Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10725c9c-800a-351b-b738-cbec419fcb19.roa
File: 10725c9c-800a-351b-b738-cbec419fcb19.roa (raw, json)
Hash identifier: NXRLJ5RHXTr6CfMz7OvFiNIJuymjDsXDY2zH1EFenFw=
Subject key identifier: 00:71:F4:51:69:55:A4:59:06:0D:B6:35:49:74:7B:85:B1:DE:53:5F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7C16F634EB536F04081EA80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10725c9c-800a-351b-b738-cbec419fcb19.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:6f:63:4e:b5:36:f0:40:81:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=338c2c85-49d1-4ea5-b002-a1b90af62170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:09:97:f9:a9:a9:24:c5:72:63:04:71:81:
ea:1f:c1:55:3f:82:d7:1f:b5:0f:13:4e:01:90:6b:
59:d4:c5:9b:38:26:79:f4:30:cc:fc:3d:ac:ce:59:
62:f4:34:d3:57:42:dd:f1:72:ae:b0:72:73:56:04:
4d:5d:e2:21:be:9a:c1:59:03:32:8a:77:6e:e4:04:
7e:12:8d:36:29:d8:13:c4:03:58:7a:b3:97:1c:63:
dd:67:21:40:82:2e:99:92:97:eb:09:e7:50:7b:75:
f4:94:9e:f6:36:8d:9a:fe:a2:bd:fa:57:9b:3e:c2:
de:e2:e4:c1:a6:93:2a:90:aa:65:0d:78:cf:bb:aa:
f3:b7:15:10:d1:36:da:62:24:73:84:8e:d2:98:ae:
c9:24:42:a1:5a:fd:79:a0:e2:e4:f5:28:f5:06:f9:
2e:b4:12:63:46:9a:4d:79:d5:cc:36:2c:9c:40:7c:
82:77:08:26:d8:28:1f:7c:c7:70:a7:92:96:8b:97:
3d:99:ff:14:30:82:7c:ca:5d:5c:cc:1b:68:7b:18:
05:e9:91:43:0c:dc:ec:6d:ef:40:ca:2f:d1:66:38:
b4:df:79:ff:fe:1a:fd:43:64:25:bd:78:5e:c4:1e:
d2:33:90:93:f5:8e:70:f3:03:d0:45:ee:e3:17:58:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:F4:51:69:55:A4:59:06:0D:B6:35:49:74:7B:85:B1:DE:53:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10725c9c-800a-351b-b738-cbec419fcb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:02:0d:f1:20:f4:2a:be:a4:f0:f4:e8:7d:28:4b:5c:54:f4:
cc:98:8c:c4:58:d9:61:3a:5d:66:7f:8d:18:ee:03:4a:31:c3:
f6:47:93:02:43:37:32:29:94:e4:a7:3e:ca:5b:a7:fa:f6:38:
66:fd:22:6c:18:e9:5a:de:79:44:7e:36:8f:84:33:83:e4:9f:
ae:5b:1c:c6:44:88:73:02:a1:90:51:97:8a:37:43:ed:82:1a:
67:c2:1b:71:58:a7:51:f6:8e:16:17:c8:93:ab:44:98:da:ea:
cf:5d:df:54:93:0c:f0:49:48:d0:0e:e8:9e:d4:7e:6d:f3:f5:
13:1e:3e:7e:f3:43:d5:d9:5c:24:c8:d0:6d:49:95:b4:27:cc:
1a:bb:dd:f1:e8:75:92:2a:e5:ea:15:8d:70:21:53:c3:9c:1f:
87:4a:26:83:f7:c9:a3:25:82:ac:e6:b9:a9:11:02:21:db:bc:
d5:01:c9:62:b5:b7:8a:ca:10:43:bd:3b:91:9d:ef:5d:67:c1:
2a:6b:31:75:ef:4e:70:94:69:e4:f8:dd:d0:2c:30:88:73:66:
ad:3b:45:16:d3:43:20:0c:7c:5b:9a:66:89:ba:b8:c8:03:79:
af:f6:cb:2e:27:ec:50:b0:a5:48:99:1d:ec:86:6b:3a:25:19:
ba:8f:3d:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwW9jTrU28ECB6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MzM4YzJjODUtNDlkMS00ZWE1LWIwMDItYTFiOTBhZjYyMTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtEJl/mpqSTFcmMEcYHqH8FVP4LXH7UPE04B
kGtZ1MWbOCZ59DDM/D2szlli9DTTV0Ld8XKusHJzVgRNXeIhvprBWQMyindu5AR+
Eo02KdgTxANYerOXHGPdZyFAgi6ZkpfrCedQe3X0lJ72No2a/qK9+lebPsLe4uTB
ppMqkKplDXjPu6rztxUQ0TbaYiRzhI7SmK7JJEKhWv15oOLk9Sj1BvkutBJjRppN
edXMNiycQHyCdwgm2CgffMdwp5KWi5c9mf8UMIJ8yl1czBtoexgF6ZFDDNzsbe9A
yi/RZji033n//hr9Q2QlvXhexB7SM5CT9Y5w8wPQRe7jF1gEkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABx9FFpVaRZBg22NUl0e4Wx3lNfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTA3MjVjOWMtODAwYS0z
NTFiLWI3MzgtY2JlYzQxOWZjYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkCDfEg9Cq+pPD06H0oS1xU9MyYjMRY2WE6XWZ/jRjuA0oxw/ZHkwJD
NzIplOSnPspbp/r2OGb9ImwY6VreeUR+No+EM4Pkn65bHMZEiHMCoZBRl4o3Q+2C
GmfCG3FYp1H2jhYXyJOrRJja6s9d31STDPBJSNAO6J7Ufm3z9RMePn7zQ9XZXCTI
0G1JlbQnzBq73fHodZIq5eoVjXAhU8OcH4dKJoP3yaMlgqzmuakRAiHbvNUByWK1
t4rKEEO9O5Gd711nwSprMXXvTnCUaeT43dAsMIhzZq07RRbTQyAMfFuaZom6uMgD
ea/2yy4n7FCwpUiZHeyGazolGbqPPUw=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org