Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa
File: 0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa (raw, json)
Hash identifier: HT+UNptrAEL14ln7DaQ1uXA4J4uXqN4V1DZxt67QkU8=
Subject key identifier: A6:DE:95:B4:AB:2F:17:16:B4:0D:A0:EC:C0:E6:6C:69:B0:56:34:70
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A15EA8744772DC04CB356C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:ea:87:44:77:2d:c0:4c:b3:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9b3346bc-4cff-4d43-ba6f-b977e9e7cff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:77:d7:15:88:0b:6b:41:b8:52:9c:d8:1f:
87:4f:e4:39:12:43:49:88:a6:b4:9d:c6:7a:72:55:
8b:34:d0:b7:c7:08:9a:bc:87:3a:c7:a5:55:1b:30:
dd:12:0d:86:a1:a2:e6:90:33:89:78:aa:28:05:3b:
d3:0e:17:68:7d:0d:5f:2f:d7:97:35:bd:fb:29:bf:
84:e8:50:71:af:6b:6a:1b:35:07:77:e4:7a:ea:3a:
88:0b:1f:6d:d0:61:eb:97:5a:85:cc:32:21:d2:1e:
fe:5b:a9:55:e3:af:22:5b:a3:12:fd:d4:b2:6a:10:
17:39:21:c5:61:92:6e:f3:2b:42:8a:85:f3:24:10:
7b:64:19:f9:3c:29:5d:d9:8b:16:d3:e4:41:4b:af:
60:28:da:8b:97:28:4d:31:41:d9:2b:fd:6c:3e:fc:
2d:a6:e5:ea:4c:af:c8:ef:95:c6:25:1e:7c:31:70:
c1:6c:62:37:53:df:78:21:0f:f5:3f:6e:47:3d:79:
3c:cd:c0:ad:fe:97:23:11:9c:c6:18:e1:06:6e:c0:
a0:5a:6b:5e:d7:ba:70:5e:3d:68:ee:36:94:5b:e8:
d7:a7:2d:48:45:a7:e6:94:8e:6c:5f:fa:47:04:30:
56:fb:f3:99:9f:cc:56:ea:15:08:e4:ec:4e:af:09:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:95:B4:AB:2F:17:16:B4:0D:A0:EC:C0:E6:6C:69:B0:56:34:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0a57a79f-7fb7-31dc-94f9-45b1da2a1f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:2f:ff:17:2d:10:c7:2d:38:1e:a4:b1:1b:ec:7e:88:68:62:
4a:8f:f3:b6:f8:a4:24:ca:59:fa:3c:d7:91:1a:f0:47:d0:e9:
6e:09:55:95:31:87:b2:af:00:c9:d8:c9:17:a9:9f:25:24:4b:
88:20:66:42:8f:e1:fa:5a:cd:d4:00:8e:4e:e1:cd:8f:fd:71:
3a:97:9a:aa:2e:bb:43:71:cf:a2:3e:4b:2e:92:86:c6:d4:32:
7f:78:bd:2e:69:f9:0f:47:89:bd:20:34:de:d9:54:49:12:a2:
86:47:54:4c:0c:4d:b1:54:31:08:05:f7:1f:d0:34:6f:03:cf:
19:50:50:ca:0a:87:10:a6:5a:3f:61:4f:f8:a4:93:e4:1c:96:
58:f2:0d:32:47:ea:ef:75:47:e2:55:4d:65:45:35:88:12:c6:
e6:a2:f7:9a:20:4c:bb:7a:92:6d:d5:98:ef:9d:5d:17:69:77:
be:f7:a9:df:64:12:2d:36:cd:b4:dc:bc:4a:55:e9:b6:ca:1a:
68:7a:3f:8c:1c:4c:13:65:f9:06:94:8d:70:4c:a5:93:b8:df:
94:4b:09:1c:91:19:f4:1d:7d:bc:38:bc:9e:20:4b:56:13:71:
12:10:7c:4c:db:70:b8:1a:6d:cd:02:ef:e5:aa:d3:24:30:f1:
fe:48:9f:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFeqHRHctwEyzVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWIzMzQ2YmMtNGNmZi00ZDQzLWJhNmYtYjk3N2U5ZTdjZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGh31xWIC2tBuFKc2B+HT+Q5EkNJiKa0ncZ6
clWLNNC3xwiavIc6x6VVGzDdEg2GoaLmkDOJeKooBTvTDhdofQ1fL9eXNb37Kb+E
6FBxr2tqGzUHd+R66jqICx9t0GHrl1qFzDIh0h7+W6lV468iW6MS/dSyahAXOSHF
YZJu8ytCioXzJBB7ZBn5PCld2YsW0+RBS69gKNqLlyhNMUHZK/1sPvwtpuXqTK/I
75XGJR58MXDBbGI3U994IQ/1P25HPXk8zcCt/pcjEZzGGOEGbsCgWmte17pwXj1o
7jaUW+jXpy1IRafmlI5sX/pHBDBW+/OZn8xW6hUI5OxOrwkEBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbelbSrLxcWtA2g7MDmbGmwVjRwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGE1N2E3OWYtN2ZiNy0z
MWRjLTk0ZjktNDViMWRhMmExZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgv/xctEMctOB6ksRvsfohoYkqP87b4pCTKWfo815Ea8EfQ6W4JVZUx
h7KvAMnYyRepnyUkS4ggZkKP4fpazdQAjk7hzY/9cTqXmqouu0Nxz6I+Sy6ShsbU
Mn94vS5p+Q9Hib0gNN7ZVEkSooZHVEwMTbFUMQgF9x/QNG8DzxlQUMoKhxCmWj9h
T/ikk+QclljyDTJH6u91R+JVTWVFNYgSxuai95ogTLt6km3VmO+dXRdpd773qd9k
Ei02zbTcvEpV6bbKGmh6P4wcTBNl+QaUjXBMpZO435RLCRyRGfQdfbw4vJ4gS1YT
cRIQfEzbcLgabc0C7+Wq0yQw8f5In5E=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:23:57 2025 by rpki-client