Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de7645cd-fe58-3390-8ae9-838645294022.roa
File: de7645cd-fe58-3390-8ae9-838645294022.roa (raw, json)
Hash identifier: CngrhyE4lmpXRBYb8yShqxeX8Cc0CdcDnkh5giLaM7A=
Subject key identifier: 47:45:2D:EA:2D:ED:EE:A0:B1:6D:D2:F9:C5:FE:38:E6:55:A7:68:E5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328583FED26DFA5E2E09D1BAFED4A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de7645cd-fe58-3390-8ae9-838645294022.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 577
IP address blocks: 69.156.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ed:26:df:a5:e2:e0:9d:1b:af:ed:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=7dd145ec-9493-4c96-9140-0ed070baaae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:65:3f:52:f1:be:21:3a:b9:3f:c1:3b:4e:
ab:be:85:bd:8a:e8:94:a4:b0:16:b0:49:71:c3:93:
c7:f1:06:f5:66:1b:a6:85:5e:55:30:9b:be:21:ff:
9e:7e:6b:4b:c4:46:a4:c2:0b:ca:d5:20:a5:c7:47:
1a:e7:1b:68:d7:98:95:6a:04:58:fb:2e:17:2f:fe:
d6:97:1d:4e:12:6c:d2:df:f3:98:f2:6b:f9:60:16:
f6:cd:14:0f:c8:02:5e:17:4e:54:5a:28:62:8b:57:
ac:ea:da:a8:5a:e2:98:5f:a6:38:c7:c8:d9:75:70:
6e:22:31:fa:57:d4:c8:6b:19:97:53:cc:1a:5f:03:
8b:fd:e2:c9:35:5d:ca:06:5e:44:a9:b8:5d:f9:45:
23:dc:f8:3e:cd:41:d4:cc:1a:b5:3f:f6:67:58:01:
67:aa:f0:33:ff:22:a5:8c:89:a4:9b:72:2b:1a:7f:
4b:7a:5f:ed:24:bf:a6:a9:9e:79:b9:e8:9e:f5:0f:
8e:5a:a1:17:a8:f7:48:d5:c1:0b:d7:3c:64:fb:ca:
7f:6e:0b:54:aa:d0:c0:1b:47:83:dd:f3:37:fa:10:
1a:43:59:78:cd:1a:56:35:15:72:ef:12:d0:db:08:
6d:6d:0e:a5:22:88:d1:fa:2e:5f:7e:66:72:60:c8:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:2D:EA:2D:ED:EE:A0:B1:6D:D2:F9:C5:FE:38:E6:55:A7:68:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de7645cd-fe58-3390-8ae9-838645294022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
69.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9d:2f:a3:df:c8:14:95:62:93:01:fc:06:c9:b1:4e:76:96:
a4:8d:41:ee:74:c3:fe:b0:51:58:3c:cd:78:e4:83:23:c2:16:
fd:a7:ae:06:27:6f:d0:fb:e6:14:e7:50:d0:ee:e7:cf:86:5e:
c6:04:5b:16:38:7f:73:c3:dc:20:49:b2:98:2a:ce:e8:1f:8b:
35:15:d7:ae:c1:dd:87:2a:90:d4:a7:32:56:9a:b7:d2:e4:57:
8a:21:36:0a:49:30:e9:ea:09:ca:b2:d2:3e:ca:ad:0d:00:d8:
34:bd:6d:08:90:f3:0f:48:ba:50:94:33:1a:30:d6:b2:dd:19:
ef:0a:b6:e5:f4:1f:94:85:61:f6:eb:37:dd:27:76:73:a4:60:
05:d8:c9:a1:b8:1d:47:5b:c0:ba:2d:13:79:fc:74:52:e5:03:
b5:d1:df:9b:60:f9:fe:7b:4c:db:fa:b4:0a:ba:07:26:76:61:
b7:66:67:06:cb:4b:18:3d:16:42:6f:f6:b4:66:3b:d7:1d:50:
09:58:8b:8b:9d:c7:11:86:7f:79:42:e8:17:bf:c6:ab:a7:e2:
0a:40:09:35:34:45:cf:d6:df:6b:a3:cc:b9:d8:cb:2e:4e:45:
37:61:55:0c:7f:86:a4:2b:8c:43:41:ab:e7:4e:b2:b8:ad:b5:
14:fe:2c:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/tJt+l4uCdG6/tSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIyMTExNTEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
N2RkMTQ1ZWMtOTQ5My00Yzk2LTkxNDAtMGVkMDcwYmFhYWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXdlP1LxviE6uT/BO06rvoW9iuiUpLAWsElx
w5PH8Qb1ZhumhV5VMJu+If+efmtLxEakwgvK1SClx0ca5xto15iVagRY+y4XL/7W
lx1OEmzS3/OY8mv5YBb2zRQPyAJeF05UWihii1es6tqoWuKYX6Y4x8jZdXBuIjH6
V9TIaxmXU8waXwOL/eLJNV3KBl5Eqbhd+UUj3Pg+zUHUzBq1P/ZnWAFnqvAz/yKl
jImkm3IrGn9Lel/tJL+mqZ55ueie9Q+OWqEXqPdI1cEL1zxk+8p/bgtUqtDAG0eD
3fM3+hAaQ1l4zRpWNRVy7xLQ2whtbQ6lIojR+i5ffmZyYMhg3QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEdFLeot7e6gsW3S+cX+OOZVp2jlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZGU3NjQ1Y2QtZmU1OC0z
MzkwLThhZTktODM4NjQ1Mjk0MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARZwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAT50vo9/IFJVikwH8BsmxTnaWpI1B7nTD/rBRWDzNeOSDI8IW/aeuBidv
0PvmFOdQ0O7nz4ZexgRbFjh/c8PcIEmymCrO6B+LNRXXrsHdhyqQ1KcyVpq30uRX
iiE2Ckkw6eoJyrLSPsqtDQDYNL1tCJDzD0i6UJQzGjDWst0Z7wq25fQflIVh9us3
3Sd2c6RgBdjJobgdR1vAui0Tefx0UuUDtdHfm2D5/ntM2/q0CroHJnZht2ZnBstL
GD0WQm/2tGY71x1QCViLi53HEYZ/eULoF7/Gq6fiCkAJNTRFz9bfa6PMudjLLk5F
N2FVDH+GpCuMQ0Gr506yuK21FP4szg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:25 2023 by rpki-client on console-ams.rpki-client.org