Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/67ba69d7-9df2-3826-a793-b16091058410.roa
File: 67ba69d7-9df2-3826-a793-b16091058410.roa (raw, json)
Hash identifier: b4F9LFCG5zaPrMdfVPxYI9Nu/KxASUg2Z6PwGNOMiMo=
Subject key identifier: 74:A5:E2:15:5C:09:AD:B7:F6:67:08:65:E8:14:4F:AF:7B:33:0B:B3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5F7CD1CBE8D578FFA310A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/67ba69d7-9df2-3826-a793-b16091058410.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.136.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:7c:d1:cb:e8:d5:78:ff:a3:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=db2950f4-44eb-4333-b622-3ec10d1a79ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:15:b3:56:2d:64:47:31:0c:99:07:86:a3:
08:54:87:48:48:a0:bf:ce:99:e7:ed:81:36:f8:d6:
ba:6f:49:57:91:92:e0:4d:aa:37:40:9e:83:a3:a4:
35:f5:9f:0b:63:07:0a:b5:f4:ef:43:5e:a2:71:8d:
d9:91:86:b7:af:d0:82:5b:57:73:03:ba:86:be:a0:
8c:af:f4:98:53:25:40:90:f6:f1:ee:11:8a:45:37:
b6:95:0f:2f:12:5d:11:39:79:a8:e2:99:47:35:68:
97:47:15:33:1d:f0:60:75:a4:b8:42:42:c8:a2:bd:
ec:a3:c7:aa:8d:45:3d:d9:e2:44:57:ed:d7:b7:82:
68:97:6d:0d:cf:11:21:c5:64:9e:7a:99:a1:b6:17:
ae:ba:8f:49:70:24:e5:04:64:f3:1f:54:ff:7a:78:
16:64:f1:3f:b4:56:b6:8f:d4:54:c5:cd:1e:47:c5:
c5:e1:56:06:69:d1:8f:4d:b9:00:59:49:63:9f:07:
d7:c8:97:1c:22:f4:93:a5:4c:f7:52:f8:09:cb:95:
1b:13:61:c5:85:4e:3d:f7:74:bc:87:b8:2d:9c:c7:
eb:cb:d8:99:51:75:cb:71:69:49:9e:b7:61:e1:57:
3e:cd:8b:12:88:cf:46:90:a1:33:e5:d2:92:8a:63:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:E2:15:5C:09:AD:B7:F6:67:08:65:E8:14:4F:AF:7B:33:0B:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/67ba69d7-9df2-3826-a793-b16091058410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:fb:8f:02:58:ed:7c:f1:6d:8a:ee:cb:e7:96:15:6d:49:c8:
aa:c6:f5:88:15:35:e1:b6:c5:97:14:ee:95:63:f6:f1:7a:d3:
9b:66:34:96:b5:59:6f:3b:df:e9:b9:a8:12:04:50:77:a3:dc:
29:0b:9d:3c:b8:3e:54:07:ad:a9:5d:d1:8d:42:c1:1f:39:bd:
8b:5b:0e:35:d6:5b:b4:98:47:1b:71:28:fa:1e:f7:fb:2a:2a:
d2:b4:8b:d6:a8:bf:40:75:76:06:fd:32:ff:84:e0:75:17:57:
f5:70:e1:93:8b:f8:73:3e:8a:bb:70:d0:db:20:15:a8:68:d5:
0a:18:d4:c7:32:b3:b5:66:31:df:fc:51:8f:b9:ff:2c:26:c0:
26:8d:86:36:5b:09:dd:95:ba:f7:72:0c:1e:36:81:21:e8:2a:
0b:60:e4:02:da:bb:bc:d8:01:26:68:90:19:70:31:bd:af:10:
0c:0f:93:15:da:cb:ab:ae:95:43:76:4e:77:e8:25:e3:02:39:
f9:7d:59:4f:c9:a0:fa:4d:fe:5f:b2:17:53:bd:7b:4f:c3:db:
40:f0:da:a3:70:87:9b:e4:02:60:5b:6a:3a:d4:04:d7:57:55:
3b:4b:d9:7b:af:f5:2e:c5:d0:b4:02:82:57:21:f3:4d:cf:44:
68:ca:b9:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwqX3zRy+jVeP+jEKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMTIwNjA1MDAwMFoXDTI0MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGIyOTUwZjQtNDRlYi00MzMzLWI2MjItM2VjMTBkMWE3OWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCYVs1YtZEcxDJkHhqMIVIdISKC/zpnn7YE2
+Na6b0lXkZLgTao3QJ6Do6Q19Z8LYwcKtfTvQ16icY3ZkYa3r9CCW1dzA7qGvqCM
r/SYUyVAkPbx7hGKRTe2lQ8vEl0ROXmo4plHNWiXRxUzHfBgdaS4QkLIor3so8eq
jUU92eJEV+3Xt4Jol20NzxEhxWSeepmhtheuuo9JcCTlBGTzH1T/engWZPE/tFa2
j9RUxc0eR8XF4VYGadGPTbkAWUljnwfXyJccIvSTpUz3UvgJy5UbE2HFhU4993S8
h7gtnMfry9iZUXXLcWlJnrdh4Vc+zYsSiM9GkKEz5dKSimOAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSl4hVcCa239mcIZegUT697MwuzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjdiYTY5ZDctOWRmMi0z
ODI2LWE3OTMtYjE2MDkxMDU4NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHD7jwJY7XzxbYruy+eWFW1JyKrG9YgVNeG2xZcU7pVj9vF605tmNJa1
WW873+m5qBIEUHej3CkLnTy4PlQHrald0Y1CwR85vYtbDjXWW7SYRxtxKPoe9/sq
KtK0i9aov0B1dgb9Mv+E4HUXV/Vw4ZOL+HM+irtw0NsgFaho1QoY1Mcys7VmMd/8
UY+5/ywmwCaNhjZbCd2VuvdyDB42gSHoKgtg5ALau7zYASZokBlwMb2vEAwPkxXa
y6uulUN2TnfoJeMCOfl9WU/JoPpN/l+yF1O9e0/D20Dw2qNwh5vkAmBbajrUBNdX
VTtL2Xuv9S7F0LQCglch803PRGjKue4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:40 2024 by rpki-client on console-ams.rpki-client.org