Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5fb341b-d403-316f-bf53-a1cb744c763d.roa
File: f5fb341b-d403-316f-bf53-a1cb744c763d.roa (raw, json)
Hash identifier: vI05kzIIilFLuK0bQo3lTqet8lYFfVjurFLDtyZg690=
Subject key identifier: BA:D1:F9:3B:FB:DA:6A:AF:91:99:91:AD:53:30:CD:86:98:FB:91:2E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A1E0C9D175D34FFBBB08F60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5fb341b-d403-316f-bf53-a1cb744c763d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:0c:9d:17:5d:34:ff:bb:b0:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=52648919-8abd-4cc7-8922-b6c2c0719fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:5b:78:19:44:ad:68:af:db:33:f4:62:d5:
7b:ce:cc:59:36:26:7e:02:f3:3b:a1:e6:ed:8a:73:
bd:9a:85:96:28:60:bc:a7:e8:71:0b:71:87:44:39:
38:84:48:05:82:b6:18:5d:f5:d2:99:79:cd:5e:51:
c4:90:a4:a1:94:13:b4:ef:24:2e:39:41:a1:1f:93:
aa:46:9b:a8:b0:28:23:d6:40:ed:bc:88:05:73:89:
a8:d4:b3:fe:7c:e0:e4:d6:c4:8c:5e:9d:13:f3:e6:
8b:78:e3:b0:3e:36:2c:c5:42:93:3f:32:8e:9f:08:
b1:c7:2a:8f:10:51:7b:5e:23:34:73:79:de:79:35:
45:d0:78:b7:42:c6:49:45:e1:7b:41:5d:9d:de:2a:
37:36:0e:85:02:a6:cf:a3:e6:65:3e:f2:32:9a:3b:
23:3e:2e:fc:e3:1f:3c:40:f1:7a:6a:01:1c:f0:ad:
a7:d3:ba:e8:5b:4e:71:c3:98:a7:34:77:c4:ae:56:
d8:85:6e:3a:75:35:05:de:d5:8b:76:03:cc:45:47:
2a:b9:6f:c1:c1:43:47:d4:cf:12:92:c6:bb:da:75:
81:57:4e:7b:07:8e:ab:c4:fb:e9:85:6d:48:7d:97:
5b:03:9c:a7:66:ea:e2:c5:b6:36:95:3f:fd:76:60:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:F9:3B:FB:DA:6A:AF:91:99:91:AD:53:30:CD:86:98:FB:91:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5fb341b-d403-316f-bf53-a1cb744c763d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c4:61:df:8c:28:26:7a:31:8a:67:77:fb:45:d1:77:7c:c6:
f6:21:3f:c5:f0:65:fe:23:98:d9:4f:8a:7d:35:67:dc:be:32:
43:6d:4b:a9:3d:00:3d:b6:cf:50:a6:cc:1f:b2:22:2b:74:f0:
01:42:22:80:8e:db:14:a1:bc:31:c3:bb:2a:63:6f:5b:f7:62:
1d:de:5d:b3:ba:5a:e5:0e:3d:19:a4:47:a7:9c:ed:5d:ad:ed:
41:c4:14:e9:17:21:a4:a3:48:d1:19:d3:ad:4d:90:de:f9:fd:
c9:73:84:f0:76:1a:ed:04:8c:0b:6d:86:06:6c:d2:ff:88:54:
e3:a8:52:39:93:34:14:5c:84:66:ba:b7:77:a6:d4:14:58:55:
97:9f:a8:96:56:c7:10:9a:1c:a1:cd:1e:15:d5:7a:6c:d7:33:
b9:3e:f8:d9:a3:7c:5f:f3:75:39:ff:8a:b2:ed:60:d2:8c:a7:
cd:fa:3b:0b:7f:ce:15:a5:dc:fc:6a:80:e5:b3:bb:15:1e:04:
87:00:1a:c8:f4:ed:48:3c:85:d2:10:c1:cf:38:b1:64:45:ca:
a8:ff:c4:e4:15:cc:8f:62:55:bc:fa:02:45:f6:64:98:2b:3e:
54:98:77:b2:0c:e0:68:aa:ce:c3:e3:a5:3f:9e:35:2d:f4:72:
18:a9:8e:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKHgydF100/7uwj2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTI2NDg5MTktOGFiZC00Y2M3LTg5MjItYjZjMmMwNzE5ZmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbNbeBlErWiv2zP0YtV7zsxZNiZ+AvM7oebt
inO9moWWKGC8p+hxC3GHRDk4hEgFgrYYXfXSmXnNXlHEkKShlBO07yQuOUGhH5Oq
RpuosCgj1kDtvIgFc4mo1LP+fODk1sSMXp0T8+aLeOOwPjYsxUKTPzKOnwixxyqP
EFF7XiM0c3neeTVF0Hi3QsZJReF7QV2d3io3Ng6FAqbPo+ZlPvIymjsjPi784x88
QPF6agEc8K2n07roW05xw5inNHfErlbYhW46dTUF3tWLdgPMRUcquW/BwUNH1M8S
ksa72nWBV057B46rxPvphW1IfZdbA5ynZurixbY2lT/9dmCbAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrR+Tv72mqvkZmRrVMwzYaY+5EuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjVmYjM0MWItZDQwMy0z
MTZmLWJmNTMtYTFjYjc0NGM3NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATEYd+MKCZ6MYpnd/tF0Xd8xvYhP8XwZf4jmNlPin01Z9y+MkNtS6k9
AD22z1CmzB+yIit08AFCIoCO2xShvDHDuypjb1v3Yh3eXbO6WuUOPRmkR6ec7V2t
7UHEFOkXIaSjSNEZ061NkN75/clzhPB2Gu0EjAtthgZs0v+IVOOoUjmTNBRchGa6
t3em1BRYVZefqJZWxxCaHKHNHhXVemzXM7k++NmjfF/zdTn/irLtYNKMp836Owt/
zhWl3PxqgOWzuxUeBIcAGsj07Ug8hdIQwc84sWRFyqj/xOQVzI9iVbz6AkX2ZJgr
PlSYd7IM4GiqzsPjpT+eNS30chipjkY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:12:54 2025 by rpki-client