Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6eb23ef-77a9-3589-aafc-ac34709b597e.roa
File: d6eb23ef-77a9-3589-aafc-ac34709b597e.roa (raw, json)
Hash identifier: xGJJIX9zBMoiXjzDor+FOe5Z51ARxWMu9naehKek02E=
Subject key identifier: 31:F6:98:62:2F:AB:FB:0F:B4:1E:71:DE:EE:03:C6:0D:C2:C4:57:C0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA79EDAB394D354E0D1164580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6eb23ef-77a9-3589-aafc-ac34709b597e.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:9e:da:b3:94:d3:54:e0:d1:16:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=65fc9e5f-9df7-4e1a-ad74-e776f52b56d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:0e:a1:ef:61:14:23:bc:08:b4:2d:be:4a:
83:69:f1:48:58:93:2e:69:56:26:f6:03:49:c4:a2:
c3:1e:9a:13:f0:5c:0c:d5:13:62:c2:9f:a2:11:79:
73:63:7a:3d:a1:2f:d0:cb:77:e4:40:20:fc:cd:ba:
11:40:71:d5:4b:a3:97:8d:57:6d:87:35:19:91:f7:
3e:72:4f:23:c7:6a:82:fc:5a:5b:60:55:68:4b:fa:
74:b8:d7:96:bc:3d:cc:9f:6e:ae:c4:fa:90:97:6b:
39:ba:23:c8:2f:b0:7f:5d:9b:00:88:d2:59:69:26:
87:20:3e:29:32:2a:55:ec:12:98:ab:ad:88:35:72:
69:d2:fc:8d:e2:26:2e:1d:d6:b8:13:d7:b0:b7:af:
e3:e1:c5:db:cf:b9:c3:e7:68:47:c9:cb:96:37:44:
91:e2:db:da:80:80:b4:a3:aa:56:c6:39:78:4d:8f:
ba:73:d1:1d:93:eb:15:54:4d:0d:4d:6a:f7:bf:ad:
07:bb:88:25:73:c3:fb:5a:88:e4:db:15:ee:47:ad:
1b:32:b3:22:ac:81:24:d0:66:27:b0:2c:7e:b5:cb:
89:1b:8a:1b:0d:33:b2:a5:03:ba:5e:42:3e:6c:d3:
26:d7:3c:23:b3:c3:4a:bb:8a:fa:2f:7f:d6:0e:d1:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:98:62:2F:AB:FB:0F:B4:1E:71:DE:EE:03:C6:0D:C2:C4:57:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6eb23ef-77a9-3589-aafc-ac34709b597e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:dc:c0:8a:7d:33:2f:8b:49:40:44:7d:b6:3f:39:4d:0c:77:
a2:62:df:f8:60:11:84:95:6f:21:58:da:04:ad:bf:98:68:63:
30:cd:e2:58:a9:94:d9:2a:65:bf:90:2f:e8:ad:e1:bb:60:34:
c6:d0:ce:42:be:4c:5c:1d:1d:b3:da:89:c6:3b:b2:53:c3:a9:
3b:a7:57:7a:d1:1a:30:ab:be:72:11:b3:79:33:f4:4d:f1:1e:
35:a1:cc:a2:c7:87:9f:d5:90:03:cd:fd:c2:88:79:a0:aa:0f:
8d:10:d6:4a:4f:5f:ed:34:eb:b1:fc:b4:50:8f:26:a5:bb:44:
0a:6b:e5:95:0b:8c:29:47:40:6d:d8:c6:06:7c:33:67:9a:fe:
2a:96:4c:81:33:dc:45:f2:67:de:8a:0c:62:e6:ef:1a:ea:ce:
ed:5f:85:6b:68:67:b1:29:f6:ee:f3:ac:f6:25:4e:b3:8c:fd:
8f:1c:9d:3c:32:3f:83:bb:23:d0:04:7b:81:69:97:a8:e7:44:
28:58:19:60:a5:a6:75:0f:06:7b:1e:90:ea:85:68:20:07:24:
81:ae:9a:8b:bd:6e:89:81:39:88:45:f1:c2:4d:3a:72:38:30:
4c:a1:09:be:c1:8e:dd:77:63:26:b9:ef:3a:fa:57:c4:8d:25:
ea:77:91:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnntqzlNNU4NEWRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjVmYzllNWYtOWRmNy00ZTFhLWFkNzQtZTc3NmY1MmI1NmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVsOoe9hFCO8CLQtvkqDafFIWJMuaVYm9gNJ
xKLDHpoT8FwM1RNiwp+iEXlzY3o9oS/Qy3fkQCD8zboRQHHVS6OXjVdthzUZkfc+
ck8jx2qC/FpbYFVoS/p0uNeWvD3Mn26uxPqQl2s5uiPIL7B/XZsAiNJZaSaHID4p
MipV7BKYq62INXJp0vyN4iYuHda4E9ewt6/j4cXbz7nD52hHycuWN0SR4tvagIC0
o6pWxjl4TY+6c9Edk+sVVE0NTWr3v60Hu4glc8P7Wojk2xXuR60bMrMirIEk0GYn
sCx+tcuJG4obDTOypQO6XkI+bNMm1zwjs8NKu4r6L3/WDtGSrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDH2mGIvq/sPtB5x3u4Dxg3CxFfAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDZlYjIzZWYtNzdhOS0z
NTg5LWFhZmMtYWMzNDcwOWI1OTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfcwIp9My+LSUBEfbY/OU0Md6Ji3/hgEYSVbyFY2gStv5hoYzDN4lip
lNkqZb+QL+it4btgNMbQzkK+TFwdHbPaicY7slPDqTunV3rRGjCrvnIRs3kz9E3x
HjWhzKLHh5/VkAPN/cKIeaCqD40Q1kpPX+0067H8tFCPJqW7RApr5ZULjClHQG3Y
xgZ8M2ea/iqWTIEz3EXyZ96KDGLm7xrqzu1fhWtoZ7Ep9u7zrPYlTrOM/Y8cnTwy
P4O7I9AEe4Fpl6jnRChYGWClpnUPBnsekOqFaCAHJIGumou9bomBOYhF8cJNOnI4
MEyhCb7Bjt13Yya57zr6V8SNJep3kRQ=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:37 2023 by rpki-client on console-fra.rpki-client.org