Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bdf26da0-069d-3fc7-bdc2-0bc60feeaf12.roa
File: bdf26da0-069d-3fc7-bdc2-0bc60feeaf12.roa (raw, json)
Hash identifier: shffY84CBpySuQzOeBjYq+w/iyQwJhCMc0pbPw/f+V4=
Subject key identifier: 2D:80:C9:FF:20:1E:83:35:CF:F8:AB:B5:C9:77:0C:E6:2B:93:34:9D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F43285844931590054FE9AB81A16631E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bdf26da0-069d-3fc7-bdc2-0bc60feeaf12.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 206.172.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:90:05:4f:e9:ab:81:a1:66:31:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=d6d49a42-a07f-421a-9c77-2fb9868ca338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:d1:9f:e8:be:cb:c5:47:38:26:2a:36:97:
8e:71:5e:10:86:a4:d3:22:dc:fa:93:62:16:04:af:
16:4a:e5:ba:1a:75:2c:69:03:10:f8:3c:39:0b:6a:
45:46:a7:4a:70:dd:ac:e0:e0:f6:44:5a:18:de:51:
aa:42:23:db:8c:09:3f:8b:ec:db:fa:47:75:3e:ce:
fa:3b:81:01:cd:df:f0:9a:2d:1f:00:19:eb:d6:d6:
ba:a8:c0:38:24:1d:62:28:ff:53:2a:4b:5e:8b:c0:
10:34:90:d4:a3:8f:06:c3:62:44:c4:01:b2:77:02:
e7:9b:18:c0:4a:70:1f:c5:71:32:e8:ba:3f:67:e1:
98:94:58:65:ec:13:6e:40:6c:e1:f0:9b:8e:3c:8a:
5e:4f:83:de:92:ef:5c:59:fa:e8:ef:5a:c4:f8:64:
dd:84:0e:6a:e7:be:3b:67:8c:51:65:19:0c:16:64:
ee:43:50:56:79:a6:3c:92:28:83:0c:ff:50:91:32:
49:88:84:03:6d:93:cd:45:e9:db:90:de:a4:ac:b4:
c8:a8:58:73:f0:8c:a8:e8:9d:c8:12:82:98:6f:97:
40:4c:46:22:a4:a4:ad:ce:09:b4:dd:19:61:15:9c:
85:03:ba:bf:5e:d1:03:41:10:8f:89:4b:7f:9a:86:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:C9:FF:20:1E:83:35:CF:F8:AB:B5:C9:77:0C:E6:2B:93:34:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bdf26da0-069d-3fc7-bdc2-0bc60feeaf12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:92:56:1f:02:10:ea:1a:44:e7:b3:64:ab:7f:fb:68:51:ad:
b4:f3:19:31:80:86:dc:fd:b4:34:d2:b2:21:97:5f:29:b5:d2:
de:0a:1f:bc:0e:17:86:8b:24:03:ee:5b:2e:94:f2:44:2a:a4:
2a:59:3f:04:35:7b:19:2e:13:95:ed:e1:6f:e2:3d:07:b8:a0:
f7:03:5f:2c:71:0c:1e:85:2a:d6:c9:ad:f2:e4:25:7e:c2:72:
8c:45:90:5b:20:a3:19:dc:cd:cc:45:77:12:00:e5:d5:2d:b9:
0f:01:e1:9c:5b:e9:ae:42:0e:59:74:74:b5:68:a0:94:90:db:
8f:56:9f:a4:47:46:07:aa:a2:5e:49:41:1d:d4:3f:b0:35:fa:
66:53:c1:8f:76:60:2c:0b:a5:36:e4:7f:4a:54:97:8f:8d:a5:
6a:fa:1b:8a:04:66:3f:10:9f:73:d6:8f:35:83:6d:8f:20:54:
45:49:4b:11:8e:28:53:bc:37:f4:59:09:9b:69:0a:e1:1f:fc:
02:18:28:12:5e:53:29:e6:4e:ca:99:43:ac:ac:61:75:46:9a:
e9:be:65:15:84:dd:36:4f:c2:52:17:e8:f8:4e:db:cb:26:6d:
7f:50:af:d7:c9:8c:b8:c6:99:c3:8f:61:a0:e6:6b:dd:f2:9d:
f7:bd:27:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFZAFT+mrgaFmMeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDZkNDlhNDItYTA3Zi00MjFhLTljNzctMmZiOTg2OGNhMzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqzRn+i+y8VHOCYqNpeOcV4QhqTTItz6k2IW
BK8WSuW6GnUsaQMQ+Dw5C2pFRqdKcN2s4OD2RFoY3lGqQiPbjAk/i+zb+kd1Ps76
O4EBzd/wmi0fABnr1ta6qMA4JB1iKP9TKktei8AQNJDUo48Gw2JExAGydwLnmxjA
SnAfxXEy6Lo/Z+GYlFhl7BNuQGzh8JuOPIpeT4Peku9cWfro71rE+GTdhA5q5747
Z4xRZRkMFmTuQ1BWeaY8kiiDDP9QkTJJiIQDbZPNRenbkN6krLTIqFhz8Iyo6J3I
EoKYb5dATEYipKStzgm03RlhFZyFA7q/XtEDQRCPiUt/moYD8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2Ayf8gHoM1z/irtcl3DOYrkzSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYmRmMjZkYTAtMDY5ZC0z
ZmM3LWJkYzItMGJjNjBmZWVhZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICSVh8CEOoaROezZKt/+2hRrbTzGTGAhtz9tDTSsiGXXym10t4KH7wO
F4aLJAPuWy6U8kQqpCpZPwQ1exkuE5Xt4W/iPQe4oPcDXyxxDB6FKtbJrfLkJX7C
coxFkFsgoxnczcxFdxIA5dUtuQ8B4Zxb6a5CDll0dLVooJSQ249Wn6RHRgeqol5J
QR3UP7A1+mZTwY92YCwLpTbkf0pUl4+NpWr6G4oEZj8Qn3PWjzWDbY8gVEVJSxGO
KFO8N/RZCZtpCuEf/AIYKBJeUynmTsqZQ6ysYXVGmum+ZRWE3TZPwlIX6PhO28sm
bX9Qr9fJjLjGmcOPYaDma93ynfe9J2I=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org