Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/debaacce-48a2-3665-8016-bd49361723d5.roa
File: debaacce-48a2-3665-8016-bd49361723d5.roa (raw, json)
Hash identifier: z+lXCfbmm0qM4lg7XdYNR27+CEIFLMGaS7v3tyRy2Ac=
Subject key identifier: E3:CF:4F:7B:E7:32:B5:48:23:24:EE:D0:9D:64:F1:30:F5:01:32:1E
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DAFECFAA1C43FE7F0B59640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/debaacce-48a2-3665-8016-bd49361723d5.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21552
IP address blocks: 204.101.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:af:ec:fa:a1:c4:3f:e7:f0:b5:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=9bcde603-d182-466b-94f1-920047ad7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:1c:54:e2:1b:a5:9d:96:58:56:95:d2:ae:
03:ce:7a:8c:31:19:6f:68:61:8d:15:05:a9:ac:44:
95:01:fc:1c:52:bd:fa:31:aa:3e:de:db:da:04:3f:
5f:9f:6e:65:ac:e5:9a:5f:1e:a3:a3:c1:6c:23:e8:
76:2e:c1:5d:00:df:89:be:4f:ac:00:53:99:0f:cc:
1c:bc:06:55:48:24:66:b0:23:9f:30:89:10:9c:14:
52:86:79:37:8b:94:5d:f6:42:78:e4:0b:96:d9:8a:
1a:f3:63:5d:cb:6c:2e:2b:f9:64:eb:18:bf:97:d5:
83:4f:45:02:c5:c3:37:c5:1f:2b:54:83:a9:b4:1e:
74:ce:37:44:b2:70:8d:6a:49:d2:a3:ea:8e:c0:0b:
d3:be:71:ac:a8:1a:b5:e9:9d:1a:3b:a9:4a:f6:43:
e6:e6:17:8b:87:4a:28:11:e9:c4:42:7e:ba:59:86:
ab:7b:c7:4c:d6:3b:e0:ef:2d:a0:f1:d0:06:0e:19:
ef:46:35:8d:7c:2a:44:42:05:d3:44:95:50:69:75:
f4:f3:b9:ca:77:b0:71:63:98:8a:54:cf:27:35:06:
5f:4a:02:ef:61:5e:e1:be:a0:f6:b7:6c:8c:41:80:
28:8e:54:ec:aa:98:ea:83:de:fe:5e:da:c8:4b:88:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:4F:7B:E7:32:B5:48:23:24:EE:D0:9D:64:F1:30:F5:01:32:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/debaacce-48a2-3665-8016-bd49361723d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e7:24:29:73:85:30:42:0e:48:34:24:9c:5a:70:16:ff:92:
d7:59:91:c8:21:86:04:e8:4e:e2:61:0e:01:76:62:df:9b:cc:
d9:9f:67:31:90:14:c5:33:a5:48:95:50:dc:ee:b0:eb:80:02:
00:03:c8:1b:ea:8b:0b:e7:b4:d1:c2:8f:88:08:9a:93:70:24:
a8:ac:a3:77:52:97:7d:9a:35:2e:f1:8a:41:bc:08:29:3c:43:
a3:1c:3b:76:70:ff:ad:5d:fb:aa:05:94:b9:9d:cb:2d:da:68:
15:50:1e:9d:81:28:48:56:93:96:69:f3:6d:ff:d6:85:29:24:
fb:29:7c:de:1e:8d:79:15:17:e6:72:9b:c8:9d:9b:13:95:c1:
1d:2b:ce:3c:87:23:57:8d:ea:cb:ac:85:b6:3e:16:6f:7f:11:
a8:ee:62:63:2c:0c:f5:03:02:c3:01:56:0d:f2:da:59:34:ab:
01:3f:a8:4d:ae:eb:28:0e:72:1e:b5:15:cd:7e:61:45:5b:5f:
39:0d:df:91:62:1f:f1:94:12:85:33:ad:a4:8a:d2:1e:40:13:
f7:42:3b:f6:c7:eb:cc:33:4d:39:ac:ec:6c:73:ce:22:2f:45:
86:e9:51:95:f2:50:5c:9d:08:a0:88:fc:34:54:0a:53:9c:3b:
b3:ce:30:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdr+z6ocQ/5/C1lkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
OWJjZGU2MDMtZDE4Mi00NjZiLTk0ZjEtOTIwMDQ3YWQ3NjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj0cVOIbpZ2WWFaV0q4DznqMMRlvaGGNFQWp
rESVAfwcUr36Mao+3tvaBD9fn25lrOWaXx6jo8FsI+h2LsFdAN+Jvk+sAFOZD8wc
vAZVSCRmsCOfMIkQnBRShnk3i5Rd9kJ45AuW2Yoa82Ndy2wuK/lk6xi/l9WDT0UC
xcM3xR8rVIOptB50zjdEsnCNaknSo+qOwAvTvnGsqBq16Z0aO6lK9kPm5heLh0oo
EenEQn66WYare8dM1jvg7y2g8dAGDhnvRjWNfCpEQgXTRJVQaXX087nKd7BxY5iK
VM8nNQZfSgLvYV7hvqD2t2yMQYAojlTsqpjqg97+XtrIS4iNzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPPT3vnMrVIIyTu0J1k8TD1ATIeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZGViYWFjY2UtNDhhMi0z
NjY1LTgwMTYtYmQ0OTM2MTcyM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrnJClzhTBCDkg0JJxacBb/ktdZkcghhgToTuJhDgF2Yt+bzNmfZzGQ
FMUzpUiVUNzusOuAAgADyBvqiwvntNHCj4gImpNwJKiso3dSl32aNS7xikG8CCk8
Q6McO3Zw/61d+6oFlLmdyy3aaBVQHp2BKEhWk5Zp823/1oUpJPspfN4ejXkVF+Zy
m8idmxOVwR0rzjyHI1eN6sushbY+Fm9/EajuYmMsDPUDAsMBVg3y2lk0qwE/qE2u
6ygOch61Fc1+YUVbXzkN35FiH/GUEoUzraSK0h5AE/dCO/bH68wzTTms7GxzziIv
RYbpUZXyUFydCKCI/DRUClOcO7POMLc=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org