Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae3849a4-e5a6-3d50-9fb8-b7e1894b048a.roa
File: ae3849a4-e5a6-3d50-9fb8-b7e1894b048a.roa (raw, json)
Hash identifier: 2lyjYW7tohVn3/c0RR9fSmzQutZB4jlIVrc4PA2Ym2A=
Subject key identifier: 4B:96:68:94:36:6E:D0:2C:47:2C:66:77:25:3D:E8:FA:2B:3A:1D:CA
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584493142811E7BEDFDE6CDB8300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae3849a4-e5a6-3d50-9fb8-b7e1894b048a.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 855
IP address blocks: 142.134.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:28:11:e7:be:df:de:6c:db:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=e90bbbd2-b889-4d91-9c94-6bad752a9b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:c9:d7:1d:fd:97:40:e6:f0:cf:ee:51:3b:
49:41:07:b4:aa:81:f8:c4:86:ff:4c:8d:4b:cc:38:
ce:2f:28:8a:a9:c6:81:32:7d:0f:ac:35:72:74:41:
01:dc:5d:e8:e9:5a:c5:d0:d9:cc:f2:1d:64:cb:3c:
87:c0:05:61:99:92:cb:1a:81:a8:e4:d8:a2:f7:93:
dd:f5:be:6a:1f:1e:47:20:26:91:45:9b:eb:a5:20:
90:5c:ec:6d:c3:e8:a4:ea:37:91:ee:09:78:23:11:
1c:57:92:e8:aa:1b:36:1d:f5:2f:3d:f6:69:34:05:
85:3f:3e:aa:d8:cb:ab:27:cf:c4:79:53:b1:9c:29:
31:25:1d:ff:aa:2d:6f:aa:e9:2f:45:01:1b:9e:65:
60:fc:a2:01:6a:be:42:89:c3:45:84:db:11:6b:56:
1f:20:03:b4:1b:34:eb:ff:fc:ed:6f:2d:0a:90:9e:
41:9d:63:74:37:73:fd:4a:36:93:54:31:b0:2a:b1:
73:c2:48:a4:b6:ce:55:ea:f1:1c:bc:03:85:bb:6e:
ef:6f:c1:c4:06:3d:16:06:ca:c3:d2:6f:48:aa:9b:
0f:c9:39:ba:e1:98:7a:9a:77:72:4e:69:a5:e6:da:
56:78:45:f1:74:bb:1a:0d:a1:0c:ce:95:5b:ed:cc:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:68:94:36:6E:D0:2C:47:2C:66:77:25:3D:E8:FA:2B:3A:1D:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae3849a4-e5a6-3d50-9fb8-b7e1894b048a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
142.134.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:9b:20:a4:21:2f:7e:0d:a0:02:c2:0e:7b:6c:58:18:7e:9e:
ad:a7:cf:2f:1c:79:c0:4c:24:e2:b0:19:83:c9:8b:1b:c4:6d:
07:6b:54:73:c9:02:ac:43:55:74:9b:05:0e:0d:92:e3:ca:3b:
fe:c0:da:37:4b:d8:38:ec:75:ab:ce:6e:74:36:44:9c:4c:3f:
98:b2:26:52:27:d9:c7:eb:2e:69:bf:c3:75:ff:22:9d:96:4f:
ca:e6:3f:30:f0:aa:e1:40:9c:40:6a:b4:75:b9:a1:8b:6f:74:
a8:b6:47:01:40:cd:7b:0d:69:1c:92:fc:2e:49:d1:20:20:1e:
ec:54:27:17:e7:db:b9:07:67:4b:7b:e4:af:29:d2:67:b0:80:
6b:8d:2b:c0:17:be:e3:71:86:99:cc:5b:d1:46:22:96:e3:46:
a0:5b:2a:2c:20:37:a6:a2:62:d6:2d:c1:8a:da:a0:bb:76:11:
aa:28:52:16:09:15:b0:18:cb:87:d0:d4:6c:c7:93:78:ea:e5:
49:0b:e0:cb:40:ae:e5:fa:9a:de:f4:cd:3c:15:90:56:4c:d3:
41:69:a6:7f:2a:94:2a:d7:df:1b:b1:2b:30:37:78:60:c8:df:
ed:41:b6:6d:77:f6:1f:47:c2:d8:c5:df:f1:e9:86:07:e9:15:
18:3f:cf:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFCgR577f3mzbgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTkwYmJiZDItYjg4OS00ZDkxLTljOTQtNmJhZDc1MmE5YjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2fJ1x39l0Dm8M/uUTtJQQe0qoH4xIb/TI1L
zDjOLyiKqcaBMn0PrDVydEEB3F3o6VrF0NnM8h1kyzyHwAVhmZLLGoGo5Nii95Pd
9b5qHx5HICaRRZvrpSCQXOxtw+ik6jeR7gl4IxEcV5Loqhs2HfUvPfZpNAWFPz6q
2MurJ8/EeVOxnCkxJR3/qi1vqukvRQEbnmVg/KIBar5CicNFhNsRa1YfIAO0GzTr
//ztby0KkJ5BnWN0N3P9SjaTVDGwKrFzwkikts5V6vEcvAOFu27vb8HEBj0WBsrD
0m9IqpsPyTm64Zh6mndyTmml5tpWeEXxdLsaDaEMzpVb7czqNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuWaJQ2btAsRyxmdyU96PorOh3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYWUzODQ5YTQtZTVhNi0z
ZDUwLTlmYjgtYjdlMTg5NGIwNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjobwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSbIKQhL34NoALCDntsWBh+nq2nzy8cecBMJOKwGYPJixvEbQdrVHPJ
AqxDVXSbBQ4NkuPKO/7A2jdL2DjsdavObnQ2RJxMP5iyJlIn2cfrLmm/w3X/Ip2W
T8rmPzDwquFAnEBqtHW5oYtvdKi2RwFAzXsNaRyS/C5J0SAgHuxUJxfn27kHZ0t7
5K8p0mewgGuNK8AXvuNxhpnMW9FGIpbjRqBbKiwgN6aiYtYtwYraoLt2EaooUhYJ
FbAYy4fQ1GzHk3jq5UkL4MtAruX6mt70zTwVkFZM00Fppn8qlCrX3xuxKzA3eGDI
3+1Btm139h9HwtjF3/HphgfpFRg/zxo=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org