Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b05766a3-1f50-38c6-b1e2-1f91790264e5.roa
File: b05766a3-1f50-38c6-b1e2-1f91790264e5.roa (raw, json)
Hash identifier: zQrQ+cZAMYZcLRhm339WoccIYN7/xbVIy/LEc1z4mQg=
Subject key identifier: 74:8D:CE:0D:78:CE:4C:66:A1:32:E6:27:AF:3B:E9:94:2B:04:E0:A1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858439AE4DC56BA6C3E9D50D53000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b05766a3-1f50-38c6-b1e2-1f91790264e5.roa
Signing time: Wed 18 Oct 2023 12:00:00 +0000
ROA not before: Wed 18 Oct 2023 12:00:00 +0000
ROA not after: Thu 18 Jan 2024 05:00:00 +0000
asID: 32678
IP address blocks: 174.90.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:e4:dc:56:ba:6c:3e:9d:50:d5:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Oct 18 12:00:00 2023 GMT
Not After : Jan 18 05:00:00 2024 GMT
Subject: CN=e1a1dce3-cdf3-4971-af79-0e5988159631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:71:6a:73:f9:ce:68:67:44:1d:a6:7e:1b:
a8:d2:75:da:2f:03:23:07:e7:f8:a0:be:4d:1e:f3:
b0:8f:14:94:f5:76:e5:30:c8:dc:18:76:1f:7b:7f:
a1:0e:90:8e:42:51:f4:40:d1:5b:e1:b5:64:80:c2:
d2:38:c0:0f:ee:ef:34:fb:fc:ce:ac:a4:89:6b:03:
e3:5d:49:e3:78:24:70:91:89:4d:13:93:fc:c7:38:
57:47:4f:ae:0c:fa:26:65:3c:08:9c:4c:21:94:53:
a5:9b:dd:67:13:37:3c:54:b6:1a:b8:c8:9d:ae:2f:
56:a8:70:9b:34:90:24:bc:4a:43:c8:ee:db:74:13:
38:70:a0:a5:ba:42:b5:3c:a8:dc:68:a8:4d:b0:68:
c1:59:51:27:24:82:d7:30:05:6a:e3:e3:1a:d5:d3:
71:36:2a:e9:32:30:66:85:91:92:9f:9c:94:97:72:
f5:5f:e7:ed:a6:b3:56:a8:04:26:1d:8e:7d:b9:95:
ad:28:eb:60:11:28:97:34:9a:44:32:f6:34:32:c7:
12:69:cc:a2:70:a3:18:ae:d2:73:86:03:9b:24:95:
24:73:cf:fb:25:82:22:30:22:1c:49:bf:eb:3f:44:
65:26:48:2a:a7:c2:bb:e2:53:89:59:9a:b5:e6:c9:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:CE:0D:78:CE:4C:66:A1:32:E6:27:AF:3B:E9:94:2B:04:E0:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b05766a3-1f50-38c6-b1e2-1f91790264e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
174.90.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:be:f3:95:8c:6c:f8:47:b3:bf:3d:5c:f1:b8:18:18:45:94:
14:5a:6a:1f:53:09:74:70:ae:38:60:ab:9c:d7:d7:eb:5e:70:
ca:1b:5e:69:3b:66:44:6a:f1:3d:57:47:39:7a:6f:97:5c:c6:
2a:3f:6a:42:6a:e5:b8:dc:a7:ca:90:a4:17:ca:9c:e0:46:4f:
84:50:0f:30:87:bd:17:5d:a3:54:16:a3:f7:10:ca:88:c4:fd:
9c:9c:ff:b5:9f:1f:8f:05:4f:4a:26:f3:00:04:a2:69:ef:55:
69:39:26:b9:68:9c:eb:3f:f2:9e:cf:c3:58:76:79:63:87:28:
bc:b0:39:b3:c4:bb:9f:7b:13:bc:a5:02:42:5c:90:35:10:57:
2e:3e:eb:fc:f0:e5:16:ff:f0:9d:b2:4d:4f:a6:13:90:66:5c:
96:de:4e:1f:47:98:0f:a8:fa:76:1f:cc:0b:79:35:f0:e4:fb:
39:e6:37:13:1d:36:cc:f7:00:30:0f:3f:d0:5c:0a:f5:ca:01:
17:26:9f:da:73:2b:d9:2e:8e:47:d3:45:86:23:be:61:21:40:
46:71:20:7d:ad:16:b0:91:69:d3:78:02:ae:fd:e2:8d:74:bb:
8c:4c:94:20:a1:e6:e4:bf:19:e0:e5:fc:c9:41:85:37:27:83:
c0:07:ea:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5NxWumw+nVDVMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
ZTFhMWRjZTMtY2RmMy00OTcxLWFmNzktMGU1OTg4MTU5NjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHBxanP5zmhnRB2mfhuo0nXaLwMjB+f4oL5N
HvOwjxSU9XblMMjcGHYfe3+hDpCOQlH0QNFb4bVkgMLSOMAP7u80+/zOrKSJawPj
XUnjeCRwkYlNE5P8xzhXR0+uDPomZTwInEwhlFOlm91nEzc8VLYauMidri9WqHCb
NJAkvEpDyO7bdBM4cKClukK1PKjcaKhNsGjBWVEnJILXMAVq4+Ma1dNxNirpMjBm
hZGSn5yUl3L1X+ftprNWqAQmHY59uZWtKOtgESiXNJpEMvY0MscSacyicKMYrtJz
hgObJJUkc8/7JYIiMCIcSb/rP0RlJkgqp8K74lOJWZq15sn8sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSNzg14zkxmoTLmJ6876ZQrBOChMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjA1NzY2YTMtMWY1MC0z
OGM2LWIxZTItMWY5MTc5MDI2NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArlocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEK+85WMbPhHs789XPG4GBhFlBRaah9TCXRwrjhgq5zX1+tecMobXmk7
ZkRq8T1XRzl6b5dcxio/akJq5bjcp8qQpBfKnOBGT4RQDzCHvRddo1QWo/cQyojE
/Zyc/7WfH48FT0om8wAEomnvVWk5JrlonOs/8p7Pw1h2eWOHKLywObPEu597E7yl
AkJckDUQVy4+6/zw5Rb/8J2yTU+mE5BmXJbeTh9HmA+o+nYfzAt5NfDk+znmNxMd
Nsz3ADAPP9BcCvXKARcmn9pzK9kujkfTRYYjvmEhQEZxIH2tFrCRadN4Aq794o10
u4xMlCCh5uS/GeDl/MlBhTcng8AH6rw=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:23:22 2024 by rpki-client on console-ams.rpki-client.org