Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f47393e-af80-338a-9544-ad4fdaae86a9.roa
File: 9f47393e-af80-338a-9544-ad4fdaae86a9.roa (raw, json)
Hash identifier: g6bopgEzXYhgsU0x874ggkvxnsWfNljR+Dy3k4KdrS0=
Subject key identifier: 7E:FF:16:A2:74:5B:CF:08:7D:50:46:99:47:BE:97:68:80:C7:CC:78
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4B8C258EA430338B38B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f47393e-af80-338a-9544-ad4fdaae86a9.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 18814
IP address blocks: 142.176.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:b8:c2:58:ea:43:03:38:b3:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=34bbaa3a-2159-4291-85fb-de1fe2ee8456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:0a:4a:af:5a:eb:26:58:a9:1c:13:28:27:
5f:5f:11:87:90:44:17:97:52:cc:12:97:c0:2b:8a:
2a:34:fe:90:c3:de:25:a8:f3:3d:7e:28:ed:6f:43:
10:d8:ac:b0:e4:18:2d:0d:43:a5:0f:ea:e2:47:9e:
5c:9c:3f:27:4d:d8:0a:a6:98:43:2c:7a:a5:d4:8b:
41:35:92:b0:e4:3a:f9:c7:f7:e7:99:a8:72:da:5d:
aa:42:c9:50:97:f9:65:8a:46:34:47:19:6e:e2:64:
41:b0:4b:68:de:29:02:53:46:97:96:af:6c:f1:23:
58:a0:90:8e:e5:c4:1e:e2:81:62:84:c1:ca:1e:de:
93:f7:67:06:96:3a:92:de:91:05:b1:dd:56:fa:21:
96:65:a5:bc:a0:8d:28:8c:e9:bb:14:50:19:a0:6c:
c2:09:bd:ab:72:4b:a8:55:72:47:fe:e4:77:7a:40:
be:f2:d2:44:27:49:4e:cf:0a:4e:b5:77:cd:9a:9c:
2f:22:14:ac:a2:aa:ae:d6:6b:d6:a4:c9:a4:aa:e3:
8d:2f:7a:63:9b:32:08:8b:be:be:ef:81:88:b1:f5:
d0:c4:c0:04:26:b0:f2:da:c9:fa:89:64:e0:fc:da:
f9:84:4c:59:e8:17:33:e8:c9:e7:19:a2:4b:32:57:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:16:A2:74:5B:CF:08:7D:50:46:99:47:BE:97:68:80:C7:CC:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9f47393e-af80-338a-9544-ad4fdaae86a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.176.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:41:bc:7a:85:fa:9e:06:93:4d:b9:44:4a:81:15:6d:8b:cb:
1a:dd:21:18:41:11:c8:01:41:5b:82:d5:2a:1e:be:70:55:74:
11:f3:bb:95:61:47:44:c9:82:4c:7e:e6:ce:0b:51:e8:37:07:
4a:61:f7:ed:02:a7:95:a1:56:cc:aa:96:c1:64:5d:ed:40:f1:
65:c1:2d:b7:8f:15:02:a2:f2:02:42:f8:36:22:8e:29:48:f3:
71:bc:77:3d:31:3c:34:47:7b:72:67:2c:c8:fc:d8:01:bc:b8:
9c:3c:7a:39:ec:c1:a3:c6:cc:44:39:1e:59:f5:29:35:fe:3f:
c5:97:9c:ec:a3:7c:c3:4d:3f:32:89:15:58:77:8f:50:ce:4d:
26:c7:c3:ea:d4:a5:94:78:5a:a2:45:71:49:81:0b:59:df:19:
90:d3:95:71:ed:e1:52:0a:09:58:b6:e5:e8:08:29:0f:13:8b:
f7:bd:d3:f7:ae:94:1d:94:36:30:9d:ef:41:99:4a:be:36:1b:
35:77:c6:bd:07:89:e8:c4:17:9a:07:ea:da:58:60:ad:75:3c:
27:0f:5a:cd:ff:82:0b:47:f5:60:aa:30:21:3a:b6:4f:80:1c:
4d:30:b7:6f:ee:01:89:b6:e3:f4:cb:22:7c:fa:c0:ef:25:4d:
1b:9c:66:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5LjCWOpDAzizi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
MzRiYmFhM2EtMjE1OS00MjkxLTg1ZmItZGUxZmUyZWU4NDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdoKSq9a6yZYqRwTKCdfXxGHkEQXl1LMEpfA
K4oqNP6Qw94lqPM9fijtb0MQ2Kyw5BgtDUOlD+riR55cnD8nTdgKpphDLHql1ItB
NZKw5Dr5x/fnmahy2l2qQslQl/llikY0Rxlu4mRBsEto3ikCU0aXlq9s8SNYoJCO
5cQe4oFihMHKHt6T92cGljqS3pEFsd1W+iGWZaW8oI0ojOm7FFAZoGzCCb2rckuo
VXJH/uR3ekC+8tJEJ0lOzwpOtXfNmpwvIhSsoqqu1mvWpMmkquONL3pjmzIIi76+
74GIsfXQxMAEJrDy2sn6iWTg/Nr5hExZ6Bcz6MnnGaJLMleZHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7/FqJ0W88IfVBGmUe+l2iAx8x4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWY0NzM5M2UtYWY4MC0z
MzhhLTk1NDQtYWQ0ZmRhYWU4NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjrAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElBvHqF+p4Gk025REqBFW2LyxrdIRhBEcgBQVuC1SoevnBVdBHzu5Vh
R0TJgkx+5s4LUeg3B0ph9+0Cp5WhVsyqlsFkXe1A8WXBLbePFQKi8gJC+DYijilI
83G8dz0xPDRHe3JnLMj82AG8uJw8ejnswaPGzEQ5Hln1KTX+P8WXnOyjfMNNPzKJ
FVh3j1DOTSbHw+rUpZR4WqJFcUmBC1nfGZDTlXHt4VIKCVi25egIKQ8Ti/e90/eu
lB2UNjCd70GZSr42GzV3xr0HiejEF5oH6tpYYK11PCcPWs3/ggtH9WCqMCE6tk+A
HE0wt2/uAYm24/TLInz6wO8lTRucZsQ=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org