Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7883747f-c2fe-35e2-a045-95e107e00f1d.roa
File: 7883747f-c2fe-35e2-a045-95e107e00f1d.roa (raw, json)
Hash identifier: MSDzYwIvQPd2U6JNZEi81PK/nzJj6Fm9rZFxGOsfqu4=
Subject key identifier: 52:6D:80:18:4F:5C:9B:EF:2E:BB:15:BE:50:F9:35:8F:2A:66:6E:C3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BE99E807064592B3531C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7883747f-c2fe-35e2-a045-95e107e00f1d.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:be:99:e8:07:06:45:92:b3:53:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=e4065e7f-1af1-49fa-9b0d-6aef457edee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:60:c7:12:15:76:42:27:33:40:10:d8:fd:
4d:be:15:cd:27:e6:ba:b5:c7:23:d2:df:11:4b:ec:
d2:9e:b9:67:fc:17:32:46:8b:ec:69:02:5c:28:55:
3f:72:50:90:43:49:0f:e0:c1:b2:fc:b8:3d:2e:89:
cc:14:34:63:27:bf:7a:eb:06:0a:94:6b:ff:be:08:
eb:dc:3b:f3:90:5b:66:a6:f4:19:80:6d:68:e1:34:
a9:ec:17:ea:7c:b8:87:1d:89:29:7d:65:f7:e9:bc:
ba:66:46:d5:2f:15:69:8d:31:5b:77:4e:7b:e1:27:
67:e0:2d:ae:28:5c:3f:96:af:08:5c:3f:c0:8f:a0:
bb:1d:45:e5:93:5c:e3:64:f9:63:af:be:bd:d2:49:
a7:31:ba:46:85:d1:c0:2d:44:b9:c4:25:1f:11:fa:
0a:1c:43:06:6d:8a:e6:de:67:68:30:49:d6:4b:da:
5d:fc:37:a5:0f:7f:57:74:20:46:92:d2:6a:f3:4c:
cd:d0:ed:4c:bd:e5:ef:71:f9:02:b6:18:92:a7:48:
be:9b:df:e8:7f:fc:81:c7:38:87:18:b9:b2:e6:53:
90:71:01:e6:0b:df:59:28:66:9b:83:08:20:06:4a:
b5:18:6d:16:53:7d:16:6b:36:ec:fb:92:9c:07:8b:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:80:18:4F:5C:9B:EF:2E:BB:15:BE:50:F9:35:8F:2A:66:6E:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7883747f-c2fe-35e2-a045-95e107e00f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:18:10:91:c6:6e:49:2e:b9:1a:a5:da:0f:94:60:fa:be:34:
4d:b2:4f:12:1e:16:9f:95:61:84:bf:4e:8b:9d:68:19:d8:ec:
f0:79:63:8b:06:f4:ae:9e:a7:40:58:1c:83:76:1d:d6:16:03:
69:00:a3:6e:28:12:54:14:82:0d:4b:a2:61:7f:a3:66:cc:48:
c1:5a:f2:d5:8d:9c:20:30:5d:92:6a:fa:46:ef:0b:e4:85:3e:
17:60:3e:01:84:48:77:3b:b5:58:88:4d:50:3b:9a:12:1f:b6:
3c:63:74:c9:0f:d3:5b:a7:2e:96:33:8c:9c:03:a8:5e:4c:b1:
f5:3c:4f:01:eb:a8:fd:dd:e8:90:d7:98:1d:e8:57:10:96:d6:
7b:3a:ee:fd:22:c5:5a:f1:29:79:9e:85:62:80:c6:26:81:1c:
8d:fd:a0:ac:b9:48:e0:78:87:e6:45:8f:37:04:83:8c:62:5a:
cb:16:f0:c0:b9:02:93:aa:1f:34:c1:7d:18:26:8c:01:cb:78:
88:f7:5f:0b:67:c2:9d:eb:23:bc:46:82:92:13:bf:f6:74:7b:
17:35:86:18:11:2b:ee:0e:26:0a:5d:75:5f:8c:13:a4:85:29:
6d:f5:df:a7:7e:90:d0:e4:68:83:52:63:6b:23:f9:4d:2f:48:
04:47:f9:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnvpnoBwZFkrNTHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTQwNjVlN2YtMWFmMS00OWZhLTliMGQtNmFlZjQ1N2VkZWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tlgxxIVdkInM0AQ2P1NvhXNJ+a6tccj0t8R
S+zSnrln/BcyRovsaQJcKFU/clCQQ0kP4MGy/Lg9LonMFDRjJ7966wYKlGv/vgjr
3DvzkFtmpvQZgG1o4TSp7BfqfLiHHYkpfWX36by6ZkbVLxVpjTFbd0574Sdn4C2u
KFw/lq8IXD/Aj6C7HUXlk1zjZPljr7690kmnMbpGhdHALUS5xCUfEfoKHEMGbYrm
3mdoMEnWS9pd/DelD39XdCBGktJq80zN0O1MveXvcfkCthiSp0i+m9/of/yBxziH
GLmy5lOQcQHmC99ZKGabgwggBkq1GG0WU30Wazbs+5KcB4v87QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJtgBhPXJvvLrsVvlD5NY8qZm7DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzg4Mzc0N2YtYzJmZS0z
NWUyLWEwNDUtOTVlMTA3ZTAwZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcYEJHGbkkuuRql2g+UYPq+NE2yTxIeFp+VYYS/ToudaBnY7PB5Y4sG
9K6ep0BYHIN2HdYWA2kAo24oElQUgg1LomF/o2bMSMFa8tWNnCAwXZJq+kbvC+SF
PhdgPgGESHc7tViITVA7mhIftjxjdMkP01unLpYzjJwDqF5MsfU8TwHrqP3d6JDX
mB3oVxCW1ns67v0ixVrxKXmehWKAxiaBHI39oKy5SOB4h+ZFjzcEg4xiWssW8MC5
ApOqHzTBfRgmjAHLeIj3Xwtnwp3rI7xGgpITv/Z0exc1hhgRK+4OJgpddV+ME6SF
KW3136d+kNDkaINSY2sj+U0vSARH+aE=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org