Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7ad1dd9-7f45-3ba1-a158-3da1ebe07697.roa
File: d7ad1dd9-7f45-3ba1-a158-3da1ebe07697.roa (raw, json)
Hash identifier: 6IRcMsoqEfMU/eqwgbJnFTUoAyGHFbM9F0p7hu4qLww=
Subject key identifier: AA:A2:4A:B8:8F:6D:8A:6C:45:01:CC:3B:E5:0C:E6:75:4F:FD:0C:2A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449315CB7C9E28F7479E5D2280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7ad1dd9-7f45-3ba1-a158-3da1ebe07697.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 36522
IP address blocks: 207.164.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:15:cb:7c:9e:28:f7:47:9e:5d:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=0f9dfb01-16b7-4069-820e-70913bf9a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:59:e1:c3:c2:1a:d1:f6:ed:5b:37:71:0a:
0e:be:69:36:8b:9b:95:ae:38:5c:7d:86:cc:b1:0c:
fe:9b:e9:af:0c:16:4c:46:9f:8f:46:25:d3:5d:fd:
34:e9:fe:72:c5:3e:b7:87:62:a2:2f:1b:5c:8a:63:
f0:c0:9a:ea:0c:28:c6:f3:a4:15:40:b9:47:4a:4e:
cd:5e:e5:d5:48:5a:b3:4e:8f:e9:13:bf:dd:41:60:
6f:e1:42:a8:89:78:c4:13:72:a6:ed:ac:b0:39:b2:
89:1f:69:21:d3:35:d1:b2:fc:07:7c:e7:31:60:62:
e6:1e:bc:ae:ad:75:26:8e:24:8e:74:53:fe:e7:f1:
f7:b1:7d:ff:c8:06:90:ce:62:60:79:b2:e7:0e:82:
0d:40:51:3f:00:50:fa:be:b5:9c:c5:c2:22:08:b6:
20:ea:1f:da:68:d2:bd:4e:48:46:65:fb:0f:fd:ad:
82:e6:df:e2:f1:38:39:c2:d4:f6:82:f3:97:d7:95:
bc:aa:3b:7b:42:2b:9f:0c:27:27:68:09:a3:5d:57:
f6:5c:e0:43:61:60:ce:1d:7d:83:01:57:58:47:53:
8d:a8:e4:c8:bf:34:2e:8b:50:f4:cb:65:fd:ee:e1:
71:50:66:fc:5f:ef:8a:38:30:e2:ed:de:3e:31:cc:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:4A:B8:8F:6D:8A:6C:45:01:CC:3B:E5:0C:E6:75:4F:FD:0C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7ad1dd9-7f45-3ba1-a158-3da1ebe07697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a4:53:5c:78:f3:38:20:03:3d:22:a9:93:c6:fa:4e:0a:49:
24:54:d5:47:81:92:f6:b9:eb:7f:0f:cc:f5:a2:52:a8:0f:9b:
c3:f6:16:02:0a:33:4d:c7:e1:94:56:d1:2e:d2:de:45:82:04:
dd:ec:d8:b7:20:68:8d:d2:ff:15:90:8f:94:3e:54:97:35:ed:
0d:ec:36:75:e3:17:f3:e5:fb:16:02:61:55:89:87:94:db:df:
57:75:cb:e8:83:cf:70:fd:08:b2:b5:48:b4:e0:8e:56:f9:6e:
d4:e8:17:97:84:20:31:3e:6a:9b:6a:5c:fe:f8:ec:30:c1:6a:
ed:d8:af:f8:e9:d6:59:1d:f6:75:33:e8:d3:95:1b:99:b2:91:
d2:e0:18:df:52:12:65:5e:03:66:6c:19:91:12:2b:9e:ba:f6:
ed:46:d4:90:30:bc:40:79:cb:cb:f4:b1:35:3a:27:ad:0a:10:
bd:b1:db:cb:9e:4e:50:96:fe:15:61:ec:ad:14:2e:4e:2b:ed:
bf:9d:81:86:47:c5:c8:18:26:91:7d:f8:52:34:71:44:76:24:
3a:5e:74:18:61:37:00:05:74:50:69:c1:6d:78:df:0d:0a:75:
7f:8e:46:fc:43:b8:52:db:e2:55:9b:c4:af:9a:4c:47:ea:a2:
1b:51:54:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFct8nij3R55dIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MGY5ZGZiMDEtMTZiNy00MDY5LTgyMGUtNzA5MTNiZjlhMGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAVZ4cPCGtH27Vs3cQoOvmk2i5uVrjhcfYbM
sQz+m+mvDBZMRp+PRiXTXf006f5yxT63h2KiLxtcimPwwJrqDCjG86QVQLlHSk7N
XuXVSFqzTo/pE7/dQWBv4UKoiXjEE3Km7aywObKJH2kh0zXRsvwHfOcxYGLmHryu
rXUmjiSOdFP+5/H3sX3/yAaQzmJgebLnDoINQFE/AFD6vrWcxcIiCLYg6h/aaNK9
TkhGZfsP/a2C5t/i8Tg5wtT2gvOX15W8qjt7QiufDCcnaAmjXVf2XOBDYWDOHX2D
AVdYR1ONqOTIvzQui1D0y2X97uFxUGb8X++KODDi7d4+McwTOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqiSriPbYpsRQHMO+UM5nVP/QwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDdhZDFkZDktN2Y0NS0z
YmExLWExNTgtM2RhMWViZTA3Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6RIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6kU1x48zggAz0iqZPG+k4KSSRU1UeBkva5638PzPWiUqgPm8P2FgIK
M03H4ZRW0S7S3kWCBN3s2LcgaI3S/xWQj5Q+VJc17Q3sNnXjF/Pl+xYCYVWJh5Tb
31d1y+iDz3D9CLK1SLTgjlb5btToF5eEIDE+aptqXP747DDBau3Yr/jp1lkd9nUz
6NOVG5mykdLgGN9SEmVeA2ZsGZESK5669u1G1JAwvEB5y8v0sTU6J60KEL2x28ue
TlCW/hVh7K0ULk4r7b+dgYZHxcgYJpF9+FI0cUR2JDpedBhhNwAFdFBpwW143w0K
dX+ORvxDuFLb4lWbxK+aTEfqohtRVOQ=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org