Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3482ce8-7139-393e-a3b4-35e80f8766d7.roa
File: e3482ce8-7139-393e-a3b4-35e80f8766d7.roa (raw, json)
Hash identifier: QBXpGmJ/9m1xSPVN3NzKWTgR/nsU3wyWZZ5X1kcatso=
Subject key identifier: 68:E1:89:77:C6:BA:CA:46:6E:D3:C9:DA:1B:F6:8C:28:5A:7F:7B:C3
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB0A765722EF19EF5DDBC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3482ce8-7139-393e-a3b4-35e80f8766d7.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 15321
IP address blocks: 207.164.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:a7:65:72:2e:f1:9e:f5:dd:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=a1119c57-ccc3-462f-9241-a65cf9198330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:fa:54:cd:48:e8:e5:b8:5f:72:a7:f0:b9:
71:88:97:ec:a6:2c:20:ad:09:7d:33:dd:17:cc:ca:
31:32:9d:71:89:19:a7:14:51:92:e2:89:16:00:f4:
8f:2c:bb:0b:cf:36:16:f8:7c:ed:eb:a8:20:47:36:
e2:f1:1e:ff:9f:bd:49:34:64:1d:c8:d0:6b:d2:eb:
79:15:bd:a0:60:13:21:a0:ee:01:2d:79:76:55:15:
d8:b2:0d:e8:39:70:d6:e7:6b:14:ee:ed:09:b2:e2:
fb:4b:01:82:53:42:c8:43:a9:78:08:63:fa:09:40:
c1:95:b0:cb:05:2c:76:42:42:36:b4:6a:72:90:74:
2f:43:52:42:03:7e:41:ba:9f:c1:56:b3:eb:03:49:
57:a4:62:ea:d1:75:c5:10:ca:e9:a4:79:49:dd:86:
06:1c:33:27:4b:6a:7a:19:51:9b:3c:61:21:1c:e4:
59:82:7a:9c:71:f7:57:9e:ed:2a:1c:c1:36:3b:24:
fc:11:05:c7:15:50:25:d2:24:d7:94:22:cf:bc:28:
4c:59:ec:a6:04:2a:e0:3e:a4:99:1b:41:b0:75:0d:
0a:57:6f:da:09:10:ed:dd:6a:83:f8:8a:80:62:94:
72:75:8e:23:17:cc:af:a0:1e:8d:c5:49:ff:cb:00:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:89:77:C6:BA:CA:46:6E:D3:C9:DA:1B:F6:8C:28:5A:7F:7B:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3482ce8-7139-393e-a3b4-35e80f8766d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.164.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:0a:3b:f8:08:5e:1e:fa:33:89:5a:d5:88:75:c8:ce:e1:83:
fb:14:9c:b0:f5:7c:49:17:76:11:f6:6d:2c:ed:33:d1:fd:ae:
3b:2c:94:68:da:de:98:6a:0d:16:52:99:47:fb:a4:79:c3:25:
35:17:c9:d2:81:e5:89:af:ab:3b:d9:29:88:0b:b5:d3:e6:98:
dc:ee:a5:35:67:69:a2:d4:61:f1:bf:8a:92:98:35:b7:11:99:
46:32:43:cf:6d:c1:ac:ef:e7:ac:e4:fa:52:24:b5:ba:0e:23:
72:67:15:02:10:ea:64:3a:6c:59:4d:7e:73:d9:21:63:f6:d0:
af:64:a3:a2:49:61:d3:54:25:84:ee:e1:22:13:0b:62:24:68:
70:a3:e9:fd:c3:20:f0:2c:62:f4:03:34:10:3d:84:0d:06:6e:
1e:21:97:9d:54:a1:eb:4d:15:2d:cc:ea:5c:df:a0:b1:87:a7:
ad:18:c9:09:a3:c7:51:c4:fb:1b:8a:14:73:3c:d1:ed:42:55:
92:6f:8b:ac:36:d9:ac:6d:a9:63:e5:5e:d5:a1:aa:97:20:ff:
88:56:88:df:88:41:d3:ce:af:21:7e:aa:f3:8c:57:16:3c:26:
a7:41:8f:b4:72:1c:51:3e:02:c1:33:f9:5c:4d:60:51:5b:7f:
bb:4b:a2:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsKdlci7xnvXdvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YTExMTljNTctY2NjMy00NjJmLTkyNDEtYTY1Y2Y5MTk4MzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7f6VM1I6OW4X3Kn8LlxiJfspiwgrQl9M90X
zMoxMp1xiRmnFFGS4okWAPSPLLsLzzYW+Hzt66ggRzbi8R7/n71JNGQdyNBr0ut5
Fb2gYBMhoO4BLXl2VRXYsg3oOXDW52sU7u0JsuL7SwGCU0LIQ6l4CGP6CUDBlbDL
BSx2QkI2tGpykHQvQ1JCA35Bup/BVrPrA0lXpGLq0XXFEMrppHlJ3YYGHDMnS2p6
GVGbPGEhHORZgnqccfdXnu0qHME2OyT8EQXHFVAl0iTXlCLPvChMWeymBCrgPqSZ
G0GwdQ0KV2/aCRDt3WqD+IqAYpRydY4jF8yvoB6NxUn/ywDwiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjhiXfGuspGbtPJ2hv2jChaf3vDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTM0ODJjZTgtNzEzOS0z
OTNlLWEzYjQtMzVlODBmODc2NmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6RsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMKO/gIXh76M4la1Yh1yM7hg/sUnLD1fEkXdhH2bSztM9H9rjsslGja
3phqDRZSmUf7pHnDJTUXydKB5YmvqzvZKYgLtdPmmNzupTVnaaLUYfG/ipKYNbcR
mUYyQ89twazv56zk+lIktboOI3JnFQIQ6mQ6bFlNfnPZIWP20K9ko6JJYdNUJYTu
4SITC2IkaHCj6f3DIPAsYvQDNBA9hA0Gbh4hl51UoetNFS3M6lzfoLGHp60YyQmj
x1HE+xuKFHM80e1CVZJvi6w22axtqWPlXtWhqpcg/4hWiN+IQdPOryF+qvOMVxY8
JqdBj7RyHFE+AsEz+VxNYFFbf7tLojY=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org