Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8889ff65-52aa-34c7-ab4f-fb19bb477d9b.roa
File: 8889ff65-52aa-34c7-ab4f-fb19bb477d9b.roa (raw, json)
Hash identifier: qzy5FlbgQM1gDCIWf3wpfMM3C1+tk83w520JRGlydY4=
Subject key identifier: 45:A8:44:25:F8:90:87:4E:E4:03:B3:3F:FD:37:0D:3B:53:B4:C7:3B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449316BC029F21E21D8D563600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8889ff65-52aa-34c7-ab4f-fb19bb477d9b.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 15321
IP address blocks: 216.209.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:16:bc:02:9f:21:e2:1d:8d:56:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=1b3b4320-2e93-4e42-b9ee-81dcbd13123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:da:f0:d0:c1:d0:a5:69:89:29:d7:79:2c:
72:20:af:f1:23:eb:6d:82:26:73:ab:85:d8:82:10:
cb:74:88:04:8d:6c:fc:16:b4:a8:cf:fa:ea:5f:54:
3a:43:a9:2e:0b:e3:cf:94:f3:db:b9:78:03:03:3f:
42:cf:10:51:0e:5b:ef:9b:f6:09:c2:6d:e2:43:c7:
f5:4a:27:69:3f:1a:59:3c:5b:bc:9a:ab:68:17:ae:
a7:9e:b5:05:56:1a:22:e5:b2:9e:37:a0:b6:47:90:
c1:7d:4f:65:2f:6e:3e:99:1f:01:8e:7e:26:e9:ac:
9b:b3:c3:e2:70:75:5f:5e:cc:34:b9:23:b2:25:36:
48:6b:52:55:13:86:b7:18:5f:b6:b8:4f:e6:52:0b:
6a:cb:0e:d8:79:38:7b:62:85:e4:94:16:dd:ad:57:
10:c2:97:26:80:11:ef:64:4c:b2:1b:e3:43:e3:ae:
f5:50:03:76:82:ae:5e:1f:c5:1e:66:23:ad:99:55:
c8:e8:b7:a3:81:ac:65:19:a0:7b:43:30:89:ff:c9:
1d:54:12:92:45:7d:b9:a4:5c:45:3f:9d:19:d3:f7:
3e:ad:79:04:19:7e:9e:ea:30:ab:03:98:8b:8f:d7:
f4:39:40:90:aa:c2:98:fb:e7:36:59:c5:59:98:04:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:44:25:F8:90:87:4E:E4:03:B3:3F:FD:37:0D:3B:53:B4:C7:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8889ff65-52aa-34c7-ab4f-fb19bb477d9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:a3:c3:76:77:15:51:a8:28:48:95:2c:1d:10:d6:72:5a:8f:
14:5f:80:f0:43:44:66:ee:0f:96:fc:61:aa:98:70:1b:b2:a4:
51:0a:e0:4d:08:6f:06:51:b3:a2:7d:83:ed:96:9d:ee:d8:cf:
af:10:55:51:e5:ee:3e:16:ff:7d:0c:a1:19:2e:dd:c6:63:10:
96:ee:9e:5c:19:45:10:24:ad:76:6d:47:04:3a:f1:3c:97:1a:
51:e3:8f:b4:24:2b:d2:d2:7f:9b:17:5b:f8:ba:bd:85:22:35:
53:cc:59:fc:9c:54:36:81:5b:be:dd:3e:db:33:ee:b0:64:f2:
af:e1:ba:9d:a1:87:6e:e1:6f:31:f5:b7:bf:96:16:fd:a2:3a:
23:cf:64:08:d4:7c:7a:db:32:b8:64:4b:d7:a1:c2:a4:8f:6f:
d8:05:aa:f5:5a:32:d7:a6:db:2e:b7:8e:8a:b2:03:c7:f1:ba:
8d:4e:15:3c:aa:88:ca:5d:41:da:26:12:58:59:f5:2b:15:17:
36:47:eb:c1:9a:0c:73:d6:34:a9:bf:03:70:21:7d:a7:18:82:
fd:5e:08:8d:f9:37:10:86:8f:da:b0:db:c0:4f:57:32:e8:3b:
38:90:97:80:b7:3a:7d:15:1b:1a:77:64:9f:60:10:77:ea:7a:
01:c9:00:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFrwCnyHiHY1WNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MWIzYjQzMjAtMmU5My00ZTQyLWI5ZWUtODFkY2JkMTMxMjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY7a8NDB0KVpiSnXeSxyIK/xI+ttgiZzq4XY
ghDLdIgEjWz8FrSoz/rqX1Q6Q6kuC+PPlPPbuXgDAz9CzxBRDlvvm/YJwm3iQ8f1
SidpPxpZPFu8mqtoF66nnrUFVhoi5bKeN6C2R5DBfU9lL24+mR8Bjn4m6aybs8Pi
cHVfXsw0uSOyJTZIa1JVE4a3GF+2uE/mUgtqyw7YeTh7YoXklBbdrVcQwpcmgBHv
ZEyyG+ND4671UAN2gq5eH8UeZiOtmVXI6LejgaxlGaB7QzCJ/8kdVBKSRX25pFxF
P50Z0/c+rXkEGX6e6jCrA5iLj9f0OUCQqsKY++c2WcVZmASyRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWoRCX4kIdO5AOzP/03DTtTtMc7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODg4OWZmNjUtNTJhYS0z
NGM3LWFiNGYtZmIxOWJiNDc3ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISjw3Z3FVGoKEiVLB0Q1nJajxRfgPBDRGbuD5b8YaqYcBuypFEK4E0I
bwZRs6J9g+2Wne7Yz68QVVHl7j4W/30MoRku3cZjEJbunlwZRRAkrXZtRwQ68TyX
GlHjj7QkK9LSf5sXW/i6vYUiNVPMWfycVDaBW77dPtsz7rBk8q/hup2hh27hbzH1
t7+WFv2iOiPPZAjUfHrbMrhkS9ehwqSPb9gFqvVaMtem2y63joqyA8fxuo1OFTyq
iMpdQdomElhZ9SsVFzZH68GaDHPWNKm/A3AhfacYgv1eCI35NxCGj9qw28BPVzLo
OziQl4C3On0VGxp3ZJ9gEHfqegHJAIU=
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:05 2024 by rpki-client on console-ams.rpki-client.org