Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52945e23-e552-3059-9ec1-86164977283f.roa
File: 52945e23-e552-3059-9ec1-86164977283f.roa (raw, json)
Hash identifier: NHriA2IrnCM/BFBuLBYgNtpkgwsJxTIHa92CWblMznc=
Subject key identifier: 4A:1C:62:2F:EA:95:9E:D2:B0:0F:98:50:6F:3D:85:19:53:BE:08:2A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A14F5063EA3E9530F71A000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52945e23-e552-3059-9ec1-86164977283f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:f5:06:3e:a3:e9:53:0f:71:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2b97588c-6f25-4098-97ac-20ed86da263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:84:21:28:76:0a:1c:be:38:ba:44:44:3d:8c:
44:90:11:06:db:42:0b:3b:04:ba:c5:7e:84:77:8d:
3f:60:9c:d1:fb:e9:5f:fa:15:ab:13:13:81:d9:c2:
df:c6:39:23:ff:41:c1:0d:aa:d1:7b:29:0a:7f:8b:
54:3d:82:79:27:25:bb:e8:4b:12:80:a8:78:5f:cb:
43:54:76:6b:92:16:a5:85:92:40:2c:e3:4b:9e:40:
39:57:74:f4:59:9f:d8:e8:39:0b:7c:63:e3:97:de:
1c:04:67:71:f7:0d:64:28:ad:d9:9c:d1:aa:fb:a2:
40:27:cb:a6:c9:cd:07:93:07:33:fc:06:6d:2e:d4:
07:c9:09:8d:07:4c:41:81:d7:d5:91:b2:a3:56:d5:
7f:20:33:2a:e5:3f:58:72:55:60:72:0e:ee:8c:32:
1c:3b:95:d6:e1:0b:ef:4b:b8:cf:ac:e7:77:65:fb:
c0:e2:19:ec:d1:7e:f8:83:08:b4:b1:5b:34:be:a8:
17:49:87:41:7b:e0:11:1a:4f:a8:7f:04:b4:6d:a1:
7b:c5:85:48:87:f9:f4:1d:a6:3e:cc:af:01:ae:5f:
a9:f1:e8:18:77:7d:6c:ae:0b:5f:6b:5c:f9:4a:99:
6d:8e:0c:f3:ec:c8:2f:69:01:c9:93:77:6b:8f:4a:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:62:2F:EA:95:9E:D2:B0:0F:98:50:6F:3D:85:19:53:BE:08:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52945e23-e552-3059-9ec1-86164977283f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:30:eb:13:ed:09:c3:25:c7:69:c3:1a:4c:1d:a4:dd:b1:51:
b1:07:b6:1c:82:3f:fa:06:05:b2:6c:58:2b:9f:80:80:69:10:
e6:ea:37:5f:63:58:8b:7e:c6:9b:62:5c:33:2d:bb:84:26:5c:
29:8a:d2:a5:55:54:de:3b:9a:df:59:85:48:77:6c:35:3d:d9:
28:8a:9d:12:ec:58:3d:3d:2f:42:61:9a:8f:ae:f8:62:20:61:
6a:e1:64:d9:29:f4:e4:2f:6c:1d:6e:d2:e9:c4:cc:b8:b6:d9:
16:56:64:9c:e6:a1:5e:40:6c:b7:a8:4a:7b:57:de:88:0f:fa:
76:5b:d7:f6:8d:74:a6:5e:3b:5b:8b:68:b8:db:37:62:ce:16:
97:32:33:3f:c6:e6:e9:34:6b:b5:bd:ff:23:69:fa:2b:a5:f7:
86:f9:84:c5:74:8b:57:62:92:f9:37:ca:4a:c2:af:9b:06:dd:
ca:55:d2:b6:1d:1a:80:b8:8f:ec:8e:04:9c:56:22:8b:56:56:
cb:b7:f4:48:b0:8a:6a:4f:f4:44:a3:75:26:72:15:2d:38:32:
d2:7f:17:bd:40:0c:2b:55:03:fe:93:9f:e3:02:80:93:9b:b8:
b8:4c:5d:27:d0:6f:ff:53:b6:a3:3f:9c:9f:b2:87:08:fd:52:
95:77:1d:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKFPUGPqPpUw9xoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MmI5NzU4OGMtNmYyNS00MDk4LTk3YWMtMjBlZDg2ZGEyNjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYQhKHYKHL44ukREPYxEkBEG20ILOwS6xX6E
d40/YJzR++lf+hWrExOB2cLfxjkj/0HBDarReykKf4tUPYJ5JyW76EsSgKh4X8tD
VHZrkhalhZJALONLnkA5V3T0WZ/Y6DkLfGPjl94cBGdx9w1kKK3ZnNGq+6JAJ8um
yc0Hkwcz/AZtLtQHyQmNB0xBgdfVkbKjVtV/IDMq5T9YclVgcg7ujDIcO5XW4Qvv
S7jPrOd3ZfvA4hns0X74gwi0sVs0vqgXSYdBe+ARGk+ofwS0baF7xYVIh/n0HaY+
zK8Brl+p8egYd31srgtfa1z5Spltjgzz7MgvaQHJk3drj0p0BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEocYi/qlZ7SsA+YUG89hRlTvggqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTI5NDVlMjMtZTU1Mi0z
MDU5LTllYzEtODYxNjQ5NzcyODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkw6xPtCcMlx2nDGkwdpN2xUbEHthyCP/oGBbJsWCufgIBpEObqN19j
WIt+xptiXDMtu4QmXCmK0qVVVN47mt9ZhUh3bDU92SiKnRLsWD09L0Jhmo+u+GIg
YWrhZNkp9OQvbB1u0unEzLi22RZWZJzmoV5AbLeoSntX3ogP+nZb1/aNdKZeO1uL
aLjbN2LOFpcyMz/G5uk0a7W9/yNp+iul94b5hMV0i1dikvk3ykrCr5sG3cpV0rYd
GoC4j+yOBJxWIotWVsu39EiwimpP9ESjdSZyFS04MtJ/F71ADCtVA/6Tn+MCgJOb
uLhMXSfQb/9TtqM/nJ+yhwj9UpV3HfI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:27 2025 by rpki-client