Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/629fc9e9-df0e-3336-8cda-6bae7d0306a7.roa
File: 629fc9e9-df0e-3336-8cda-6bae7d0306a7.roa (raw, json)
Hash identifier: SnpwtyWhJ9/bkDJI9YEZtHXCxKsBwz6fPblXUvzreW8=
Subject key identifier: 52:53:06:D2:5A:1D:2D:B5:1D:20:95:4D:18:6C:17:51:5A:DC:B7:CA
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F43285846A2AC6890AEB89B31DB779900
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/629fc9e9-df0e-3336-8cda-6bae7d0306a7.roa
Signing time: Tue 23 Jul 2024 17:01:21 +0000
ROA not before: Tue 23 Jul 2024 17:01:21 +0000
ROA not after: Mon 21 Oct 2024 17:01:21 +0000
asID: 4922
IP address blocks: 104.244.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a2:ac:68:90:ae:b8:9b:31:db:77:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jul 23 17:01:21 2024 GMT
Not After : Oct 21 17:01:21 2024 GMT
Subject: CN=5db4651f-4310-4a7e-96ca-5c2e8ccae098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:bb:7f:8f:90:16:b6:2f:11:cd:fc:34:90:
a9:cc:ff:5c:32:0b:f4:0d:f9:df:34:9d:fb:00:bc:
5a:7f:74:32:fa:a5:1b:5c:f4:a2:ce:1c:b6:6a:40:
ca:55:31:a7:fb:5d:90:23:9a:e0:fd:7e:91:0e:a8:
8a:a1:2d:9d:1e:18:66:d0:49:af:02:ba:da:40:10:
2b:ae:1d:76:e4:7f:ad:6b:da:fc:ac:12:e5:78:be:
36:38:87:5b:ec:9f:8e:ee:13:0f:f1:86:71:e5:d3:
b0:0d:e9:4d:25:70:f7:cc:84:ba:1d:bc:08:c1:7a:
82:ab:d5:b1:b8:20:61:48:da:be:7e:c4:60:eb:84:
38:a9:43:9c:98:15:60:50:39:ec:a1:11:2a:f2:99:
1e:af:b9:c4:8d:ac:f4:4a:44:fd:32:02:88:6f:88:
89:ea:1b:5f:20:ca:bb:d7:f7:a2:89:e6:5b:1e:eb:
e6:cc:f7:f5:9c:bb:73:41:73:3d:43:f9:9c:cd:a1:
a4:df:b2:37:4a:5f:d3:ca:be:ee:32:d0:f5:62:e3:
69:95:2c:d9:f3:95:cd:d1:03:25:ca:ac:a5:66:5e:
38:a2:46:06:fa:eb:c7:23:cf:32:64:e8:8c:b9:a0:
bf:03:57:4c:50:bf:db:de:65:2d:b3:f0:af:f8:89:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:06:D2:5A:1D:2D:B5:1D:20:95:4D:18:6C:17:51:5A:DC:B7:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/629fc9e9-df0e-3336-8cda-6bae7d0306a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
104.244.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:71:fb:5f:19:f6:50:aa:a8:30:d1:66:d9:3e:46:03:af:04:
04:8a:d5:58:57:1e:4d:41:77:2b:60:64:7a:ab:83:24:3f:e3:
e9:33:8b:c9:92:ab:b8:5d:84:bc:63:0b:2f:9e:f0:dc:ea:9e:
10:9f:6c:bf:bc:fc:0c:7a:71:5a:cb:13:46:0c:1f:4b:f0:9b:
ba:6b:b3:35:dc:f3:b5:4e:bc:4c:65:66:7c:82:75:20:0a:28:
18:7d:0d:b0:56:fa:fe:8e:57:7d:1e:21:f7:e0:10:5b:2f:03:
ad:52:34:88:eb:66:ba:36:19:bd:9e:98:9b:4b:de:a5:cf:d6:
ba:89:e8:e5:d2:13:29:9c:22:25:84:55:ff:53:4a:d6:ef:ea:
96:04:d9:31:bb:d3:2f:6f:2b:44:5b:8b:e0:33:bd:fe:f8:82:
c6:5b:20:d5:e0:8a:c8:f1:47:06:64:80:a4:72:47:bb:c2:eb:
91:b1:ce:48:a0:07:fd:6e:c7:b3:78:ec:f2:94:4b:58:e2:ef:
c0:e7:c8:f6:5d:04:65:7a:24:e8:d4:19:6e:f0:49:a0:97:f7:
2e:d8:cb:f8:25:94:4a:d7:b0:74:8f:bd:df:f5:30:99:d7:f3:
b6:2b:fd:3b:b8:44:a2:1e:48:f9:1f:ca:d7:ff:3b:a9:dd:1d:
36:4e:50:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEairGiQrribMdt3mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI0MDcyMzE3MDEyMVoXDTI0MTAyMTE3MDEyMVowLzEtMCsGA1UEAxMk
NWRiNDY1MWYtNDMxMC00YTdlLTk2Y2EtNWMyZThjY2FlMDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXG7f4+QFrYvEc38NJCpzP9cMgv0DfnfNJ37
ALxaf3Qy+qUbXPSizhy2akDKVTGn+12QI5rg/X6RDqiKoS2dHhhm0EmvArraQBAr
rh125H+ta9r8rBLleL42OIdb7J+O7hMP8YZx5dOwDelNJXD3zIS6HbwIwXqCq9Wx
uCBhSNq+fsRg64Q4qUOcmBVgUDnsoREq8pker7nEjaz0SkT9MgKIb4iJ6htfIMq7
1/eiieZbHuvmzPf1nLtzQXM9Q/mczaGk37I3Sl/Tyr7uMtD1YuNplSzZ85XN0QMl
yqylZl44okYG+uvHI88yZOiMuaC/A1dMUL/b3mUts/Cv+In9cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJTBtJaHS21HSCVTRhsF1Fa3LfKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNjI5ZmM5ZTktZGYwZS0z
MzM2LThjZGEtNmJhZTdkMDMwNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPRsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdx+18Z9lCqqDDRZtk+RgOvBASK1VhXHk1BdytgZHqrgyQ/4+kzi8mS
q7hdhLxjCy+e8NzqnhCfbL+8/Ax6cVrLE0YMH0vwm7prszXc87VOvExlZnyCdSAK
KBh9DbBW+v6OV30eIffgEFsvA61SNIjrZro2Gb2emJtL3qXP1rqJ6OXSEymcIiWE
Vf9TStbv6pYE2TG70y9vK0Rbi+Azvf74gsZbINXgisjxRwZkgKRyR7vC65Gxzkig
B/1ux7N47PKUS1ji78DnyPZdBGV6JOjUGW7wSaCX9y7Yy/gllErXsHSPvd/1MJnX
87Yr/Tu4RKIeSPkfytf/O6ndHTZOUJ0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:42 2025 by rpki-client