Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d589dfb1-3b7d-34ef-8a88-e4e9bbefe15f.roa
File: d589dfb1-3b7d-34ef-8a88-e4e9bbefe15f.roa (raw, json)
Hash identifier: RkfIF9dMNK6BL5mjC5oJLEk/DwsClU0JKrPFzVMtD7Y=
Subject key identifier: C4:84:A9:52:86:DF:62:4F:66:2A:34:B6:E0:58:91:BC:48:82:61:0A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB09CAEF031C9C0608A0B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d589dfb1-3b7d-34ef-8a88-e4e9bbefe15f.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 207.164.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:9c:ae:f0:31:c9:c0:60:8a:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=7e61b414-0db2-4b14-907e-bb9e26abb1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:4e:36:22:53:d4:bd:c1:cb:de:61:e1:15:
93:72:da:7e:b6:8a:ae:78:69:ae:21:0c:db:3d:98:
86:3c:cd:c5:7f:9d:e6:41:c5:32:9a:cb:de:cc:73:
f1:1e:65:ad:80:64:f8:31:95:03:bc:ae:5c:41:9c:
0c:e2:e5:e5:07:92:9a:dc:c4:a0:ca:29:ef:80:45:
12:7d:20:52:a4:bc:8c:14:af:20:3f:18:e1:56:7f:
3e:da:73:ee:8a:02:6b:b8:75:3f:a8:d5:99:82:52:
d7:28:d2:1d:5e:79:80:a5:24:b1:07:90:0c:61:ed:
73:80:88:99:1e:e1:a0:f9:72:79:ff:2c:d9:63:38:
64:9e:7d:ba:23:d6:88:fd:96:a9:21:52:f4:30:2b:
20:5b:a1:bd:a3:5f:b4:95:7a:a2:fb:04:25:e8:5f:
b9:c8:49:dd:f8:ec:d1:01:e2:d3:51:21:ca:c6:a9:
66:35:0e:c4:04:a8:27:bb:23:80:d5:5f:88:71:1d:
ed:bb:c8:16:29:2e:09:50:6f:bd:04:f1:d9:0c:c1:
b8:78:b2:71:89:92:81:a5:58:8a:32:08:30:7d:a7:
0c:d1:ba:50:5e:d7:56:2a:1e:7e:04:c4:f9:cc:50:
8a:f2:bc:0e:4f:6e:de:b0:3e:12:e9:aa:1d:17:7a:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:A9:52:86:DF:62:4F:66:2A:34:B6:E0:58:91:BC:48:82:61:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d589dfb1-3b7d-34ef-8a88-e4e9bbefe15f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:57:13:cb:88:d1:67:92:8f:2f:4e:ea:f5:d5:43:77:7f:62:
f1:37:41:48:e9:a0:d9:c2:02:01:7a:ee:69:68:6c:21:e8:58:
93:50:38:a9:19:7b:a7:84:09:23:fe:6e:65:7b:31:09:2b:c4:
07:d7:fd:7c:75:d6:f8:21:50:d1:47:13:81:fc:0d:c6:f5:80:
45:dc:9d:e2:e3:b7:6d:84:e9:8f:00:e9:59:d9:a5:93:90:0f:
a3:cc:d4:a2:24:1f:13:14:8b:50:7e:37:1c:b3:7b:ce:64:b8:
f4:12:1d:db:63:e9:c6:83:c7:e1:32:79:40:36:86:a0:0d:dc:
39:04:6a:0f:df:b5:27:5a:c5:e5:69:8a:29:a3:98:8b:72:54:
3f:c1:92:7b:1c:e2:5f:31:72:74:77:84:26:73:6a:a3:84:fd:
e5:f6:59:c9:c4:e0:9c:85:6e:eb:18:4d:2b:c3:cb:23:08:29:
7a:5f:6a:d3:be:20:4b:c7:49:c0:8d:82:4c:bb:d7:52:ab:50:
dc:d1:75:af:51:ee:ca:47:e4:3a:ac:23:55:fe:d7:f5:52:d6:
69:0f:a3:88:d5:38:30:6f:c3:b3:09:d7:b4:87:9c:fb:10:3a:
2c:8a:fb:2f:eb:71:e3:77:34:ad:fd:38:c6:d2:2c:5c:9f:38:
ba:e9:7a:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsJyu8DHJwGCKC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
N2U2MWI0MTQtMGRiMi00YjE0LTkwN2UtYmI5ZTI2YWJiMWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxBONiJT1L3By95h4RWTctp+toqueGmuIQzb
PZiGPM3Ff53mQcUymsvezHPxHmWtgGT4MZUDvK5cQZwM4uXlB5Ka3MSgyinvgEUS
fSBSpLyMFK8gPxjhVn8+2nPuigJruHU/qNWZglLXKNIdXnmApSSxB5AMYe1zgIiZ
HuGg+XJ5/yzZYzhknn26I9aI/ZapIVL0MCsgW6G9o1+0lXqi+wQl6F+5yEnd+OzR
AeLTUSHKxqlmNQ7EBKgnuyOA1V+IcR3tu8gWKS4JUG+9BPHZDMG4eLJxiZKBpViK
MggwfacM0bpQXtdWKh5+BMT5zFCK8rwOT27esD4S6aodF3qtQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSEqVKG32JPZio0tuBYkbxIgmEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDU4OWRmYjEtM2I3ZC0z
NGVmLThhODgtZTRlOWJiZWZlMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6RJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtXE8uI0WeSjy9O6vXVQ3d/YvE3QUjpoNnCAgF67mlobCHoWJNQOKkZ
e6eECSP+bmV7MQkrxAfX/Xx11vghUNFHE4H8Dcb1gEXcneLjt22E6Y8A6VnZpZOQ
D6PM1KIkHxMUi1B+Nxyze85kuPQSHdtj6caDx+EyeUA2hqAN3DkEag/ftSdaxeVp
iimjmItyVD/Bknsc4l8xcnR3hCZzaqOE/eX2WcnE4JyFbusYTSvDyyMIKXpfatO+
IEvHScCNgky711KrUNzRda9R7spH5DqsI1X+1/VS1mkPo4jVODBvw7MJ17SHnPsQ
OiyK+y/rceN3NK39OMbSLFyfOLrpeu8=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org