Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4e2e4a3-3d47-3536-8c42-ed7ac3a64372.roa
File: b4e2e4a3-3d47-3536-8c42-ed7ac3a64372.roa (raw, json)
Hash identifier: naYQLO75NqDwFJEolKs6OPGFvxfGpgYsfJUTkM+cqGA=
Subject key identifier: 87:B5:52:B8:8D:D5:15:98:5D:10:9F:50:6A:C0:F2:50:0F:EB:84:4F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A6046354117557DCDE1880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4e2e4a3-3d47-3536-8c42-ed7ac3a64372.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a6:04:63:54:11:75:57:dc:de:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d9460baf-8d0f-4bd4-b104-ef1a6f9d2193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:56:c8:ee:9d:0e:04:59:2c:60:36:04:48:
0a:d2:e3:f7:d6:cd:fd:8c:38:29:c3:43:69:02:cc:
ee:08:d8:b4:13:03:5c:93:c0:af:5e:e7:68:2c:c0:
0c:38:62:05:69:bd:ae:be:ee:64:16:90:8b:ac:09:
96:1d:06:78:b9:0a:ff:f4:be:7f:95:6c:4e:39:7d:
83:e2:ff:48:8b:9f:11:40:60:3b:5f:c3:a3:47:69:
a9:d5:db:24:55:71:f4:71:e9:0f:7f:c0:8f:09:70:
27:3a:53:94:84:79:4a:19:23:ec:6e:50:a7:b7:85:
06:14:e4:b5:e6:c1:6c:77:ac:3b:74:f0:a2:08:e2:
aa:24:bf:fc:0e:83:86:28:f8:60:f6:c5:a6:bc:75:
78:56:75:c3:4a:ad:e4:41:64:8b:cb:d4:18:8f:6b:
2b:c4:cd:f5:cb:bb:b7:35:49:7f:16:3a:a5:57:10:
eb:b6:15:77:12:b9:5a:ec:f0:16:e1:cd:0d:08:76:
09:0e:73:ba:aa:07:39:53:05:69:8b:f8:89:d2:8a:
95:f2:11:99:65:d8:20:24:f2:49:96:d2:84:af:24:
bd:e1:09:63:fb:ff:12:c5:0c:92:1d:6e:55:8f:e5:
c9:2b:83:05:12:0a:81:44:96:dc:5f:5d:63:3f:7d:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:52:B8:8D:D5:15:98:5D:10:9F:50:6A:C0:F2:50:0F:EB:84:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4e2e4a3-3d47-3536-8c42-ed7ac3a64372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:c1:da:a8:23:7f:77:1a:81:a7:2b:ba:82:ab:19:2d:4b:86:
67:c5:3c:52:40:0d:e3:ac:68:f4:c3:39:4a:c2:be:7d:e4:a2:
90:45:f8:9c:9b:1e:c6:0c:1c:15:88:d1:9d:92:8c:c0:f0:e2:
9d:43:b6:a4:34:58:6f:97:33:1c:4c:19:4e:4d:18:eb:ac:c2:
65:ff:06:b0:69:4f:cd:f3:1e:df:41:be:6c:17:38:a3:0e:7e:
e5:3a:54:df:65:80:38:55:01:4f:59:a5:2f:e2:23:9f:11:36:
69:4b:72:90:d7:2a:03:86:ed:3a:03:a6:24:74:03:81:a8:d7:
d6:89:c0:95:f9:37:15:67:6c:b7:ce:f6:d6:34:f4:4d:a2:54:
68:6d:e3:df:59:df:ff:18:1a:92:b3:16:b5:21:9b:2c:f2:6f:
63:9b:63:1a:e0:22:9a:88:b5:be:e8:30:e5:25:0a:0e:2b:ab:
71:e8:42:13:21:d8:fb:5c:2f:01:13:cd:55:21:b9:d1:ad:9f:
42:9d:e6:d8:ba:0e:f5:5a:73:4a:93:1e:b0:ad:ea:ec:7d:fd:
70:e4:cb:41:80:a4:ea:56:34:38:2e:54:96:fb:76:58:05:37:
e6:98:c1:48:94:6f:2d:20:a7:82:d4:22:69:cf:69:fe:bc:c7:
63:f7:fe:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnpgRjVBF1V9zeGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDk0NjBiYWYtOGQwZi00YmQ0LWIxMDQtZWYxYTZmOWQyMTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmytWyO6dDgRZLGA2BEgK0uP31s39jDgpw0Np
AszuCNi0EwNck8CvXudoLMAMOGIFab2uvu5kFpCLrAmWHQZ4uQr/9L5/lWxOOX2D
4v9Ii58RQGA7X8OjR2mp1dskVXH0cekPf8CPCXAnOlOUhHlKGSPsblCnt4UGFOS1
5sFsd6w7dPCiCOKqJL/8DoOGKPhg9sWmvHV4VnXDSq3kQWSLy9QYj2srxM31y7u3
NUl/FjqlVxDrthV3Erla7PAW4c0NCHYJDnO6qgc5UwVpi/iJ0oqV8hGZZdggJPJJ
ltKEryS94Qlj+/8SxQySHW5Vj+XJK4MFEgqBRJbcX11jP32RjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIe1UriN1RWYXRCfUGrA8lAP64RPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjRlMmU0YTMtM2Q0Ny0z
NTM2LThjNDItZWQ3YWMzYTY0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIScMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrB2qgjf3cagacruoKrGS1LhmfFPFJADeOsaPTDOUrCvn3kopBF+Jyb
HsYMHBWI0Z2SjMDw4p1DtqQ0WG+XMxxMGU5NGOuswmX/BrBpT83zHt9BvmwXOKMO
fuU6VN9lgDhVAU9ZpS/iI58RNmlLcpDXKgOG7ToDpiR0A4Go19aJwJX5NxVnbLfO
9tY09E2iVGht499Z3/8YGpKzFrUhmyzyb2ObYxrgIpqItb7oMOUlCg4rq3HoQhMh
2PtcLwETzVUhudGtn0Kd5ti6DvVac0qTHrCt6ux9/XDky0GApOpWNDguVJb7dlgF
N+aYwUiUby0gp4LUImnPaf68x2P3/ms=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org