Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/99c35d51-d1c0-3a0c-9796-3e1d9483727f.roa
File: 99c35d51-d1c0-3a0c-9796-3e1d9483727f.roa (raw, json)
Hash identifier: xYw50JyRkI6atk7z0E7NdJn2wuznO5FN29JJI8LDmKk=
Subject key identifier: 89:8F:AA:1B:23:12:68:EB:2B:18:39:0C:C8:42:18:0A:D5:48:E1:08
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE659DEA97058750C4BFE40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/99c35d51-d1c0-3a0c-9796-3e1d9483727f.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 216.209.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e6:59:de:a9:70:58:75:0c:4b:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=ce27aa07-e775-4c3f-84ae-86117be51ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:d5:6e:14:a2:22:fc:98:7d:47:46:51:64:
e8:60:af:ef:66:a9:e3:6a:ec:84:3e:9f:c2:95:15:
a2:09:b4:82:cc:32:13:c1:98:e7:9d:64:2e:6f:92:
3c:9d:36:28:83:9e:3f:de:dd:22:e9:ae:8b:98:fb:
02:3f:8b:64:39:c2:fe:09:b5:9e:4a:c8:94:df:f8:
d7:6d:2e:42:43:6e:1a:9e:17:b7:d5:93:86:87:b6:
63:a3:73:18:11:f1:4a:a0:b6:ce:bf:76:bb:a6:80:
be:dc:97:b3:29:ca:d1:16:c3:ae:19:7b:30:3a:87:
cf:eb:e7:5a:9a:5d:fe:d8:9d:d3:9c:e2:ad:b9:1a:
4a:5d:da:a1:c9:ed:55:06:fe:55:9f:8c:a5:13:1b:
6c:9e:d0:a0:d4:2f:39:9e:59:9c:d8:5a:fc:11:ca:
0a:c8:40:79:50:eb:92:67:7c:56:8e:9c:fe:7e:d3:
10:b8:1f:f9:91:95:b2:9d:84:af:8c:c9:29:6f:c1:
cd:58:66:df:ff:d0:2b:52:91:7c:5a:70:5f:51:0a:
78:b3:ef:37:02:8c:34:ad:04:b5:7a:37:04:94:56:
09:5e:ad:00:31:ed:c8:4f:0c:07:04:70:9d:5c:60:
92:5a:e1:26:3d:69:4a:48:61:9d:4f:10:f0:ac:c8:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:AA:1B:23:12:68:EB:2B:18:39:0C:C8:42:18:0A:D5:48:E1:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/99c35d51-d1c0-3a0c-9796-3e1d9483727f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d1:cd:ba:fa:e8:a3:0b:ce:63:38:81:7d:0a:29:5f:85:83:
5c:54:2f:9b:7b:d4:59:84:80:e2:82:89:51:d5:4f:cb:06:98:
f8:9d:44:13:7d:2f:4a:f5:97:fa:dc:21:50:1e:8a:55:06:e6:
36:f3:e7:60:68:00:05:1a:15:a2:a0:41:08:3f:54:c9:a8:7f:
bf:3b:17:fd:84:9b:89:90:b0:35:aa:e1:a3:fd:14:95:b0:7b:
1f:fe:ed:2f:e5:7c:3f:94:1a:88:b1:61:f5:f2:90:e5:ce:05:
79:c4:59:49:83:bd:8e:e9:11:b3:aa:ea:d2:e9:f0:7c:9c:9b:
97:86:26:f3:b4:d4:11:a3:32:62:4b:1a:8f:87:83:ed:0f:08:
2c:44:4d:62:4e:e8:ad:9d:6b:14:bf:b0:93:be:0a:50:0e:e6:
8c:83:92:17:16:99:83:6d:e6:5a:fa:fc:68:5f:3c:d5:f9:eb:
3a:d0:08:b4:e4:82:40:6a:d6:c4:05:2d:df:e7:3d:93:7b:aa:
34:4e:cc:66:c1:55:b2:4c:4f:b1:ec:4b:95:ae:3c:0c:d5:c6:
67:cb:03:a0:29:f9:6e:be:47:69:85:ff:b8:b6:7f:fd:25:c6:
50:a6:16:99:fe:54:d6:11:52:d3:44:da:dd:b7:26:e7:e9:27:
9a:6e:61:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5lneqXBYdQxL/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
Y2UyN2FhMDctZTc3NS00YzNmLTg0YWUtODYxMTdiZTUxYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OnVbhSiIvyYfUdGUWToYK/vZqnjauyEPp/C
lRWiCbSCzDITwZjnnWQub5I8nTYog54/3t0i6a6LmPsCP4tkOcL+CbWeSsiU3/jX
bS5CQ24anhe31ZOGh7Zjo3MYEfFKoLbOv3a7poC+3JezKcrRFsOuGXswOofP6+da
ml3+2J3TnOKtuRpKXdqhye1VBv5Vn4ylExtsntCg1C85nlmc2Fr8EcoKyEB5UOuS
Z3xWjpz+ftMQuB/5kZWynYSvjMkpb8HNWGbf/9ArUpF8WnBfUQp4s+83Aow0rQS1
ejcElFYJXq0AMe3ITwwHBHCdXGCSWuEmPWlKSGGdTxDwrMjp5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImPqhsjEmjrKxg5DMhCGArVSOEIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTljMzVkNTEtZDFjMC0z
YTBjLTk3OTYtM2UxZDk0ODM3MjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7Rzbr66KMLzmM4gX0KKV+Fg1xUL5t71FmEgOKCiVHVT8sGmPidRBN9
L0r1l/rcIVAeilUG5jbz52BoAAUaFaKgQQg/VMmof787F/2Em4mQsDWq4aP9FJWw
ex/+7S/lfD+UGoixYfXykOXOBXnEWUmDvY7pEbOq6tLp8Hycm5eGJvO01BGjMmJL
Go+Hg+0PCCxETWJO6K2daxS/sJO+ClAO5oyDkhcWmYNt5lr6/GhfPNX56zrQCLTk
gkBq1sQFLd/nPZN7qjROzGbBVbJMT7HsS5WuPAzVxmfLA6Ap+W6+R2mF/7i2f/0l
xlCmFpn+VNYRUtNE2t23JufpJ5puYco=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org