Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/80362c4d-523c-3269-8822-f19838f14df2.roa
File: 80362c4d-523c-3269-8822-f19838f14df2.roa (raw, json)
Hash identifier: vaNEdLc6cWnKkWEmtQ6kr2Xtt1tFBitJiLzZSYaJE9Y=
Subject key identifier: 70:AA:47:77:E9:97:C0:6C:79:52:C6:03:A7:90:4B:19:E1:EE:DA:A6
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB01D6AA7E1D23219DB6880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/80362c4d-523c-3269-8822-f19838f14df2.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 204.101.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:1d:6a:a7:e1:d2:32:19:db:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=766c7252-1c99-4b8b-971e-c0edec03eb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:89:55:a2:26:38:e3:61:2c:a0:04:21:46:
fe:9e:16:ec:36:a3:ca:16:00:d0:b7:aa:1a:a4:22:
42:fe:76:df:e4:bd:df:24:91:a0:c2:dc:4a:6e:12:
6c:b0:df:d3:38:ca:20:90:87:a5:83:47:02:0e:aa:
c1:6e:f7:8c:63:0f:b8:1d:ac:45:54:16:59:c5:ac:
3e:2d:67:f4:c0:de:b8:db:0a:11:b6:0d:b0:c2:a8:
8c:0c:2d:f3:f3:17:d3:1c:c7:cc:2c:7f:e4:39:9f:
8a:86:fc:11:32:c1:0b:2c:71:82:31:dc:4d:b7:af:
23:1a:be:c5:9a:e4:a2:a9:c2:42:5d:fe:c8:1c:2b:
6f:5d:5e:85:2d:e3:fd:f3:b2:fa:37:08:9b:cb:87:
31:83:81:92:76:a9:22:79:e9:99:5d:18:db:8d:3b:
4d:9f:28:76:f3:2f:57:d0:02:92:61:ef:1a:e3:20:
92:ac:99:53:82:d2:21:af:77:a5:9c:59:a8:6d:f8:
81:5f:6b:9e:85:0b:8f:71:69:e6:11:79:e0:20:1f:
c3:5d:9a:2f:bd:28:aa:ab:c1:a7:31:d8:13:59:e1:
c8:e5:96:d6:a6:25:18:32:99:ab:f1:72:93:3e:ef:
22:9c:f4:5a:ca:6a:d3:0b:e8:e4:55:42:b0:91:2f:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AA:47:77:E9:97:C0:6C:79:52:C6:03:A7:90:4B:19:E1:EE:DA:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/80362c4d-523c-3269-8822-f19838f14df2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:da:6f:d9:8c:d4:3d:fe:09:56:2f:83:b1:8f:58:c9:92:83:
b7:de:eb:4b:f2:2f:cc:1b:86:5d:d5:8d:74:5b:a7:ff:92:69:
da:35:c9:0a:aa:df:cf:69:ba:3b:90:5f:95:cf:d6:8f:f0:17:
57:ae:be:9c:d1:79:84:03:a1:a1:9e:b9:21:27:93:60:dd:54:
99:2a:af:33:99:62:f0:ac:91:a2:da:31:05:34:69:64:a9:35:
c6:85:93:0d:54:09:4d:21:70:e3:8d:5b:f2:87:71:2c:13:a8:
af:8c:40:c8:61:cd:1b:61:2c:e3:bc:9c:9c:15:d9:23:0f:92:
ff:08:cf:cc:2e:2d:81:02:5e:b7:24:6b:4e:9a:2f:33:ce:ad:
a5:6a:6e:0e:98:23:b0:9e:79:a8:fa:8f:47:8d:5c:8f:50:3d:
c8:9a:22:81:83:5d:25:a7:9d:30:65:84:d3:c9:3b:7a:a2:0e:
be:f0:11:9d:4c:d9:2a:88:25:a4:ae:f2:04:06:9a:4a:d2:c9:
11:81:a7:a0:7a:4c:d4:1d:29:70:5b:50:bd:73:60:2a:93:89:
cc:50:eb:0a:4d:12:88:43:8c:24:f0:54:fb:b8:08:05:ed:f6:
0e:2d:94:80:f4:97:f7:94:df:78:6e:e8:ad:2b:2a:b8:51:66:
60:98:00:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsB1qp+HSMhnbaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
NzY2YzcyNTItMWM5OS00YjhiLTk3MWUtYzBlZGVjMDNlYjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnyJVaImOONhLKAEIUb+nhbsNqPKFgDQt6oa
pCJC/nbf5L3fJJGgwtxKbhJssN/TOMogkIelg0cCDqrBbveMYw+4HaxFVBZZxaw+
LWf0wN642woRtg2wwqiMDC3z8xfTHMfMLH/kOZ+KhvwRMsELLHGCMdxNt68jGr7F
muSiqcJCXf7IHCtvXV6FLeP987L6Nwiby4cxg4GSdqkieemZXRjbjTtNnyh28y9X
0AKSYe8a4yCSrJlTgtIhr3elnFmobfiBX2uehQuPcWnmEXngIB/DXZovvSiqq8Gn
MdgTWeHI5ZbWpiUYMpmr8XKTPu8inPRaymrTC+jkVUKwkS/S5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCqR3fpl8BseVLGA6eQSxnh7tqmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODAzNjJjNGQtNTIzYy0z
MjY5LTg4MjItZjE5ODM4ZjE0ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILab9mM1D3+CVYvg7GPWMmSg7fe60vyL8wbhl3VjXRbp/+Sado1yQqq
389pujuQX5XP1o/wF1euvpzReYQDoaGeuSEnk2DdVJkqrzOZYvCskaLaMQU0aWSp
NcaFkw1UCU0hcOONW/KHcSwTqK+MQMhhzRthLOO8nJwV2SMPkv8Iz8wuLYECXrck
a06aLzPOraVqbg6YI7Ceeaj6j0eNXI9QPciaIoGDXSWnnTBlhNPJO3qiDr7wEZ1M
2SqIJaSu8gQGmkrSyRGBp6B6TNQdKXBbUL1zYCqTicxQ6wpNEohDjCTwVPu4CAXt
9g4tlID0l/eU33hu6K0rKrhRZmCYAK0=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org