Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2e4e9f2-8a39-3729-a637-8449040ecfb2.roa
File: a2e4e9f2-8a39-3729-a637-8449040ecfb2.roa (raw, json)
Hash identifier: w3va6Vuq6fLx7q7RnPWxvNXGh+TwYGi0WHD8ZnBzz3c=
Subject key identifier: FB:B2:F4:1B:6A:09:31:B5:EF:A6:08:E3:E4:81:4D:CF:37:96:AF:B0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5FA2EF1EE6D759E0062E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2e4e9f2-8a39-3729-a637-8449040ecfb2.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.128.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:a2:ef:1e:e6:d7:59:e0:06:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=03374c09-6dc8-48e6-9fcc-9e774c1a3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:bb:74:b5:45:ee:98:08:45:98:cd:f8:e7:
91:eb:0b:bb:35:f0:50:94:e1:33:03:d7:dc:23:39:
c8:aa:28:a1:82:3c:61:03:a7:83:d5:03:6c:57:25:
e9:c4:f7:eb:46:ce:10:58:fa:c3:d6:e3:d4:08:44:
c7:04:85:fc:49:ff:89:7c:a1:3e:de:20:5d:4a:98:
87:b0:90:d2:91:a4:67:6f:b5:fa:5a:a1:82:30:8e:
3d:e7:89:3f:80:c0:b1:86:76:30:08:de:0f:8f:63:
5d:f3:aa:e3:4d:f2:8d:4e:5f:50:0e:30:4c:c6:5d:
e9:8b:8e:52:35:9b:21:12:e7:86:f7:1e:40:3e:14:
cf:07:ad:56:83:21:18:a6:fc:59:6d:cc:1e:05:cd:
de:97:5e:05:66:d6:35:09:b6:14:dd:09:ed:95:8a:
5b:14:97:33:40:13:2d:cc:6b:4b:15:f3:f5:18:39:
9c:4d:c3:a8:80:9d:a0:0c:dc:54:87:ab:77:26:90:
bb:de:0b:76:7d:eb:93:60:33:91:2a:82:46:ce:1b:
61:6e:16:5b:85:07:88:da:15:d4:7f:15:6a:7a:c5:
e3:57:8c:0e:74:0f:94:c7:6b:c7:b1:47:33:bd:aa:
8c:c1:85:d1:5a:bc:4d:65:f8:a2:f1:56:bc:43:cc:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:F4:1B:6A:09:31:B5:EF:A6:08:E3:E4:81:4D:CF:37:96:AF:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a2e4e9f2-8a39-3729-a637-8449040ecfb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e1:e9:d5:b1:b1:a1:9f:dd:5b:e4:5c:f5:95:a2:f0:a9:bc:
3c:1c:f9:82:62:ec:56:61:05:c3:77:a8:76:bb:93:18:e7:3e:
e5:94:59:a2:e0:87:4b:25:78:d1:9d:e3:78:ce:f2:a9:36:80:
72:ca:7e:64:25:8e:b5:59:8d:67:f9:ed:e6:75:fc:63:6f:dc:
1b:40:df:56:88:1f:bd:a3:79:97:9a:49:fe:dd:0a:29:a7:75:
b0:20:c7:63:c5:15:f7:4e:81:e1:96:0a:b3:49:b2:e6:9e:19:
1a:76:d9:22:7d:16:96:57:73:c9:fc:b9:d5:c0:00:3e:ac:d2:
bc:86:14:fe:14:98:34:83:4a:c3:40:c1:e6:9b:f3:e6:6f:2e:
81:94:d0:50:00:8d:49:a2:20:ea:dd:d0:67:29:8b:5f:e0:06:
0c:a4:bc:0e:50:e5:24:64:84:a4:09:07:4a:e8:eb:fa:0c:de:
14:e5:7e:cd:56:b2:89:bb:ab:9d:4d:95:cc:5a:51:8b:22:00:
fe:3f:d9:56:0d:bb:17:e7:fe:c7:0b:65:6c:7f:9c:ee:1a:8b:
c9:26:5f:f7:ac:b5:65:9c:8d:e2:43:5c:58:f1:cb:a3:a4:3a:
5f:26:16:26:1a:aa:62:62:72:33:d8:ce:a4:b3:e2:04:2f:0a:
b7:30:14:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwqX6LvHubXWeAGLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMTIwNjA1MDAwMFoXDTI0MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDMzNzRjMDktNmRjOC00OGU2LTlmY2MtOWU3NzRjMWEzODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOm7dLVF7pgIRZjN+OeR6wu7NfBQlOEzA9fc
IznIqiihgjxhA6eD1QNsVyXpxPfrRs4QWPrD1uPUCETHBIX8Sf+JfKE+3iBdSpiH
sJDSkaRnb7X6WqGCMI4954k/gMCxhnYwCN4Pj2Nd86rjTfKNTl9QDjBMxl3pi45S
NZshEueG9x5APhTPB61WgyEYpvxZbcweBc3el14FZtY1CbYU3QntlYpbFJczQBMt
zGtLFfP1GDmcTcOogJ2gDNxUh6t3JpC73gt2feuTYDORKoJGzhthbhZbhQeI2hXU
fxVqesXjV4wOdA+Ux2vHsUczvaqMwYXRWrxNZfii8Va8Q8xqJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuy9BtqCTG176YI4+SBTc83lq+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTJlNGU5ZjItOGEzOS0z
NzI5LWE2MzctODQ0OTA0MGVjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/h6dWxsaGf3VvkXPWVovCpvDwc+YJi7FZhBcN3qHa7kxjnPuWUWaLg
h0sleNGd43jO8qk2gHLKfmQljrVZjWf57eZ1/GNv3BtA31aIH72jeZeaSf7dCimn
dbAgx2PFFfdOgeGWCrNJsuaeGRp22SJ9FpZXc8n8udXAAD6s0ryGFP4UmDSDSsNA
weab8+ZvLoGU0FAAjUmiIOrd0Gcpi1/gBgykvA5Q5SRkhKQJB0ro6/oM3hTlfs1W
som7q51NlcxaUYsiAP4/2VYNuxfn/scLZWx/nO4ai8kmX/estWWcjeJDXFjxy6Ok
Ol8mFiYaqmJicjPYzqSz4gQvCrcwFMY=
-----END CERTIFICATE-----
Generated at Sat Mar 9 05:38:57 2024 by rpki-client on console-fra.rpki-client.org