Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33561278-6b03-3393-bc42-5df1808665fa.roa
File: 33561278-6b03-3393-bc42-5df1808665fa.roa (raw, json)
Hash identifier: +jPcm+RG53jOIzFcjiRVHrtXA8Y+ZM7wVGY9SKVhc5I=
Subject key identifier: 51:3D:3E:36:9C:83:19:51:23:53:F8:EB:A5:7C:EB:29:67:C5:13:82
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5F501FB7134C27CEFFDE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33561278-6b03-3393-bc42-5df1808665fa.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:50:1f:b7:13:4c:27:ce:ff:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=70454743-c23c-45ec-aa38-6d1fd233e28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:32:ad:d6:43:24:df:fb:f6:5c:32:fe:7f:
37:fb:f3:60:9e:94:20:ad:48:2f:b0:7e:89:7e:53:
5b:d3:d4:4c:74:b5:ea:a2:30:36:44:82:75:4f:e8:
bb:9a:a8:0b:79:8f:21:d2:a7:5e:e6:ea:5c:00:ca:
91:09:39:d8:b1:53:5d:cd:a2:2d:f6:2f:79:28:3c:
58:ff:6c:10:62:f2:9b:06:d1:18:6b:10:99:f7:20:
48:63:df:79:e1:37:81:df:4c:8d:a4:96:31:2d:43:
bd:58:d4:9d:bc:49:1e:63:a3:49:6f:b0:90:0e:ab:
b0:c1:02:ab:3b:1e:10:ed:12:a0:81:a1:23:1a:4f:
aa:d6:14:a0:04:48:71:51:ce:2a:1f:d7:02:83:64:
b0:1a:ef:d0:6c:0d:d4:46:72:57:47:63:b4:87:70:
bc:07:73:d6:e7:a4:27:ec:29:ea:9e:ba:41:62:87:
88:7c:64:02:3a:aa:47:d3:b1:97:4a:83:70:27:e3:
7d:b8:f4:98:55:00:6b:e1:2f:a5:d9:40:fc:57:e3:
01:e9:d5:d5:63:e1:9a:36:ae:61:c6:a0:e9:1a:49:
dd:68:24:6c:fe:7d:25:cb:b6:e1:f3:90:33:02:50:
3e:21:72:91:7d:11:0b:de:8c:4a:b9:e6:ec:6d:28:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:3E:36:9C:83:19:51:23:53:F8:EB:A5:7C:EB:29:67:C5:13:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/33561278-6b03-3393-bc42-5df1808665fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:01:ab:e1:44:64:da:67:57:37:c0:ed:95:91:f4:b6:ca:72:
dc:cd:3d:40:92:5a:bc:2d:3f:ff:9f:f2:41:b2:97:ea:dd:99:
61:50:51:aa:f3:4a:e4:79:f1:d4:5c:e2:8a:b6:2b:f5:2d:81:
fe:34:df:f3:a5:d9:2b:64:57:97:93:77:17:94:38:13:2d:6f:
04:15:e6:ab:a7:5d:2e:29:a0:39:20:bb:96:8b:80:98:56:cc:
ce:bf:7d:7d:05:64:0a:0b:a3:59:86:d7:8e:15:f8:bb:6b:1e:
8f:15:eb:f6:e7:d8:07:a8:cb:13:ab:27:f4:2a:d1:8a:93:2b:
bd:e6:be:97:d4:5e:22:88:80:19:03:4a:2c:46:ee:8c:e7:de:
64:28:07:77:ce:f2:6c:dc:3d:30:68:e5:bf:15:66:ae:d9:2d:
16:af:b9:3f:15:8f:b2:b7:47:06:fa:a5:47:1b:61:87:e4:93:
02:ed:bd:0d:04:46:73:85:92:99:84:41:e8:29:4a:88:84:f0:
5f:f5:46:b7:36:b2:19:6e:99:20:4a:9a:40:73:c3:14:9d:1a:
93:f6:d0:bd:e7:10:98:43:06:be:7b:93:81:91:b1:9f:9a:95:
9c:db:1b:9c:f5:9d:ab:ee:e5:2f:d0:b6:a7:cc:69:56:7c:e3:
ef:2f:7f:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwqX1AftxNMJ87/3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMTIwNjA1MDAwMFoXDTI0MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NzA0NTQ3NDMtYzIzYy00NWVjLWFhMzgtNmQxZmQyMzNlMjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswQyrdZDJN/79lwy/n83+/NgnpQgrUgvsH6J
flNb09RMdLXqojA2RIJ1T+i7mqgLeY8h0qde5upcAMqRCTnYsVNdzaIt9i95KDxY
/2wQYvKbBtEYaxCZ9yBIY9954TeB30yNpJYxLUO9WNSdvEkeY6NJb7CQDquwwQKr
Ox4Q7RKggaEjGk+q1hSgBEhxUc4qH9cCg2SwGu/QbA3URnJXR2O0h3C8B3PW56Qn
7CnqnrpBYoeIfGQCOqpH07GXSoNwJ+N9uPSYVQBr4S+l2UD8V+MB6dXVY+GaNq5h
xqDpGkndaCRs/n0ly7bh85AzAlA+IXKRfREL3oxKuebsbSipZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFE9PjacgxlRI1P466V86ylnxROCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM1NjEyNzgtNmIwMy0z
MzkzLWJjNDItNWRmMTgwODY2NWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUBq+FEZNpnVzfA7ZWR9LbKctzNPUCSWrwtP/+f8kGyl+rdmWFQUarz
SuR58dRc4oq2K/Utgf403/Ol2StkV5eTdxeUOBMtbwQV5qunXS4poDkgu5aLgJhW
zM6/fX0FZAoLo1mG144V+LtrHo8V6/bn2AeoyxOrJ/Qq0YqTK73mvpfUXiKIgBkD
SixG7ozn3mQoB3fO8mzcPTBo5b8VZq7ZLRavuT8Vj7K3Rwb6pUcbYYfkkwLtvQ0E
RnOFkpmEQegpSoiE8F/1Rrc2shlumSBKmkBzwxSdGpP20L3nEJhDBr57k4GRsZ+a
lZzbG5z1navu5S/QtqfMaVZ84+8vfyA=
-----END CERTIFICATE-----
Generated at Sat Mar 9 05:24:56 2024 by rpki-client on console-ams.rpki-client.org