Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a292ae80-0244-3dec-8587-6ddd7dfbcb48.roa
File: a292ae80-0244-3dec-8587-6ddd7dfbcb48.roa (raw, json)
Hash identifier: TM/8Z2zw1M0g/C1KO2+P9N0dgIz0jg4OBfue06s5dr0=
Subject key identifier: 28:C8:81:63:90:9E:92:F6:35:95:44:B2:0B:79:BE:9A:F5:9F:23:00
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0D8F5CFC2482542178DEC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a292ae80-0244-3dec-8587-6ddd7dfbcb48.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 20371
IP address blocks: 207.236.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:d8:f5:cf:c2:48:25:42:17:8d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=ef70ca4b-6f75-4c2a-a1d3-697c7e47c397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:0d:5f:b4:75:9b:3b:f2:5e:59:48:91:4e:
97:04:d0:1d:f5:48:79:81:d1:13:1e:f2:53:0e:4b:
61:b2:55:6a:f4:4d:58:57:22:18:d7:be:bc:42:1d:
e4:24:30:fc:0c:1f:02:c0:d1:d0:17:a2:8c:3e:32:
d8:73:ac:c3:b5:bf:19:b8:b2:07:00:db:a6:72:1a:
41:80:3e:af:0c:be:3d:f0:6f:57:5c:d0:e6:8e:9d:
dc:a6:08:89:66:4c:80:7b:73:b6:87:71:9b:d9:95:
6c:8e:5a:7d:2d:a4:c5:43:25:8c:da:b0:e6:46:2b:
1d:de:a4:27:fa:b8:c1:58:95:e8:ed:7f:c5:8b:96:
13:48:b2:45:37:37:cd:d3:96:37:1a:b6:f1:4a:7a:
97:e1:55:bc:25:ad:1f:1a:65:1e:2d:ab:4b:e0:3f:
c9:44:f2:d5:45:8f:0e:7f:f8:5e:0a:b8:e9:94:d7:
33:fa:8f:ea:28:4c:b6:e7:28:5d:5e:4f:9a:2e:3c:
b1:b7:cf:9d:42:0f:68:e1:97:d9:79:6d:54:bb:18:
c9:9d:6c:2e:3c:6b:e6:a9:61:18:a9:72:31:d6:c8:
d2:2b:ff:9b:0c:be:41:ab:81:07:5f:f7:7a:db:33:
15:fc:4f:c7:bd:71:a2:7c:37:76:86:23:e9:00:71:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:81:63:90:9E:92:F6:35:95:44:B2:0B:79:BE:9A:F5:9F:23:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a292ae80-0244-3dec-8587-6ddd7dfbcb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.236.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3e:5c:49:1a:e5:57:66:6d:59:74:b5:ee:7a:ee:29:0c:05:
34:1d:e2:e0:1c:dc:b8:77:06:7c:32:aa:81:35:d2:a5:94:fa:
b8:a0:66:b0:b6:bd:4e:23:22:c9:55:b5:04:93:28:be:5c:c1:
11:25:0c:52:10:9d:b4:35:97:43:68:2a:62:c4:66:d9:6b:b2:
20:10:9c:56:82:39:37:74:1d:5e:a3:bf:55:52:4b:bf:16:10:
3f:fd:25:02:35:60:84:22:91:77:3e:ea:79:1f:57:ae:39:a5:
05:7f:03:6a:99:31:96:b4:51:49:c8:7a:c9:e2:39:c2:51:87:
53:40:19:28:42:e6:fb:db:d5:54:3d:6f:35:14:99:77:1c:a7:
f9:fa:f0:96:05:c6:10:6e:a1:64:f7:8f:0c:b3:78:f8:8e:ba:
e8:75:8d:88:30:64:3b:54:d6:f7:0e:bd:1b:19:89:70:92:46:
be:13:39:05:e2:9d:ef:fd:11:28:4e:d5:df:f9:3c:53:f0:27:
04:2a:60:88:9d:69:ed:0a:d2:7f:1c:31:ff:83:c4:48:d2:f2:
0b:54:7a:c5:7a:ce:3d:31:c0:30:db:fd:a5:f6:6c:ec:7b:df:
23:f9:db:fb:e5:a1:be:15:04:d9:fd:73:71:79:0d:13:9b:d3:
50:59:3b:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsNj1z8JIJUIXjewwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZWY3MGNhNGItNmY3NS00YzJhLWExZDMtNjk3YzdlNDdjMzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO0NX7R1mzvyXllIkU6XBNAd9Uh5gdETHvJT
DkthslVq9E1YVyIY1768Qh3kJDD8DB8CwNHQF6KMPjLYc6zDtb8ZuLIHANumchpB
gD6vDL498G9XXNDmjp3cpgiJZkyAe3O2h3Gb2ZVsjlp9LaTFQyWM2rDmRisd3qQn
+rjBWJXo7X/Fi5YTSLJFNzfN05Y3GrbxSnqX4VW8Ja0fGmUeLatL4D/JRPLVRY8O
f/heCrjplNcz+o/qKEy25yhdXk+aLjyxt8+dQg9o4ZfZeW1UuxjJnWwuPGvmqWEY
qXIx1sjSK/+bDL5Bq4EHX/d62zMV/E/HvXGifDd2hiPpAHFvmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjIgWOQnpL2NZVEsgt5vpr1nyMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTI5MmFlODAtMDI0NC0z
ZGVjLTg1ODctNmRkZDdkZmJjYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+yMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHY+XEka5VdmbVl0te567ikMBTQd4uAc3Lh3BnwyqoE10qWU+rigZrC2
vU4jIslVtQSTKL5cwRElDFIQnbQ1l0NoKmLEZtlrsiAQnFaCOTd0HV6jv1VSS78W
ED/9JQI1YIQikXc+6nkfV645pQV/A2qZMZa0UUnIesniOcJRh1NAGShC5vvb1VQ9
bzUUmXccp/n68JYFxhBuoWT3jwyzePiOuuh1jYgwZDtU1vcOvRsZiXCSRr4TOQXi
ne/9EShO1d/5PFPwJwQqYIidae0K0n8cMf+DxEjS8gtUesV6zj0xwDDb/aX2bOx7
3yP52/vlob4VBNn9c3F5DROb01BZO7w=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org