Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e13f5dc-e7c9-30bc-88ee-97010a3bcc8b.roa
File: 8e13f5dc-e7c9-30bc-88ee-97010a3bcc8b.roa (raw, json)
Hash identifier: 39jRYeERGJhkctKu1SS8yTlxRQzmk/T33h8ZG0WekM0=
Subject key identifier: B1:8C:D1:1F:0F:4A:85:E3:09:A1:5F:D2:B2:85:C9:B8:C3:B1:66:CF
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A9EB8319B4D980241E7E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e13f5dc-e7c9-30bc-88ee-97010a3bcc8b.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a9:eb:83:19:b4:d9:80:24:1e:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c9dced59-bf8c-4a68-a9b7-9ef5845c9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:2e:9c:f5:28:c4:75:1b:a2:92:c4:c7:e5:
19:06:11:71:85:6a:63:f8:7a:a7:c5:2a:b8:dd:1e:
7d:65:4e:17:97:bf:5b:84:60:d9:d2:71:83:78:e6:
db:4b:1c:52:80:96:c3:ef:e7:00:6b:8c:50:b0:de:
b1:5b:27:1d:de:8a:44:f5:40:1e:90:4d:f0:2c:2d:
9f:d0:3b:b3:15:5d:13:a6:04:e3:b4:b2:dd:19:41:
96:d0:8b:c7:90:bf:a8:25:88:d3:5a:06:34:04:df:
b5:ca:98:7a:90:2e:76:ee:6b:21:e6:dc:48:e7:7c:
e7:93:c8:b2:0d:be:3b:75:d9:2b:95:4f:88:e1:a2:
6e:f6:f5:73:30:65:ce:10:79:b6:cb:b0:4c:f5:b8:
f8:eb:4a:29:c0:1e:7d:af:f6:b4:e9:b3:68:8e:1a:
d9:aa:6e:df:3b:9d:86:1b:64:bf:23:0c:b1:14:cc:
c3:6e:ef:59:87:93:d5:71:b8:ac:98:8e:ad:fc:a7:
0b:69:b6:38:9c:92:04:dc:f2:7a:7c:e1:ea:8e:7d:
5f:70:c3:2e:2c:62:16:62:6c:01:aa:d2:f8:50:aa:
f0:af:3a:fa:d8:55:4a:5e:b8:2f:48:94:c3:e3:e4:
7b:0a:b0:db:e5:94:84:b2:6e:b9:be:7c:be:d0:6b:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:D1:1F:0F:4A:85:E3:09:A1:5F:D2:B2:85:C9:B8:C3:B1:66:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e13f5dc-e7c9-30bc-88ee-97010a3bcc8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:70:c0:c9:e8:df:18:46:f2:32:4f:92:0b:33:18:93:a0:0a:
c6:34:83:d2:a5:2a:be:05:8f:b8:d1:f3:fe:e4:18:11:98:fc:
0e:3c:c4:4d:95:0a:36:1f:40:b5:0b:74:98:ca:b9:06:ba:f2:
6a:26:ea:a6:83:4d:34:50:08:38:17:03:c2:91:e1:f5:af:82:
ac:43:68:9d:99:a1:74:9e:c8:85:a1:a3:60:94:88:7d:e3:84:
81:22:97:64:ad:06:b4:ec:a5:0d:9b:1e:d6:15:fc:63:3c:90:
f9:cf:b2:ad:9f:94:b7:a1:ab:c1:ff:e7:75:48:64:26:2b:45:
c9:f0:2c:eb:7a:0c:3e:6e:4a:12:1e:32:98:59:40:5c:59:ac:
01:d2:82:82:9d:e6:5e:c0:1f:99:54:57:95:da:48:0a:c2:32:
0c:12:16:93:7a:2f:b3:23:c5:9f:84:7f:5b:86:3a:41:b9:f1:
2e:a0:77:ab:6b:89:db:21:c9:4d:08:41:72:b4:09:84:7e:15:
c6:3c:5b:ad:5f:b8:cc:5c:e4:98:00:fa:28:fb:ad:a7:2b:82:
94:4a:ab:e3:5c:da:66:18:bc:c0:86:62:a7:7f:82:ca:a4:b5:
33:f5:7d:18:7d:43:68:c1:b5:5c:de:70:4f:39:60:c5:ab:ab:
c1:42:31:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqeuDGbTZgCQefgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzlkY2VkNTktYmY4Yy00YTY4LWE5YjctOWVmNTg0NWM5NzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp8unPUoxHUbopLEx+UZBhFxhWpj+HqnxSq4
3R59ZU4Xl79bhGDZ0nGDeObbSxxSgJbD7+cAa4xQsN6xWycd3opE9UAekE3wLC2f
0DuzFV0TpgTjtLLdGUGW0IvHkL+oJYjTWgY0BN+1yph6kC527msh5txI53znk8iy
Db47ddkrlU+I4aJu9vVzMGXOEHm2y7BM9bj460opwB59r/a06bNojhrZqm7fO52G
G2S/IwyxFMzDbu9Zh5PVcbismI6t/KcLabY4nJIE3PJ6fOHqjn1fcMMuLGIWYmwB
qtL4UKrwrzr62FVKXrgvSJTD4+R7CrDb5ZSEsm65vny+0GtYiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGM0R8PSoXjCaFf0rKFybjDsWbPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGUxM2Y1ZGMtZTdjOS0z
MGJjLTg4ZWUtOTcwMTBhM2JjYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5wwMno3xhG8jJPkgszGJOgCsY0g9KlKr4Fj7jR8/7kGBGY/A48xE2V
CjYfQLULdJjKuQa68mom6qaDTTRQCDgXA8KR4fWvgqxDaJ2ZoXSeyIWho2CUiH3j
hIEil2StBrTspQ2bHtYV/GM8kPnPsq2flLehq8H/53VIZCYrRcnwLOt6DD5uShIe
MphZQFxZrAHSgoKd5l7AH5lUV5XaSArCMgwSFpN6L7MjxZ+Ef1uGOkG58S6gd6tr
idshyU0IQXK0CYR+FcY8W61fuMxc5JgA+ij7racrgpRKq+Nc2mYYvMCGYqd/gsqk
tTP1fRh9Q2jBtVzecE85YMWrq8FCMXU=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org