe:13:a0:5e:1b:67:
20:65:bb:f2:7a:7e:37:27:27:aa:a6:98:bd:35:4b:
04:8b:91:70:ec:d5:52:f1:06:2a:0f:e8:e9:bb:b1:
65:94:2f:ad:28:83:1d:48:9b:cc:60:07:0a:45:48:
31:1c:d3:3c:8d:f9:60:3d:0b:d5:4a:0f:91:c4:e0:
ae:f5:7a:2b:2f:b2:a8:0b:39:3c:fe:75:04:c1:8d:
84:1f:e8:9c:39:76:4f:25:fa:78:42:f5:d8:08:98:
8a:34:84:95:03:1f:ef:73:f5:67:35:f2:54:df:63:
68:b9:c8:0d:47:24:a1:33:c1:0b:02:3b:64:79:7b:
35:36:e3:c9:97:11:d0:cb:5c:c1:c9:36:fc:43:bc:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:6A:F9:81:3F:33:D3:AD:EA:B5:00:F7:38:D1:67:65:F3:86:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7dc6d117-e5d3-36de-91ac-9fbe99807072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:cf:22:f3:08:a4:18:15:83:bd:b9:7b:97:b8:c6:8d:7d:04:
94:e8:fb:2f:37:52:cf:21:9f:66:cf:05:fd:aa:c9:34:c3:42:
69:21:d9:79:19:04:9a:c4:7c:97:32:55:9a:92:fe:c4:cc:f1:
d7:12:21:14:7d:69:9e:2a:dd:ec:6c:98:a1:99:2b:47:6c:5c:
80:58:92:40:65:79:46:98:e4:45:32:40:a9:51:79:13:da:fb:
d2:46:e6:70:ee:2f:11:7b:0f:cd:6a:e0:4e:7b:22:35:5f:84:
0e:8e:1c:e4:3a:83:ff:33:66:79:0b:74:e3:63:2f:c1:de:9f:
54:f0:bb:56:62:45:fc:4f:79:84:94:eb:b4:f9:f4:30:36:28:
63:71:d9:f7:43:1a:d5:70:9b:d8:eb:b1:a5:df:14:d5:ab:0c:
f6:59:6c:cf:8a:49:30:8b:8c:93:07:d3:ce:3a:22:5a:44:2f:
90:0a:8c:11:92:17:95:bf:fe:21:a6:52:a0:b2:86:63:62:b4:
33:cb:95:a5:96:5d:0a:61:6f:e6:a1:d9:3a:91:68:44:25:75:
cd:0b:f8:07:2d:c4:53:23:6d:25:4e:77:95:f2:c4:e2:dd:0b:
23:be:92:9f:43:f0:b7:72:f7:65:cc:33:0a:42:6e:43:54:eb:
86:73:b5:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsFCB8KB4lM7QR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YzdjMDVhOTEtY2JlZi00MmIwLWE5OTgtM2I2NzExNjMzMDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb6NwE4SKxtxixuwCE1tUQdTgFbyFUixBTQR
1XcLkutozYSqzbl4AWp65DDe9eyokmh+jlkhfweiyBmrzs8RHQ5EsE4ox9ri+zW+
SXNW3QrmU2KjkHuj5UmNSIx+gLwdIQ2wH1O+bhHUcNqRVVysZDr+E6BeG2cgZbvy
en43Jyeqppi9NUsEi5Fw7NVS8QYqD+jpu7FllC+tKIMdSJvMYAcKRUgxHNM8jflg
PQvVSg+RxOCu9XorL7KoCzk8/nUEwY2EH+icOXZPJfp4QvXYCJiKNISVAx/vc/Vn
NfJU32NoucgNRyShM8ELAjtkeXs1NuPJlxHQy1zByTb8Q7x+LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFqavmBPzPTreq1APc40Wdl84YEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2RjNmQxMTctZTVkMy0z
NmRlLTkxYWMtOWZiZTk5ODA3MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi/EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETPIvMIpBgVg725e5e4xo19BJTo+y83Us8hn2bPBf2qyTTDQmkh2XkZ
BJrEfJcyVZqS/sTM8dcSIRR9aZ4q3exsmKGZK0dsXIBYkkBleUaY5EUyQKlReRPa
+9JG5nDuLxF7D81q4E57IjVfhA6OHOQ6g/8zZnkLdONjL8Hen1Twu1ZiRfxPeYSU
67T59DA2KGNx2fdDGtVwm9jrsaXfFNWrDPZZbM+KSTCLjJMH0846IlpEL5AKjBGS
F5W//iGmUqCyhmNitDPLlaWWXQphb+ah2TqRaEQldc0L+ActxFMjbSVOd5XyxOLd
CyO+kp9D8Ldy92XMMwpCbkNU64ZztfQ=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org