Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a36e061e-3929-36a0-910d-fb8f27a500a3.roa
File: a36e061e-3929-36a0-910d-fb8f27a500a3.roa (raw, json)
Hash identifier: 4H7+fih4fguk9fQThSRh5bR4NKZi5u3Rr86OplrIdyg=
Subject key identifier: 22:DD:CA:81:59:5B:CE:3B:D5:88:D0:98:B7:54:BC:4E:E4:F1:7B:EE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE566E3DAA429804A14D480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a36e061e-3929-36a0-910d-fb8f27a500a3.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 396870
IP address blocks: 205.200.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e5:66:e3:da:a4:29:80:4a:14:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=44f65aba-8174-4cc7-864e-2751651bdf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:77:6e:b3:f4:05:9e:ce:98:fa:8b:f1:1f:
a0:6c:57:b7:6e:e5:40:29:3f:ee:93:f6:46:4e:be:
ab:ec:37:e8:35:a0:76:70:81:1a:c8:4b:05:f3:91:
81:f1:c6:60:c7:36:72:e9:e4:09:ca:0a:20:16:5d:
1c:d8:57:74:db:fc:6f:77:ff:bb:3b:d7:76:c1:80:
8c:95:05:75:b6:82:09:f9:4a:ac:4d:c7:b3:db:3b:
e9:33:e2:ab:37:00:1a:3d:e2:bd:0e:fb:bc:1f:1f:
53:cf:92:74:4e:af:67:a6:20:ce:94:0c:3a:34:d5:
dd:cb:7f:27:9b:ac:eb:8b:5e:c7:71:cf:5b:2e:96:
7d:5e:16:14:9a:51:76:f9:87:8a:1f:58:f2:57:36:
fd:68:21:ec:ed:db:47:cd:d2:0c:39:ab:e3:3e:e6:
e9:97:cb:b2:0c:5e:3b:57:11:55:8c:62:32:72:e2:
1f:6e:8b:57:d0:13:62:a9:57:ba:a3:41:bd:53:68:
19:ed:8a:24:ce:65:b0:5f:00:1d:f2:26:0d:41:78:
58:cc:cb:2c:c1:4a:68:d0:c8:12:c9:8d:e1:01:44:
d4:e1:f9:79:1b:35:a1:18:26:ed:d4:59:df:5b:a8:
c4:b7:b3:a5:c0:31:ae:91:c8:b7:99:d5:ba:67:91:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:CA:81:59:5B:CE:3B:D5:88:D0:98:B7:54:BC:4E:E4:F1:7B:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a36e061e-3929-36a0-910d-fb8f27a500a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
205.200.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:ef:37:39:44:2f:f1:ac:96:f2:e0:85:93:52:76:64:b2:d6:
a5:56:95:db:bc:3e:9c:1c:91:82:39:72:54:95:88:04:7d:3c:
44:13:19:5b:a5:9a:9f:08:79:dd:8a:d5:33:d6:a5:9c:d2:35:
a0:2b:eb:24:4c:c8:20:21:97:31:b7:ee:93:ec:6b:b1:3f:bc:
94:90:96:5c:b4:4d:a2:56:24:7e:9a:f7:22:b6:a6:b9:b0:da:
a1:dd:ca:4d:40:44:f1:69:dd:6f:6c:c6:6d:c0:16:8a:f2:51:
bd:3b:66:7d:5c:f7:9c:97:75:56:b1:6f:05:fc:d9:e0:56:76:
f4:07:d2:41:43:b7:42:eb:70:48:79:96:0f:9c:67:52:7c:d9:
f8:02:62:01:73:65:81:c0:55:a8:01:a0:7d:4c:5d:ee:cf:50:
4f:94:f7:d5:50:5b:b4:82:c7:64:a4:3b:dc:15:42:d1:a1:ae:
47:9a:b3:43:00:b3:78:6a:bd:00:fa:0d:96:d7:c8:af:b7:c5:
fa:b6:c3:08:a0:84:e4:8f:a2:b4:10:42:c3:d3:23:02:8c:31:
69:78:10:f9:37:17:6b:0a:c1:ec:ee:d7:f7:8e:af:a2:95:10:
4a:d8:74:97:09:98:12:b2:91:f1:42:77:fb:af:65:c9:d8:2e:
c7:94:3b:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5Wbj2qQpgEoU1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
NDRmNjVhYmEtODE3NC00Y2M3LTg2NGUtMjc1MTY1MWJkZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfB3brP0BZ7OmPqL8R+gbFe3buVAKT/uk/ZG
Tr6r7DfoNaB2cIEayEsF85GB8cZgxzZy6eQJygogFl0c2Fd02/xvd/+7O9d2wYCM
lQV1toIJ+UqsTcez2zvpM+KrNwAaPeK9Dvu8Hx9Tz5J0Tq9npiDOlAw6NNXdy38n
m6zri17Hcc9bLpZ9XhYUmlF2+YeKH1jyVzb9aCHs7dtHzdIMOavjPubpl8uyDF47
VxFVjGIycuIfbotX0BNiqVe6o0G9U2gZ7YokzmWwXwAd8iYNQXhYzMsswUpo0MgS
yY3hAUTU4fl5GzWhGCbt1FnfW6jEt7OlwDGukci3mdW6Z5FVJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLdyoFZW8471YjQmLdUvE7k8XvuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTM2ZTA2MWUtMzkyOS0z
NmEwLTkxMGQtZmI4ZjI3YTUwMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzcheMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXvNzlEL/GslvLghZNSdmSy1qVWldu8PpwckYI5clSViAR9PEQTGVul
mp8Ied2K1TPWpZzSNaAr6yRMyCAhlzG37pPsa7E/vJSQlly0TaJWJH6a9yK2prmw
2qHdyk1ARPFp3W9sxm3AForyUb07Zn1c95yXdVaxbwX82eBWdvQH0kFDt0LrcEh5
lg+cZ1J82fgCYgFzZYHAVagBoH1MXe7PUE+U99VQW7SCx2SkO9wVQtGhrkeas0MA
s3hqvQD6DZbXyK+3xfq2wwighOSPorQQQsPTIwKMMWl4EPk3F2sKwezu1/eOr6KV
EErYdJcJmBKykfFCd/uvZcnYLseUO+Y=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org