Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1d8fb00-3926-36e2-aadd-3710996c1734.roa
File: c1d8fb00-3926-36e2-aadd-3710996c1734.roa (raw, json)
Hash identifier: V+WSw2N2/7NNQIOhimcRaoeYqVk0lurltyo5EQH8AVI=
Subject key identifier: B0:A7:62:E6:7D:FC:50:68:60:98:9B:8A:9E:BB:AE:12:2C:0B:C2:19
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5FA2F59EA8F14F61105780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1d8fb00-3926-36e2-aadd-3710996c1734.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.186.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:a2:f5:9e:a8:f1:4f:61:10:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=8db1b075-6465-47a1-83be-2b110e60117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:9e:5e:b4:c3:70:1d:a7:95:87:61:27:19:
c8:89:b2:22:c8:07:b7:bf:09:c4:c6:0c:a2:cc:a8:
f6:41:d8:3b:c9:b9:f4:05:61:9e:f6:33:55:81:44:
17:02:bb:fa:3e:25:75:e7:b0:d2:ee:5f:b4:ff:82:
e6:57:02:ed:c1:15:2d:d0:5e:68:b9:c0:41:ed:a0:
5f:9a:9d:fc:49:80:3f:9c:44:93:87:ec:3f:8a:8d:
42:2b:7d:80:64:fc:6b:a0:9e:97:37:9a:49:3d:e9:
c3:e0:35:aa:2e:50:55:6d:e6:e6:2c:91:ad:0d:74:
e8:69:30:b0:20:bf:70:2e:78:46:48:d5:3a:4f:1d:
d0:22:3c:83:6e:ac:c5:21:67:2c:9a:38:76:2e:9a:
53:3a:af:24:9e:4d:98:5b:49:de:21:d8:ce:e6:67:
83:20:4a:26:a1:5a:5a:d4:18:f1:ae:90:6b:ea:8f:
dc:6b:f0:af:1c:b2:a2:3f:4d:d3:cb:9e:9e:5a:b6:
a0:73:24:b7:04:16:0b:a2:8a:dc:c9:9f:bf:8c:47:
a5:9d:6e:56:11:10:e7:2d:b6:41:2d:44:af:12:f5:
2a:3a:a5:a6:49:89:f6:07:5d:ef:5b:e7:f3:a0:89:
48:67:e6:73:11:7f:28:01:9f:a3:92:d8:ba:cf:c4:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:62:E6:7D:FC:50:68:60:98:9B:8A:9E:BB:AE:12:2C:0B:C2:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1d8fb00-3926-36e2-aadd-3710996c1734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:e3:12:15:e2:c7:88:84:ea:87:2e:02:1f:a3:b7:1b:69:5f:
9a:9f:93:05:b5:a7:5c:62:ea:1b:cf:33:0e:e8:30:03:8b:73:
7e:6f:22:c2:6c:53:82:7e:9c:b9:28:b4:46:93:a2:1f:27:fa:
44:c3:4e:64:43:d6:86:ec:23:ba:be:21:d2:81:ae:15:dc:1a:
51:b3:83:7a:24:e8:1d:6d:8a:88:b4:47:3f:92:17:ad:19:10:
a2:a3:00:c6:0a:bc:91:98:89:ea:5a:6e:e4:95:92:58:2a:02:
c1:23:20:c9:69:72:45:de:f1:8e:bd:7e:01:50:e9:e4:b1:10:
52:1e:a1:cd:69:dd:02:a0:35:16:9a:95:9c:08:76:db:8a:ee:
26:04:e5:fa:95:c2:43:65:91:22:93:01:fa:df:97:b0:ba:db:
12:e0:f1:60:27:c3:fc:ee:ce:7b:d1:95:83:6e:4f:d0:58:42:
f2:35:84:26:f6:87:96:39:56:47:09:0c:e9:b4:94:ba:97:f4:
0b:08:57:9c:6a:dc:80:ae:ef:33:24:ae:26:2d:b3:ce:c0:03:
78:09:27:47:3b:5f:ff:d3:7c:92:34:45:96:ef:37:e0:12:3a:
f0:39:65:30:6d:ec:c9:66:62:44:3c:4b:c7:c4:c6:1c:fc:b7:
9a:db:f5:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwqX6L1nqjxT2EQV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMTIwNjA1MDAwMFoXDTI0MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
OGRiMWIwNzUtNjQ2NS00N2ExLTgzYmUtMmIxMTBlNjAxMTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCmeXrTDcB2nlYdhJxnIibIiyAe3vwnExgyi
zKj2Qdg7ybn0BWGe9jNVgUQXArv6PiV157DS7l+0/4LmVwLtwRUt0F5oucBB7aBf
mp38SYA/nESTh+w/io1CK32AZPxroJ6XN5pJPenD4DWqLlBVbebmLJGtDXToaTCw
IL9wLnhGSNU6Tx3QIjyDbqzFIWcsmjh2LppTOq8knk2YW0neIdjO5meDIEomoVpa
1BjxrpBr6o/ca/CvHLKiP03Ty56eWragcyS3BBYLoorcyZ+/jEelnW5WERDnLbZB
LUSvEvUqOqWmSYn2B13vW+fzoIlIZ+ZzEX8oAZ+jkti6z8TEXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCnYuZ9/FBoYJibip67rhIsC8IZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzFkOGZiMDAtMzkyNi0z
NmUyLWFhZGQtMzcxMDk5NmMxNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIa6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPjEhXix4iE6ocuAh+jtxtpX5qfkwW1p1xi6hvPMw7oMAOLc35vIsJs
U4J+nLkotEaToh8n+kTDTmRD1obsI7q+IdKBrhXcGlGzg3ok6B1tioi0Rz+SF60Z
EKKjAMYKvJGYiepabuSVklgqAsEjIMlpckXe8Y69fgFQ6eSxEFIeoc1p3QKgNRaa
lZwIdtuK7iYE5fqVwkNlkSKTAfrfl7C62xLg8WAnw/zuznvRlYNuT9BYQvI1hCb2
h5Y5VkcJDOm0lLqX9AsIV5xq3ICu7zMkriYts87AA3gJJ0c7X//TfJI0RZbvN+AS
OvA5ZTBt7MlmYkQ8S8fExhz8t5rb9fg=
-----END CERTIFICATE-----
Generated at Sat Mar 9 05:38:57 2024 by rpki-client on console-fra.rpki-client.org