Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7e15ba9-d0e3-39d9-b6c6-26f01254278c.roa
File: d7e15ba9-d0e3-39d9-b6c6-26f01254278c.roa (raw, json)
Hash identifier: y2vQUlTIwXP/stB3t5aqqpDtMmGvwuKAr0rVTfh8PRo=
Subject key identifier: 0A:CB:7B:5C:BA:5A:E2:A2:E7:79:19:05:18:8F:A5:33:D7:B8:5E:90
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449313AA1A780349A3F2D6EA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7e15ba9-d0e3-39d9-b6c6-26f01254278c.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 12132
IP address blocks: 67.70.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:13:aa:1a:78:03:49:a3:f2:d6:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=fa6f2927-95cf-4354-9ba5-4e69917cbf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:56:02:d8:1c:e2:e9:5d:c4:9f:98:6a:a0:
f3:6d:a1:e8:27:a7:60:83:88:7b:7c:83:76:41:cb:
6e:be:0a:f8:4c:3e:77:bd:4a:bb:89:ed:b3:74:f0:
9a:e3:37:b7:79:d9:ac:c7:7b:88:54:78:50:ad:2e:
e9:63:e4:8e:ca:62:db:60:e9:b4:e3:0a:6b:fb:2d:
08:80:13:6e:e5:42:c7:79:7b:7d:78:2a:f4:5a:48:
59:0b:00:41:82:4b:f7:44:f2:f2:81:78:46:b9:d0:
be:20:01:91:44:e6:94:7a:c0:bc:cc:8f:3e:c0:6f:
30:6f:8a:b7:12:30:d5:c7:bf:87:db:0e:23:c2:42:
4e:50:92:47:f8:0f:b2:bd:f0:3b:0e:46:2d:5d:9c:
4a:36:12:18:25:40:68:51:41:90:db:3f:f5:39:3f:
d9:3d:cb:28:c7:8d:f2:09:7c:a5:a1:8a:88:e4:38:
1f:5f:a8:2d:c3:f5:67:85:56:5c:9b:d4:c9:7e:24:
d5:9e:d2:31:c5:55:4b:c5:2b:18:42:75:c1:8f:e9:
27:4e:0b:82:09:f6:e8:98:bd:9b:e6:91:64:12:8c:
21:4c:9b:fa:f8:bf:63:06:52:26:fc:42:30:c7:4d:
19:74:e0:1b:a1:fd:28:23:92:af:c7:8d:8a:74:ab:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:7B:5C:BA:5A:E2:A2:E7:79:19:05:18:8F:A5:33:D7:B8:5E:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7e15ba9-d0e3-39d9-b6c6-26f01254278c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.70.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:52:f5:4a:c3:9b:d6:0f:3b:74:77:ed:55:63:04:c0:a0:fe:
ff:50:f3:74:00:db:4e:47:93:d6:a4:4c:9a:81:f1:8d:15:70:
98:07:48:fd:dc:d5:8b:14:46:de:9d:31:f0:f9:76:77:0d:cd:
8d:35:f0:34:8e:49:70:52:ed:10:94:6d:26:7f:2c:19:37:70:
69:b2:3b:05:10:b2:37:e8:f7:a4:6d:8a:b7:33:dc:08:a3:5c:
3f:c9:6a:d8:af:37:2a:1b:2f:14:c2:79:80:76:de:95:1f:45:
0d:06:e3:a8:86:44:9b:36:24:b1:76:da:1e:6d:1d:15:bb:31:
67:40:d8:a8:25:45:21:20:06:b7:ea:ee:c0:75:10:a3:7c:6c:
36:47:d4:2b:84:ac:a4:fb:42:c2:9b:29:19:e9:bc:d9:f6:f3:
a3:c5:10:d4:81:09:77:81:a6:6b:c9:8b:17:54:5d:97:83:d1:
36:e6:74:bf:d5:1b:a1:9e:ce:fd:16:59:61:c5:e8:c8:fb:f4:
90:4e:56:28:8e:4d:f1:65:87:d3:70:03:21:2f:3d:b1:a1:03:
99:f8:e1:f3:b3:61:fc:13:68:b6:44:4a:5f:b1:78:f1:2d:61:
e5:80:99:82:cb:fd:44:50:4c:4c:73:3f:ef:bd:d3:71:62:4d:
d9:8c:9d:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTE6oaeANJo/LW6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmE2ZjI5MjctOTVjZi00MzU0LTliYTUtNGU2OTkxN2NiZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLRWAtgc4uldxJ+YaqDzbaHoJ6dgg4h7fIN2
Qctuvgr4TD53vUq7ie2zdPCa4ze3edmsx3uIVHhQrS7pY+SOymLbYOm04wpr+y0I
gBNu5ULHeXt9eCr0WkhZCwBBgkv3RPLygXhGudC+IAGRROaUesC8zI8+wG8wb4q3
EjDVx7+H2w4jwkJOUJJH+A+yvfA7DkYtXZxKNhIYJUBoUUGQ2z/1OT/ZPcsox43y
CXyloYqI5DgfX6gtw/VnhVZcm9TJfiTVntIxxVVLxSsYQnXBj+knTguCCfbomL2b
5pFkEowhTJv6+L9jBlIm/EIwx00ZdOAbof0oI5Kvx42KdKvE2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArLe1y6WuKi53kZBRiPpTPXuF6QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDdlMTViYTktZDBlMy0z
OWQ5LWI2YzYtMjZmMDEyNTQyNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0b4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdS9UrDm9YPO3R37VVjBMCg/v9Q83QA205Hk9akTJqB8Y0VcJgHSP3c
1YsURt6dMfD5dncNzY018DSOSXBS7RCUbSZ/LBk3cGmyOwUQsjfo96Rtircz3Aij
XD/JativNyobLxTCeYB23pUfRQ0G46iGRJs2JLF22h5tHRW7MWdA2KglRSEgBrfq
7sB1EKN8bDZH1CuErKT7QsKbKRnpvNn286PFENSBCXeBpmvJixdUXZeD0TbmdL/V
G6Gezv0WWWHF6Mj79JBOViiOTfFlh9NwAyEvPbGhA5n44fOzYfwTaLZESl+xePEt
YeWAmYLL/URQTExzP++903FiTdmMnXo=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org