Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00a65a68-6bae-31f7-b245-3e904edd1816.roa
File: 00a65a68-6bae-31f7-b245-3e904edd1816.roa (raw, json)
Hash identifier: n99VYa0h8+zAR26OJgnJjHmLWBaMUfBKZjZrVfDj7GU=
Subject key identifier: A2:BA:6A:0A:BA:1D:DE:CE:C9:06:C4:4B:91:AE:3D:69:D8:6B:2A:B0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA79EAE26D6C2407CCCD51E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00a65a68-6bae-31f7-b245-3e904edd1816.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:ae:26:d6:c2:40:7c:cc:d5:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=31468b1a-5f85-4dcd-8c52-c11238fa9f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:5e:c7:16:c8:06:18:2d:be:4d:82:81:ba:
d3:7b:a6:74:99:73:6b:cf:bd:15:4a:0d:66:1b:db:
e0:9f:54:7f:cc:26:92:c0:93:af:9c:05:4d:db:b6:
14:93:42:51:ef:5b:76:66:91:ba:b6:d4:23:00:71:
3e:18:5d:8c:5a:48:b5:57:dc:be:bb:44:b0:3a:7b:
30:e6:23:33:e2:ed:34:04:55:d6:58:04:7c:e1:e5:
5a:00:fb:c5:75:d0:b7:ad:3b:37:f0:fc:b9:21:24:
f6:f9:05:df:31:e4:4c:2c:61:df:0e:11:9d:55:a5:
76:52:f5:87:20:e6:2e:d1:2d:37:c0:0d:43:37:e3:
f5:ec:fb:35:89:4a:9d:6f:ba:49:56:85:2c:53:97:
4e:6b:72:f6:ea:ed:22:3d:15:be:63:fb:77:8b:48:
3f:eb:4e:53:38:16:6d:43:34:72:b8:dd:f9:0e:9d:
dc:51:d2:43:3b:4d:a4:7f:b4:ba:c1:a6:3c:0b:90:
56:10:87:97:68:9a:05:56:53:48:57:77:3d:ab:59:
36:2b:14:62:45:52:d2:65:85:f4:c1:cb:d7:3d:02:
f8:3d:f4:6e:64:f8:21:8f:b2:61:28:84:28:c6:c1:
9f:b9:cc:2f:c3:86:63:69:15:f5:95:b7:e3:19:f9:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:6A:0A:BA:1D:DE:CE:C9:06:C4:4B:91:AE:3D:69:D8:6B:2A:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/00a65a68-6bae-31f7-b245-3e904edd1816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:1a:27:68:bc:24:e6:a9:6b:54:21:fb:3d:6a:33:71:04:1c:
a3:0d:27:55:51:d8:ce:80:2f:6d:93:4b:18:85:c8:7b:41:dc:
1c:6a:2e:6f:0f:e9:b0:a8:bb:25:4d:08:f2:b6:88:68:f6:dd:
f7:3c:ad:fc:07:7b:07:84:e4:68:6c:8c:b8:fb:54:b7:ef:b2:
48:49:42:9a:6b:51:6c:fd:11:c0:f5:9f:63:96:ec:5e:a7:01:
72:88:48:c6:8f:02:7d:d1:88:ca:f2:02:35:33:66:ad:06:d3:
58:f5:56:01:f3:be:0c:65:61:a3:4c:70:fa:4b:44:a9:1b:e7:
b2:e4:90:7c:cd:4d:33:a3:ce:ff:f1:59:5d:26:27:96:09:fb:
29:bc:b4:51:83:be:60:dd:80:08:b8:c9:b3:8c:00:b9:fd:79:
05:7b:f2:6a:09:13:b8:dc:b8:fd:14:f9:3f:9c:c4:65:d1:3d:
15:aa:a1:71:17:63:d1:4a:9d:b8:25:a4:39:e0:87:5e:97:49:
5f:d7:cf:53:ea:cd:a9:ab:95:e2:f4:a1:43:f5:d1:10:7a:b8:
c1:51:b6:cc:59:60:5e:7e:ef:2f:9a:bc:d0:35:5a:5f:da:3b:
ee:a2:3e:e3:fd:76:f1:f1:d0:09:d7:bf:31:a6:e7:76:95:50:
ba:d9:da:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnnq4m1sJAfMzVHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzE0NjhiMWEtNWY4NS00ZGNkLThjNTItYzExMjM4ZmE5ZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApotexxbIBhgtvk2CgbrTe6Z0mXNrz70VSg1m
G9vgn1R/zCaSwJOvnAVN27YUk0JR71t2ZpG6ttQjAHE+GF2MWki1V9y+u0SwOnsw
5iMz4u00BFXWWAR84eVaAPvFddC3rTs38Py5IST2+QXfMeRMLGHfDhGdVaV2UvWH
IOYu0S03wA1DN+P17Ps1iUqdb7pJVoUsU5dOa3L26u0iPRW+Y/t3i0g/605TOBZt
QzRyuN35Dp3cUdJDO02kf7S6waY8C5BWEIeXaJoFVlNIV3c9q1k2KxRiRVLSZYX0
wcvXPQL4PfRuZPghj7JhKIQoxsGfucwvw4ZjaRX1lbfjGfmuxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKK6agq6Hd7OyQbES5GuPWnYayqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDBhNjVhNjgtNmJhZS0z
MWY3LWIyNDUtM2U5MDRlZGQxODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIThMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUaJ2i8JOapa1Qh+z1qM3EEHKMNJ1VR2M6AL22TSxiFyHtB3BxqLm8P
6bCouyVNCPK2iGj23fc8rfwHeweE5GhsjLj7VLfvskhJQpprUWz9EcD1n2OW7F6n
AXKISMaPAn3RiMryAjUzZq0G01j1VgHzvgxlYaNMcPpLRKkb57LkkHzNTTOjzv/x
WV0mJ5YJ+ym8tFGDvmDdgAi4ybOMALn9eQV78moJE7jcuP0U+T+cxGXRPRWqoXEX
Y9FKnbglpDngh16XSV/Xz1PqzamrleL0oUP10RB6uMFRtsxZYF5+7y+avNA1Wl/a
O+6iPuP9dvHx0AnXvzGm53aVULrZ2pU=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org