Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/470d85c6-4f4b-3ac9-9164-13fb2b144a5e.roa
File: 470d85c6-4f4b-3ac9-9164-13fb2b144a5e.roa (raw, json)
Hash identifier: BeU2q+pJGDw7ZlXVfhZczgI1/z8NVDzURStFXN91WOI=
Subject key identifier: A3:82:D2:7A:4D:FF:74:FA:63:F1:DC:18:FD:26:08:91:C2:DE:9A:0A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842B263DD981E8BCC842DE74CC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/470d85c6-4f4b-3ac9-9164-13fb2b144a5e.roa
Signing time: Fri 28 Jul 2023 13:00:19 +0000
ROA not before: Fri 28 Jul 2023 13:00:19 +0000
ROA not after: Thu 26 Oct 2023 13:00:19 +0000
asID: 35913
IP address blocks: 104.243.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b2:63:dd:98:1e:8b:cc:84:2d:e7:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 28 13:00:19 2023 GMT
Not After : Oct 26 13:00:19 2023 GMT
Subject: CN=c15dba87-7750-4f01-8752-93ffcab450b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:34:74:77:2a:24:2c:8e:67:b1:90:ed:2a:
4c:86:d5:bb:2c:5c:7f:de:80:76:63:24:13:39:9d:
f7:18:45:50:f3:6e:39:58:3d:22:8a:d9:ad:94:91:
d6:4d:80:81:b5:2c:8a:e6:84:0b:4b:89:6b:21:31:
89:93:62:a8:4a:86:68:bd:7b:e4:40:5e:45:8d:0a:
22:3a:f6:64:e8:e3:fe:cc:fe:b1:97:90:0d:29:eb:
18:8c:fc:6f:8c:36:a2:24:02:f6:91:1d:6d:8d:b9:
e5:63:8f:81:f6:a4:8a:62:d1:c5:df:04:7e:9b:8d:
e7:42:a5:dc:36:2e:84:9c:23:e4:25:b2:f1:f6:53:
7d:e3:ed:6a:51:89:76:05:ea:f2:b7:93:e2:72:93:
36:a5:ca:e8:04:e6:49:76:23:04:bf:fa:19:0a:82:
51:5b:8a:d0:4c:c6:4a:c1:a1:91:9c:ef:52:dc:a6:
b7:6f:c4:80:c5:28:4e:95:e8:dd:7d:45:ee:c7:25:
36:9d:ef:ca:10:9e:52:c5:4e:a6:ee:0f:fa:17:e9:
d5:5a:f8:07:4b:08:87:6c:d6:7f:1a:97:4f:7e:54:
43:9b:98:e1:7e:ff:f6:27:4e:4d:32:c9:15:7b:a7:
ec:04:b8:48:a7:43:f8:57:32:dc:49:f5:f1:55:dd:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:D2:7A:4D:FF:74:FA:63:F1:DC:18:FD:26:08:91:C2:DE:9A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/470d85c6-4f4b-3ac9-9164-13fb2b144a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.243.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:22:8b:52:2f:6a:36:b0:2c:ae:27:6d:ce:4b:c7:67:14:85:
a6:a4:82:f6:88:a4:13:b4:04:91:ca:50:bd:cf:ef:0e:72:9b:
0b:f7:6a:e4:a4:8b:d5:fc:98:00:15:e9:41:31:76:63:f5:68:
04:51:24:4b:f9:ba:e1:18:d4:45:d6:74:52:0e:b9:6f:0a:43:
46:da:e6:06:b8:1b:4b:bf:92:5c:1c:d1:5e:12:35:84:a6:cf:
cc:0e:ac:11:04:b4:17:61:67:6a:45:35:45:4e:58:55:d8:cd:
39:1a:93:e9:32:a6:03:13:8a:b3:0a:97:24:8c:d2:88:29:0a:
ab:68:2b:6b:b5:db:7b:c2:c2:82:3a:6b:22:8f:06:0d:2f:e1:
64:77:45:68:60:d7:84:20:10:4c:74:d0:c1:fa:12:af:11:32:
8d:9b:8b:ff:ba:ca:52:f9:36:74:93:55:e6:0d:67:2a:72:8c:
b4:ea:03:24:58:48:6e:6c:34:03:e8:2c:17:f3:6d:42:ff:c1:
4d:b6:06:f3:81:a1:f4:80:b0:84:6a:bd:00:0d:b5:4a:df:f7:
61:60:c7:ff:f6:b4:45:f1:f9:08:71:13:9d:b9:ae:69:b5:31:
40:75:b9:2a:8c:c6:02:3a:b3:4a:ac:3d:76:73:8f:93:8a:2e:
b9:52:24:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKyY92YHovMhC3nTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDcyODEzMDAxOVoXDTIzMTAyNjEzMDAxOVowLzEtMCsGA1UEAxMk
YzE1ZGJhODctNzc1MC00ZjAxLTg3NTItOTNmZmNhYjQ1MGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpM0dHcqJCyOZ7GQ7SpMhtW7LFx/3oB2YyQT
OZ33GEVQ8245WD0iitmtlJHWTYCBtSyK5oQLS4lrITGJk2KoSoZovXvkQF5FjQoi
OvZk6OP+zP6xl5ANKesYjPxvjDaiJAL2kR1tjbnlY4+B9qSKYtHF3wR+m43nQqXc
Ni6EnCPkJbLx9lN94+1qUYl2Beryt5PicpM2pcroBOZJdiMEv/oZCoJRW4rQTMZK
waGRnO9S3Ka3b8SAxShOlejdfUXuxyU2ne/KEJ5SxU6m7g/6F+nVWvgHSwiHbNZ/
GpdPflRDm5jhfv/2J05NMskVe6fsBLhIp0P4VzLcSfXxVd37PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOC0npN/3T6Y/HcGP0mCJHC3poKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDcwZDg1YzYtNGY0Yi0z
YWM5LTkxNjQtMTNmYjJiMTQ0YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQii1IvajawLK4nbc5Lx2cUhaakgvaIpBO0BJHKUL3P7w5ymwv3auSk
i9X8mAAV6UExdmP1aARRJEv5uuEY1EXWdFIOuW8KQ0ba5ga4G0u/klwc0V4SNYSm
z8wOrBEEtBdhZ2pFNUVOWFXYzTkak+kypgMTirMKlySM0ogpCqtoK2u123vCwoI6
ayKPBg0v4WR3RWhg14QgEEx00MH6Eq8RMo2bi/+6ylL5NnSTVeYNZypyjLTqAyRY
SG5sNAPoLBfzbUL/wU22BvOBofSAsIRqvQANtUrf92Fgx//2tEXx+QhxE525rmm1
MUB1uSqMxgI6s0qsPXZzj5OKLrlSJGI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org