Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f462f72d-636a-3cce-bc91-4d53f539b405.roa
File: f462f72d-636a-3cce-bc91-4d53f539b405.roa (raw, json)
Hash identifier: pydEjnTVcGWIDdJFlskVQXoU93E4ydM9w6ndtG5v0bo=
Subject key identifier: 5C:12:24:CE:16:C0:DE:49:A4:D5:A5:A2:2B:2D:5C:A4:9F:6F:38:49
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858449314CE5AF56AE55263EAF800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f462f72d-636a-3cce-bc91-4d53f539b405.roa
Signing time: Mon 15 Jan 2024 12:00:00 +0000
ROA not before: Mon 15 Jan 2024 12:00:00 +0000
ROA not after: Tue 16 Apr 2024 04:00:00 +0000
asID: 12132
IP address blocks: 199.243.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:93:14:ce:5a:f5:6a:e5:52:63:ea:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jan 15 12:00:00 2024 GMT
Not After : Apr 16 04:00:00 2024 GMT
Subject: CN=60519d24-7452-4467-88fb-22d1803825c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:67:a7:e9:12:a8:fb:40:c7:e0:af:24:2d:
71:2c:6b:df:9f:3f:5d:41:4c:c8:86:8b:02:8f:f3:
14:46:ec:90:ed:cc:bf:37:1e:7b:e0:e1:99:f5:fe:
8c:78:9d:a3:7d:82:26:6c:6d:33:d6:fc:88:df:eb:
7f:f1:e4:5b:3b:ea:0a:27:49:6e:72:d9:4c:4c:4d:
66:7a:db:3a:67:17:41:43:2d:67:27:f0:50:1f:4f:
49:96:ba:6e:94:e9:77:7c:be:56:8a:ca:e8:e1:65:
63:bd:5b:c9:9d:01:e2:fe:ff:a0:c3:c6:fb:44:ff:
da:3a:4d:51:f3:79:c2:3d:e8:3f:bb:87:df:0c:38:
f8:28:0e:b1:c9:fb:b8:38:0b:ef:1e:96:1a:1b:33:
20:f8:63:3e:f4:65:c2:f1:26:75:51:62:9b:49:7c:
52:04:20:81:ae:0b:a5:98:a9:fd:29:a8:43:d8:76:
e0:be:3d:44:11:49:67:29:01:02:e9:6c:e0:48:5f:
81:28:ca:19:95:a2:9c:f3:c7:26:8f:01:f4:21:1e:
23:bc:71:5d:a8:b0:da:8f:73:95:99:a0:f8:23:7b:
35:43:95:d0:5a:7e:82:81:7d:cf:c4:99:4b:e3:f7:
b4:29:61:c4:6a:75:c9:c9:e0:63:02:4c:f4:eb:7e:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:12:24:CE:16:C0:DE:49:A4:D5:A5:A2:2B:2D:5C:A4:9F:6F:38:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f462f72d-636a-3cce-bc91-4d53f539b405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f2:34:73:31:6f:3f:90:4c:f6:d9:6c:1c:af:c1:ee:fd:00:
9d:2f:d6:0e:92:b7:0e:e5:61:f8:c5:f0:41:4d:b9:1a:19:9f:
e7:8f:f2:57:83:e2:e0:e3:69:12:fa:45:29:8a:16:61:97:c4:
04:c7:d5:ad:68:1d:35:5e:fd:6d:f7:04:e0:49:ef:f3:9e:34:
16:2d:6f:4a:d1:7e:4e:9a:0a:49:ef:f5:69:3a:9e:93:e6:03:
20:bc:dc:56:72:f1:16:e3:fc:12:04:dc:2f:55:35:70:3e:81:
08:99:82:a4:14:89:6d:79:2e:de:03:e5:93:fd:c8:02:19:a1:
91:67:e4:5d:bc:e8:7d:e7:33:be:33:77:65:f6:04:d7:80:68:
7b:48:e1:92:42:43:bf:c0:b1:65:4d:5b:54:df:f1:03:c9:85:
c3:ab:fb:ca:07:1d:63:8a:cd:cd:83:78:8e:16:b0:ec:2a:b5:
f7:ac:91:ef:c9:71:35:b4:08:4f:73:1e:34:b0:7e:53:e6:56:
52:1f:63:99:a3:a4:1f:e9:a6:ac:55:bf:87:37:14:73:d7:57:
63:b7:69:a5:71:0f:94:4e:6a:92:12:6a:8c:1f:ef:f8:cc:ff:
2b:5f:01:44:83:2b:d1:aa:74:6e:5e:8f:6d:0e:89:41:11:f2:
4c:94:19:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFM5a9WrlUmPq+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjA1MTlkMjQtNzQ1Mi00NDY3LTg4ZmItMjJkMTgwMzgyNWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaJnp+kSqPtAx+CvJC1xLGvfnz9dQUzIhosC
j/MURuyQ7cy/Nx574OGZ9f6MeJ2jfYImbG0z1vyI3+t/8eRbO+oKJ0luctlMTE1m
ets6ZxdBQy1nJ/BQH09JlrpulOl3fL5Wisro4WVjvVvJnQHi/v+gw8b7RP/aOk1R
83nCPeg/u4ffDDj4KA6xyfu4OAvvHpYaGzMg+GM+9GXC8SZ1UWKbSXxSBCCBrgul
mKn9KahD2Hbgvj1EEUlnKQEC6WzgSF+BKMoZlaKc88cmjwH0IR4jvHFdqLDaj3OV
maD4I3s1Q5XQWn6CgX3PxJlL4/e0KWHEanXJyeBjAkz0636IAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwSJM4WwN5JpNWloistXKSfbzhJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjQ2MmY3MmQtNjM2YS0z
Y2NlLWJjOTEtNGQ1M2Y1MzliNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/PNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETyNHMxbz+QTPbZbByvwe79AJ0v1g6Stw7lYfjF8EFNuRoZn+eP8leD
4uDjaRL6RSmKFmGXxATH1a1oHTVe/W33BOBJ7/OeNBYtb0rRfk6aCknv9Wk6npPm
AyC83FZy8Rbj/BIE3C9VNXA+gQiZgqQUiW15Lt4D5ZP9yAIZoZFn5F286H3nM74z
d2X2BNeAaHtI4ZJCQ7/AsWVNW1Tf8QPJhcOr+8oHHWOKzc2DeI4WsOwqtfeske/J
cTW0CE9zHjSwflPmVlIfY5mjpB/ppqxVv4c3FHPXV2O3aaVxD5ROapISaowf7/jM
/ytfAUSDK9GqdG5ej20OiUER8kyUGRc=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org