Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e6d27ab-e79f-3ab8-a2b3-d742dc547bda.roa
File: 7e6d27ab-e79f-3ab8-a2b3-d742dc547bda.roa (raw, json)
Hash identifier: H34ks+eS27UKOdE2TGN85FsWZeCiG0Q6Jt1u3o/YaXY=
Subject key identifier: BD:FC:44:F0:F4:30:49:2C:21:23:26:9E:07:78:2F:DF:C2:F1:A4:D4
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4861181081C4511EA8440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e6d27ab-e79f-3ab8-a2b3-d742dc547bda.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 76.70.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:86:11:81:08:1c:45:11:ea:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=b30fcf99-399e-4ba3-be2d-cf072f2ef57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:0a:96:88:9a:ca:33:d6:66:6c:29:5d:cb:
da:a7:5f:e4:d0:e6:43:9f:fa:df:29:be:66:74:2a:
f3:4d:3d:06:9c:31:35:38:3e:a0:0a:05:f5:c7:99:
33:eb:37:dd:bf:d8:e8:56:88:a3:95:3d:82:5d:78:
75:0d:37:7f:fd:15:23:37:20:bb:79:f5:cf:77:23:
d7:6f:c2:a7:18:7f:07:bc:07:8b:45:43:91:c0:d8:
c1:e6:e3:c3:78:d6:8f:b6:cd:dc:98:eb:a9:e8:40:
19:8b:39:e0:98:2f:f1:fb:33:8a:78:2b:b4:96:a5:
c7:ef:42:fc:68:71:de:df:a7:17:76:99:c2:34:89:
6f:d3:5c:ea:8f:43:df:82:a9:f3:c1:16:eb:75:2a:
46:a6:ac:5f:40:94:75:94:90:94:57:e0:50:bd:22:
4f:95:d3:11:cb:78:0d:47:e5:73:88:49:4b:c3:d1:
1c:34:e2:7f:ea:6c:aa:87:08:9d:81:20:98:4d:9e:
42:80:f9:34:d5:9f:57:b8:1e:84:ef:8e:34:30:b5:
74:d6:d0:43:d7:7a:0d:ea:ff:a4:01:55:72:0c:68:
8c:16:df:d5:cc:a5:b3:d4:12:9c:37:a2:a6:78:51:
17:12:9c:2c:4f:d5:21:2b:3a:f3:56:82:ca:70:3c:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FC:44:F0:F4:30:49:2C:21:23:26:9E:07:78:2F:DF:C2:F1:A4:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e6d27ab-e79f-3ab8-a2b3-d742dc547bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.70.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:0d:2b:95:33:a5:b0:fb:f9:24:a4:79:3e:be:16:6c:ea:04:
c5:76:08:bb:f6:5b:c5:7d:91:b7:4d:00:ac:66:a5:53:3a:74:
54:ce:a4:76:5b:61:c6:96:30:60:6d:63:c8:6c:5f:d4:57:2d:
97:ae:98:ea:46:d2:9a:70:f6:dd:86:16:ff:c3:c8:33:bd:cb:
10:29:42:db:7b:d1:eb:83:80:9a:e2:62:2e:fb:4f:9e:4c:3b:
8a:31:36:fd:01:21:6f:19:3f:f4:cc:81:33:cc:ad:14:29:8c:
f5:68:17:a9:5d:c3:ad:79:a8:53:d5:b1:8a:54:49:b6:ef:27:
9c:66:b0:99:83:20:aa:1d:a3:3b:54:c5:7e:5d:7a:d9:70:28:
58:c0:a8:cb:e9:2d:6e:8c:0a:2e:8a:10:64:99:b4:7b:93:83:
2f:87:0b:f9:8d:69:42:6c:61:aa:8e:7a:43:85:dd:be:f2:4d:
d3:c7:0e:e4:e4:c2:46:8f:50:ea:03:51:b5:55:bd:b8:23:49:
dd:04:36:b9:62:7b:e0:79:77:ab:82:88:46:c7:75:13:03:76:
17:f2:45:99:32:4f:b7:c4:84:fb:73:cf:6e:1e:a0:a8:cd:dd:
40:d6:a2:f2:0b:ef:bc:3e:2b:6a:69:c9:21:3e:0d:3c:d3:33:
dd:4c:15:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5IYRgQgcRRHqhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
YjMwZmNmOTktMzk5ZS00YmEzLWJlMmQtY2YwNzJmMmVmNTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRkKloiayjPWZmwpXcvap1/k0OZDn/rfKb5m
dCrzTT0GnDE1OD6gCgX1x5kz6zfdv9joVoijlT2CXXh1DTd//RUjNyC7efXPdyPX
b8KnGH8HvAeLRUORwNjB5uPDeNaPts3cmOup6EAZizngmC/x+zOKeCu0lqXH70L8
aHHe36cXdpnCNIlv01zqj0PfgqnzwRbrdSpGpqxfQJR1lJCUV+BQvSJPldMRy3gN
R+VziElLw9EcNOJ/6myqhwidgSCYTZ5CgPk01Z9XuB6E7440MLV01tBD13oN6v+k
AVVyDGiMFt/VzKWz1BKcN6KmeFEXEpwsT9UhKzrzVoLKcDx/uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL38RPD0MEksISMmngd4L9/C8aTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2U2ZDI3YWItZTc5Zi0z
YWI4LWEyYjMtZDc0MmRjNTQ3YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTEbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYNK5UzpbD7+SSkeT6+FmzqBMV2CLv2W8V9kbdNAKxmpVM6dFTOpHZb
YcaWMGBtY8hsX9RXLZeumOpG0ppw9t2GFv/DyDO9yxApQtt70euDgJriYi77T55M
O4oxNv0BIW8ZP/TMgTPMrRQpjPVoF6ldw615qFPVsYpUSbbvJ5xmsJmDIKodoztU
xX5detlwKFjAqMvpLW6MCi6KEGSZtHuTgy+HC/mNaUJsYaqOekOF3b7yTdPHDuTk
wkaPUOoDUbVVvbgjSd0ENrlie+B5d6uCiEbHdRMDdhfyRZkyT7fEhPtzz24eoKjN
3UDWovIL77w+K2ppySE+DTzTM91MFRQ=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org