Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a8b93452-2b8b-32b6-8cf5-ce6f075e8f0e.roa
File: a8b93452-2b8b-32b6-8cf5-ce6f075e8f0e.roa (raw, json)
Hash identifier: 3MEm9GB2pjvYVH2mtVcfO2O4nWVGgMU7n66W1/iXzrU=
Subject key identifier: 00:72:01:01:06:D8:0F:DD:36:36:C1:7C:E5:8A:C9:83:EA:2F:54:7F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFE719316AEE0F25DD7E23
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a8b93452-2b8b-32b6-8cf5-ce6f075e8f0e.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 16487
IP address blocks: 204.101.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:e7:19:31:6a:ee:0f:25:dd:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=121029b4-4133-4e69-82dd-9313d9746111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:f3:96:12:b4:be:e4:73:96:ab:82:28:1f:
f7:3e:0b:31:a7:78:ea:2f:1e:94:4c:dc:34:8e:5a:
92:2a:c3:bd:ac:10:ac:a0:73:19:63:4f:e2:37:05:
1f:1d:c6:4c:6a:bb:bc:b5:39:90:be:54:9d:41:65:
e9:2a:25:23:b3:44:10:1f:02:b1:1b:66:15:db:e1:
50:73:e7:86:6d:42:bd:97:c9:8a:28:f0:46:3a:2b:
77:74:cc:c7:e8:8d:60:86:e0:50:50:79:0d:37:27:
49:29:c9:76:42:ac:a1:79:0d:6d:40:e4:5d:18:05:
40:8a:8d:38:00:7e:06:83:64:ab:2e:3f:95:6b:59:
84:92:e1:6d:f7:45:07:c9:7d:31:a2:3f:38:8b:dc:
d4:19:14:ca:e3:5f:17:e7:1c:aa:d4:15:d9:b2:4c:
1a:5a:4f:75:09:4b:b1:de:de:4f:f8:1e:d3:17:e4:
ef:51:d4:6c:69:36:f0:c6:5f:71:5c:a7:59:ea:84:
19:45:39:31:7f:de:5a:af:0a:b2:a5:31:a5:e1:65:
a2:55:0f:1a:28:bd:1d:de:cd:c1:ae:56:47:68:7d:
5c:33:52:4d:9b:f0:35:56:8b:e0:b2:e7:d4:8f:cc:
45:b4:7a:a4:8b:14:c5:db:d5:ec:95:bc:30:45:fa:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:72:01:01:06:D8:0F:DD:36:36:C1:7C:E5:8A:C9:83:EA:2F:54:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a8b93452-2b8b-32b6-8cf5-ce6f075e8f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:58:4b:fd:16:79:c4:36:38:15:91:60:74:eb:f4:ab:44:5b:
46:cd:17:29:32:4d:33:d7:08:8d:5c:06:04:9e:b0:d9:bb:4a:
4e:a8:ef:66:da:85:eb:05:33:64:ca:e3:5f:73:6f:7a:eb:83:
1c:a0:1e:a6:4f:10:af:09:7e:b1:9b:c4:3a:1c:3a:4f:8b:a6:
ea:ba:33:4f:d8:76:67:62:9e:49:84:a3:8c:86:5b:8d:af:5f:
54:78:85:1e:00:70:32:85:46:7e:93:c3:b3:40:74:3c:bb:20:
f2:eb:49:3e:88:ad:03:9f:90:3c:7b:c4:f4:76:ae:7b:78:b8:
31:52:70:d3:ac:c8:dc:e8:03:96:0d:27:5a:6e:15:bc:97:de:
b4:d5:ee:87:e9:e6:b9:1d:5a:54:4b:5b:fc:ba:40:b6:76:39:
1a:e5:b2:6f:57:cc:93:40:32:77:15:9d:37:99:fd:28:12:da:
53:93:5c:09:65:b7:3c:fc:ac:2e:4d:eb:da:16:4d:00:84:f4:
60:07:2e:1c:ed:3d:2d:e2:34:60:2f:c5:80:1e:06:ab:1e:1b:
dd:5e:ab:c5:0b:34:9a:9e:03:e9:ec:b2:4b:c9:7a:96:35:c1:
fa:c9:11:4a:f1:2e:ef:a9:e7:20:4a:47:7c:89:32:a3:1a:23:
96:4d:84:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdr+cZMWruDyXdfiMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MTIxMDI5YjQtNDEzMy00ZTY5LTgyZGQtOTMxM2Q5NzQ2MTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllzzlhK0vuRzlquCKB/3Pgsxp3jqLx6UTNw0
jlqSKsO9rBCsoHMZY0/iNwUfHcZMaru8tTmQvlSdQWXpKiUjs0QQHwKxG2YV2+FQ
c+eGbUK9l8mKKPBGOit3dMzH6I1ghuBQUHkNNydJKcl2QqyheQ1tQORdGAVAio04
AH4Gg2SrLj+Va1mEkuFt90UHyX0xoj84i9zUGRTK418X5xyq1BXZskwaWk91CUux
3t5P+B7TF+TvUdRsaTbwxl9xXKdZ6oQZRTkxf95arwqypTGl4WWiVQ8aKL0d3s3B
rlZHaH1cM1JNm/A1VovgsufUj8xFtHqkixTF29XslbwwRfqDpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAByAQEG2A/dNjbBfOWKyYPqL1R/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYThiOTM0NTItMmI4Yi0z
MmI2LThjZjUtY2U2ZjA3NWU4ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlYS/0WecQ2OBWRYHTr9KtEW0bNFykyTTPXCI1cBgSesNm7Sk6o72ba
hesFM2TK419zb3rrgxygHqZPEK8JfrGbxDocOk+Lpuq6M0/YdmdinkmEo4yGW42v
X1R4hR4AcDKFRn6Tw7NAdDy7IPLrST6IrQOfkDx7xPR2rnt4uDFScNOsyNzoA5YN
J1puFbyX3rTV7ofp5rkdWlRLW/y6QLZ2ORrlsm9XzJNAMncVnTeZ/SgS2lOTXAll
tzz8rC5N69oWTQCE9GAHLhztPS3iNGAvxYAeBqseG91eq8ULNJqeA+nsskvJepY1
wfrJEUrxLu+p5yBKR3yJMqMaI5ZNhLs=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:45 2024 by rpki-client on console-ams.rpki-client.org