Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e5dbaeec-f369-388b-9abf-9d781e06d1ee.roa
File: e5dbaeec-f369-388b-9abf-9d781e06d1ee.roa (raw, json)
Hash identifier: gASn8UyblUFmPeirbbKpPCcQx0fEWRdluGTogsk0gTo=
Subject key identifier: 25:1C:3A:74:4E:12:58:BC:B9:C3:8A:DB:35:92:80:1F:60:C1:8F:D2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB03D4BF7F2E90BAE046C40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e5dbaeec-f369-388b-9abf-9d781e06d1ee.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 21724
IP address blocks: 206.47.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:3d:4b:f7:f2:e9:0b:ae:04:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=fa9a3dd2-aae5-4e12-ad26-11c5a79d9256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:db:ce:bc:50:6f:3d:5a:59:da:45:67:7f:e9:
a2:06:8e:4b:a0:52:8b:09:b5:70:ed:c5:2a:8e:84:
02:61:f4:01:a8:7c:34:b8:52:6f:59:0b:de:bc:46:
3b:94:ee:2b:98:a9:5d:79:25:87:77:b6:f4:7a:b8:
77:49:be:bc:f4:06:9f:8a:7a:a8:fd:f9:75:bc:9e:
d5:5b:27:80:ae:cb:ae:bc:93:90:15:45:63:6d:cf:
d6:d0:6a:d3:6f:95:89:b2:32:46:f1:5b:4c:2b:29:
46:c2:7b:ef:77:b9:02:6f:b7:6f:03:6f:88:c7:5a:
b7:20:18:74:6a:7c:1e:30:36:28:46:51:bd:cf:89:
59:0b:71:3f:08:6a:52:07:db:77:21:eb:26:79:21:
36:d9:0d:05:63:8f:8f:24:82:1a:b0:21:82:ea:d1:
a1:21:96:df:b8:4c:aa:21:9c:a8:89:41:37:bd:12:
cb:9d:12:43:84:25:a6:c5:82:b6:2b:d2:40:3e:ff:
1a:28:bf:62:84:3d:c0:32:84:18:77:6d:bb:d7:9c:
06:7e:e9:d4:72:29:2e:d0:00:91:dc:97:c8:1b:be:
16:56:28:63:50:3a:e4:53:bb:89:e8:cd:e2:a6:4d:
71:2e:52:d5:5f:cb:a7:2b:69:6f:0f:7e:55:7f:d2:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:3A:74:4E:12:58:BC:B9:C3:8A:DB:35:92:80:1F:60:C1:8F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e5dbaeec-f369-388b-9abf-9d781e06d1ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:7e:07:5f:be:82:08:e6:9f:4b:5f:48:26:8e:73:3e:ee:cb:
cd:7c:87:7d:fe:2b:89:be:8f:74:21:7f:7e:24:2b:e7:84:d6:
2f:8e:32:99:5c:48:5d:f6:55:1e:99:cf:3e:79:fd:f0:ab:04:
7f:66:69:fc:e9:a2:db:2c:21:db:8c:91:28:8b:e4:82:a6:70:
12:96:53:77:27:57:b9:e5:59:a9:1d:83:d6:09:8e:db:98:66:
a0:29:3e:05:28:60:43:92:b1:b1:a9:fb:20:c0:2a:1a:7f:f2:
de:5d:c8:94:ec:f8:81:40:e2:38:d0:3d:0b:a8:87:4f:a1:79:
c2:92:2d:72:87:b2:3c:7b:1e:fa:d5:6d:3d:36:6f:26:27:5b:
63:ad:62:38:d0:87:5b:f4:a3:40:de:cb:8a:88:43:cc:44:e6:
83:6d:e9:88:fb:69:24:4e:71:84:94:32:46:2d:13:2c:f3:74:
e9:e1:52:75:45:b3:32:69:23:57:cf:0f:0e:23:c4:85:77:01:
b6:2a:53:6d:11:84:38:f4:94:02:d3:df:a9:61:95:de:49:51:
65:19:6e:65:57:bf:a0:f6:a5:82:ee:3a:9b:9a:8b:c5:8f:6b:
1e:39:5b:20:80:54:09:ca:85:63:a9:16:d7:0e:0c:37:de:57:
ba:36:1a:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsD1L9/LpC64EbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZmE5YTNkZDItYWFlNS00ZTEyLWFkMjYtMTFjNWE3OWQ5MjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtvOvFBvPVpZ2kVnf+miBo5LoFKLCbVw7cUq
joQCYfQBqHw0uFJvWQvevEY7lO4rmKldeSWHd7b0erh3Sb689Aafinqo/fl1vJ7V
WyeArsuuvJOQFUVjbc/W0GrTb5WJsjJG8VtMKylGwnvvd7kCb7dvA2+Ix1q3IBh0
anweMDYoRlG9z4lZC3E/CGpSB9t3IesmeSE22Q0FY4+PJIIasCGC6tGhIZbfuEyq
IZyoiUE3vRLLnRJDhCWmxYK2K9JAPv8aKL9ihD3AMoQYd22715wGfunUciku0ACR
3JfIG74WVihjUDrkU7uJ6M3ipk1xLlLVX8unK2lvD35Vf9JswQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUcOnROEli8ucOK2zWSgB9gwY/SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTVkYmFlZWMtZjM2OS0z
ODhiLTlhYmYtOWQ3ODFlMDZkMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzi+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9+B1++ggjmn0tfSCaOcz7uy818h33+K4m+j3Qhf34kK+eE1i+OMplc
SF32VR6Zzz55/fCrBH9mafzpotssIduMkSiL5IKmcBKWU3cnV7nlWakdg9YJjtuY
ZqApPgUoYEOSsbGp+yDAKhp/8t5dyJTs+IFA4jjQPQuoh0+hecKSLXKHsjx7HvrV
bT02byYnW2OtYjjQh1v0o0Dey4qIQ8xE5oNt6Yj7aSROcYSUMkYtEyzzdOnhUnVF
szJpI1fPDw4jxIV3AbYqU20RhDj0lALT36lhld5JUWUZbmVXv6D2pYLuOpuai8WP
ax45WyCAVAnKhWOpFtcODDfeV7o2GkQ=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org