Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b59f7f0a-8112-35b9-92be-543de848e04d.roa
File: b59f7f0a-8112-35b9-92be-543de848e04d.roa (raw, json)
Hash identifier: eMmzhdYp2PsAv1u33aX3O4w+aEo+4hj6tcHKQSxjdok=
Subject key identifier: BE:35:27:8C:F8:E6:67:52:6B:4C:28:FF:2D:60:B0:D6:75:1F:C7:3D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0B3F1EAD11E3A3FA31D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b59f7f0a-8112-35b9-92be-543de848e04d.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:b3:f1:ea:d1:1e:3a:3f:a3:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=96c7f43a-68ff-45ef-85eb-3916fab2fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:b8:16:ff:d8:1c:31:1b:11:34:36:14:49:
33:1b:d7:06:50:93:16:d0:be:3c:75:05:62:d6:2f:
a7:e5:35:e6:9f:08:cf:bc:09:6b:21:d7:76:bc:dc:
a1:64:bd:65:f6:67:28:f2:2a:80:78:eb:bb:88:fa:
c7:79:7f:e0:27:85:6f:40:c9:6e:d4:76:08:62:e8:
b1:b7:d9:9a:3b:96:2f:24:84:35:d3:c2:7c:22:59:
ec:12:37:09:55:ea:ee:ad:91:8e:6c:ce:1f:5d:56:
b7:24:43:16:b0:aa:79:9b:9c:8a:ea:cb:93:93:fc:
59:0b:9c:25:78:78:0d:97:9b:4f:e6:ec:37:5e:a5:
65:3c:e8:01:7a:ae:da:22:95:97:35:f8:17:ed:75:
a1:a0:66:9b:90:64:dc:92:17:73:29:ac:a2:1b:8a:
ae:4c:56:2d:e7:8e:01:19:2b:82:de:11:6d:44:b7:
bc:98:2e:85:aa:cc:2d:1c:e5:27:03:eb:b9:f7:b1:
08:be:02:dc:49:1b:80:18:2e:c1:f1:5d:73:28:4f:
98:e2:c3:12:ea:49:59:c8:39:4e:d9:7a:25:de:2b:
ac:2f:56:a4:5d:44:ae:5b:7d:6a:9e:cb:5a:19:b6:
11:dc:73:b6:02:7f:02:29:ca:0d:e6:b9:9a:93:8b:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:27:8C:F8:E6:67:52:6B:4C:28:FF:2D:60:B0:D6:75:1F:C7:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b59f7f0a-8112-35b9-92be-543de848e04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:de:d3:f5:58:4b:4a:61:a0:34:d7:0c:5e:0f:4e:44:66:94:
e5:7d:5c:29:62:d4:a8:b8:62:92:15:4a:0f:01:aa:fb:ec:dc:
bb:67:67:e9:7f:7f:0c:d1:76:09:33:28:14:37:77:ea:8c:5f:
a0:2a:21:1d:14:7f:24:ad:0e:36:34:94:f2:97:57:b0:03:60:
f3:64:94:30:ef:03:f6:ed:38:70:1e:0d:23:0f:9d:00:1c:18:
26:54:07:fd:8f:ab:ee:f2:01:44:58:82:0b:b2:e6:01:40:42:
ce:61:23:b8:3e:39:24:8a:68:32:bf:84:4f:60:78:3f:18:7c:
03:56:a4:1c:55:e9:93:0e:b7:8a:6f:20:25:ab:4b:7c:7f:32:
d3:77:1c:44:5f:6e:6d:b8:13:82:fa:cb:08:2f:f5:c3:48:ef:
8b:5b:a9:c2:3f:db:7c:d0:94:fe:67:65:ae:2f:31:58:43:25:
71:cd:0e:91:02:6c:53:ec:3b:15:c5:6c:5c:80:7f:02:59:a4:
16:b2:ed:8c:f8:77:21:a1:40:b2:6c:e9:72:81:c4:09:72:13:
f4:cf:82:4d:a3:89:40:94:9d:f4:c4:d9:fc:78:8e:6e:e0:32:
dd:59:71:b8:9e:db:ee:5a:3d:12:c3:4a:dd:55:eb:58:f9:92:
c8:29:76:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsLPx6tEeOj+jHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
OTZjN2Y0M2EtNjhmZi00NWVmLTg1ZWItMzkxNmZhYjJmYmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34+4Fv/YHDEbETQ2FEkzG9cGUJMW0L48dQVi
1i+n5TXmnwjPvAlrIdd2vNyhZL1l9mco8iqAeOu7iPrHeX/gJ4VvQMlu1HYIYuix
t9maO5YvJIQ108J8IlnsEjcJVerurZGObM4fXVa3JEMWsKp5m5yK6suTk/xZC5wl
eHgNl5tP5uw3XqVlPOgBeq7aIpWXNfgX7XWhoGabkGTckhdzKayiG4quTFYt544B
GSuC3hFtRLe8mC6FqswtHOUnA+u597EIvgLcSRuAGC7B8V1zKE+Y4sMS6klZyDlO
2Xol3iusL1akXUSuW31qnstaGbYR3HO2An8CKcoN5rmak4soKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL41J4z45mdSa0wo/y1gsNZ1H8c9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjU5ZjdmMGEtODExMi0z
NWI5LTkyYmUtNTQzZGU4NDhlMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6SqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHre0/VYS0phoDTXDF4PTkRmlOV9XCli1Ki4YpIVSg8Bqvvs3LtnZ+l/
fwzRdgkzKBQ3d+qMX6AqIR0UfyStDjY0lPKXV7ADYPNklDDvA/btOHAeDSMPnQAc
GCZUB/2Pq+7yAURYgguy5gFAQs5hI7g+OSSKaDK/hE9geD8YfANWpBxV6ZMOt4pv
ICWrS3x/MtN3HERfbm24E4L6ywgv9cNI74tbqcI/23zQlP5nZa4vMVhDJXHNDpEC
bFPsOxXFbFyAfwJZpBay7Yz4dyGhQLJs6XKBxAlyE/TPgk2jiUCUnfTE2fx4jm7g
Mt1Zcbie2+5aPRLDSt1V61j5ksgpdgE=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org