Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/180303c4-65d5-3bbe-9470-510e38a91cac.roa
File: 180303c4-65d5-3bbe-9470-510e38a91cac.roa (raw, json)
Hash identifier: Qdb6fEF6vUos7vPsTTjztQYlo1SgwoaqNqHAYgcaWtc=
Subject key identifier: 8A:E5:C0:CF:79:16:05:51:7A:09:0E:97:50:91:14:D4:90:B8:80:4D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7C1165397F0080FBB49E880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/180303c4-65d5-3bbe-9470-510e38a91cac.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c1:16:53:97:f0:08:0f:bb:49:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b56780d8-9ba3-457e-a2e2-e22766a2fd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:71:1e:0a:04:09:75:99:aa:c7:d9:5f:d7:
d1:2a:be:a8:85:63:cc:78:a9:31:e6:52:9e:f5:0f:
6a:5b:65:c4:47:68:f2:81:5f:c8:6e:5c:ea:ec:67:
bb:9e:b7:07:e4:4d:3f:52:36:88:19:83:58:75:11:
35:d6:36:1e:72:af:7f:b4:94:3e:46:21:91:c4:ea:
a6:c3:87:69:70:69:1b:6a:99:66:09:01:6d:51:44:
51:92:d6:bf:0b:9e:30:da:41:ca:2c:d4:00:1b:53:
30:eb:e9:7d:92:27:b9:fc:d9:fe:10:9c:68:e7:e6:
13:57:b1:ff:88:4b:f9:00:91:1e:e6:1a:c5:05:56:
15:43:aa:fa:fa:a6:d3:e9:df:db:fb:e9:b2:17:1a:
64:cb:53:8e:fc:26:bf:52:d4:52:83:61:c5:c9:0b:
41:0f:e8:34:0e:95:52:a0:0a:83:03:43:bf:20:7b:
02:8f:0b:82:1d:ab:9e:48:88:cb:3e:c8:06:47:cf:
67:30:79:1f:e8:56:3f:1d:3d:c7:1d:fb:a9:5e:0f:
97:d2:09:94:bf:2a:23:ed:11:d6:ef:2f:c0:02:5b:
e8:02:48:34:f3:4c:2e:33:55:9a:14:32:2f:c6:97:
8a:09:0c:57:f5:30:cf:7d:f4:cc:9e:3b:8b:b6:55:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E5:C0:CF:79:16:05:51:7A:09:0E:97:50:91:14:D4:90:B8:80:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/180303c4-65d5-3bbe-9470-510e38a91cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:4d:d4:9c:93:75:03:74:7b:fa:f6:81:b2:6f:10:9f:f3:eb:
f1:73:cf:83:42:00:2f:c2:15:6f:f4:15:29:d2:43:ba:87:eb:
fa:aa:a0:25:87:30:1b:50:11:ea:d8:7d:02:ab:61:e3:ba:76:
12:5f:cd:28:4a:c2:7d:4b:d0:ef:cf:3f:bf:48:8c:1c:01:b7:
7a:f0:fa:35:1e:d7:46:17:15:81:cc:10:62:86:7c:db:38:8b:
c2:52:6e:4a:8e:28:a9:01:fb:42:f2:aa:e4:23:d7:ce:c7:f5:
f7:7d:27:bb:96:6c:73:a1:7f:84:d7:0e:7f:ab:5e:6b:fc:a3:
27:d8:52:79:c7:4e:17:d8:44:73:72:9b:6e:46:4f:fe:19:5e:
e7:77:87:51:05:07:cf:ae:7e:9d:78:ab:e1:7a:0f:57:57:74:
4d:18:14:9d:01:45:69:47:61:7d:f6:18:5e:ca:a2:bb:57:bf:
33:ef:39:3b:c8:e3:42:31:66:9a:b9:4f:99:65:fa:e0:c3:25:
be:a1:0f:cf:7b:86:95:e8:1c:71:05:cc:00:f2:14:8f:0f:07:
e6:e8:a7:e6:37:ed:ca:5e:ed:ab:51:fc:bf:9d:ea:28:3c:6a:
8b:46:09:c1:ec:71:95:dc:17:da:03:eb:5d:9d:bb:61:58:b7:
43:16:05:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwRZTl/AID7tJ6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YjU2NzgwZDgtOWJhMy00NTdlLWEyZTItZTIyNzY2YTJmZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jhxHgoECXWZqsfZX9fRKr6ohWPMeKkx5lKe
9Q9qW2XER2jygV/Iblzq7Ge7nrcH5E0/UjaIGYNYdRE11jYecq9/tJQ+RiGRxOqm
w4dpcGkbaplmCQFtUURRkta/C54w2kHKLNQAG1Mw6+l9kie5/Nn+EJxo5+YTV7H/
iEv5AJEe5hrFBVYVQ6r6+qbT6d/b++myFxpky1OO/Ca/UtRSg2HFyQtBD+g0DpVS
oAqDA0O/IHsCjwuCHaueSIjLPsgGR89nMHkf6FY/HT3HHfupXg+X0gmUvyoj7RHW
7y/AAlvoAkg080wuM1WaFDIvxpeKCQxX9TDPffTMnjuLtlV4cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrlwM95FgVRegkOl1CRFNSQuIBNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTgwMzAzYzQtNjVkNS0z
YmJlLTk0NzAtNTEwZTM4YTkxY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJN1JyTdQN0e/r2gbJvEJ/z6/Fzz4NCAC/CFW/0FSnSQ7qH6/qqoCWH
MBtQEerYfQKrYeO6dhJfzShKwn1L0O/PP79IjBwBt3rw+jUe10YXFYHMEGKGfNs4
i8JSbkqOKKkB+0LyquQj187H9fd9J7uWbHOhf4TXDn+rXmv8oyfYUnnHThfYRHNy
m25GT/4ZXud3h1EFB8+ufp14q+F6D1dXdE0YFJ0BRWlHYX32GF7KortXvzPvOTvI
40IxZpq5T5ll+uDDJb6hD897hpXoHHEFzADyFI8PB+bop+Y37cpe7atR/L+d6ig8
aotGCcHscZXcF9oD612du2FYt0MWBQQ=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org