Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/36a2a757-dd1a-301d-a934-10139e16f89c.roa
File: 36a2a757-dd1a-301d-a934-10139e16f89c.roa (raw, json)
Hash identifier: gJFgNM3nQCxHv46f+ABYG5C3LkqlY7yM+U91ZTF95+U=
Subject key identifier: 1A:B2:1A:E9:34:42:7E:B3:BC:39:4B:C8:07:16:B0:B5:A5:53:8E:01
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7B9A740D06A2A6161731980
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/36a2a757-dd1a-301d-a934-10139e16f89c.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 104.237.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b9:a7:40:d0:6a:2a:61:61:73:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=0c105c2c-a046-48c4-b2a8-805403d92e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:62:ba:00:0e:d9:a0:85:e6:6a:2f:24:d8:
2f:65:1e:af:3f:24:02:c6:3e:a0:a6:52:77:1e:63:
ca:83:19:53:52:7a:a4:7a:3c:ce:6b:08:17:66:07:
4e:82:7b:b9:14:f3:bd:df:3e:9a:9d:56:d6:aa:df:
9b:06:e4:3f:ce:72:93:f2:8f:24:21:08:fd:b3:2c:
fb:6a:f3:fe:74:40:01:73:d0:11:95:00:bf:0e:05:
dc:dc:f4:f6:72:67:8d:c3:e5:ef:d8:f9:4c:48:34:
a7:7c:93:ac:63:4c:8a:cb:db:21:82:af:5e:2a:25:
b8:94:e7:18:f0:41:dc:89:27:33:d2:c9:2e:75:ca:
93:e2:e7:3a:8f:4b:7c:e5:18:91:b2:3a:fd:32:d7:
ee:94:f9:97:a6:8a:e4:4b:ee:43:eb:6c:23:16:9f:
be:23:50:11:16:12:05:b9:fc:14:0c:f3:9c:4c:29:
52:32:47:d4:28:7c:c2:d1:aa:35:ea:75:e1:b7:de:
3d:a0:76:d9:d0:aa:5c:0f:1c:a1:3b:9e:fb:ab:cb:
08:ed:4e:d8:b9:40:d3:2d:e9:f9:07:32:60:c2:92:
73:d5:3a:69:e6:5c:67:8c:04:3b:8a:54:33:bf:4b:
0f:46:cf:32:17:31:a5:e8:2e:72:97:8e:e0:dc:a5:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:1A:E9:34:42:7E:B3:BC:39:4B:C8:07:16:B0:B5:A5:53:8E:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/36a2a757-dd1a-301d-a934-10139e16f89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7c:a0:0c:3f:9b:2d:02:a5:c4:0e:1b:90:6e:47:c3:05:36:
60:c5:fc:2c:7a:ce:13:19:8e:1f:21:74:97:fb:9a:a6:7d:1d:
28:08:c2:62:b2:af:d1:45:57:64:0b:3d:a5:3a:6f:02:a1:c6:
1f:ac:12:f3:38:c5:dc:24:18:a8:2c:91:b0:5c:f1:de:a6:d6:
c6:53:5e:80:f3:dd:de:cf:6a:58:81:81:e0:a1:f7:ab:52:f8:
9b:51:95:90:cf:1b:9f:f6:e8:9e:30:87:66:9f:03:2c:9b:27:
0c:e5:d7:bf:f2:ee:c8:78:8c:71:40:6d:1c:79:ce:52:85:77:
07:1f:b2:e0:e6:23:2d:90:22:25:13:c4:2a:da:4f:9b:c6:b3:
45:a1:7d:d7:8e:ba:87:19:ca:54:10:4c:79:84:25:6f:c2:ef:
06:3e:e4:b9:95:82:dc:c4:92:39:c1:e5:dc:eb:6c:ec:a4:5b:
e5:29:18:72:f0:e2:c2:60:23:11:e1:9a:ba:b9:3a:98:6b:4a:
1d:c9:e9:63:aa:09:80:fe:5a:cd:d9:be:62:82:8e:a6:fc:26:
2f:a6:dd:ee:0a:3a:f5:73:cb:f4:b9:9f:af:8f:b0:62:6e:1a:
5f:0c:f9:79:53:15:86:f9:35:5c:57:49:b5:4c:40:06:0b:52:
fa:90:17:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnuadA0GoqYWFzGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MGMxMDVjMmMtYTA0Ni00OGM0LWIyYTgtODA1NDAzZDkyZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHdiugAO2aCF5movJNgvZR6vPyQCxj6gplJ3
HmPKgxlTUnqkejzOawgXZgdOgnu5FPO93z6anVbWqt+bBuQ/znKT8o8kIQj9syz7
avP+dEABc9ARlQC/DgXc3PT2cmeNw+Xv2PlMSDSnfJOsY0yKy9shgq9eKiW4lOcY
8EHciScz0skudcqT4uc6j0t85RiRsjr9MtfulPmXporkS+5D62wjFp++I1ARFhIF
ufwUDPOcTClSMkfUKHzC0ao16nXht949oHbZ0KpcDxyhO577q8sI7U7YuUDTLen5
BzJgwpJz1Tpp5lxnjAQ7ilQzv0sPRs8yFzGl6C5yl47g3KWGUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqyGuk0Qn6zvDlLyAcWsLWlU44BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMzZhMmE3NTctZGQxYS0z
MDFkLWE5MzQtMTAxMzllMTZmODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO27MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACp8oAw/my0CpcQOG5BuR8MFNmDF/Cx6zhMZjh8hdJf7mqZ9HSgIwmKy
r9FFV2QLPaU6bwKhxh+sEvM4xdwkGKgskbBc8d6m1sZTXoDz3d7PaliBgeCh96tS
+JtRlZDPG5/26J4wh2afAyybJwzl17/y7sh4jHFAbRx5zlKFdwcfsuDmIy2QIiUT
xCraT5vGs0WhfdeOuocZylQQTHmEJW/C7wY+5LmVgtzEkjnB5dzrbOykW+UpGHLw
4sJgIxHhmrq5OphrSh3J6WOqCYD+Ws3ZvmKCjqb8Ji+m3e4KOvVzy/S5n6+PsGJu
Gl8M+XlTFYb5NVxXSbVMQAYLUvqQF1I=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:35:59 2025 by rpki-client