Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a9a63c80-1f17-318c-a06f-5cab5419beac.roa
File: a9a63c80-1f17-318c-a06f-5cab5419beac.roa (raw, json)
Hash identifier: HagXdMKqEOkPEl6DflNwnWwdnPQQ9Gd/5gLRdemVKf0=
Subject key identifier: 06:91:59:29:F0:67:76:FB:1E:38:97:22:09:52:65:C0:5C:C0:B5:07
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F4328583AA7A13E7F9ECDE36B8F1EB480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a9a63c80-1f17-318c-a06f-5cab5419beac.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 36040
IP address blocks: 104.237.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a1:3e:7f:9e:cd:e3:6b:8f:1e:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c3229563-f581-4921-8c2c-9e7c3378df26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:4a:e9:21:78:bc:fc:48:ae:83:18:c5:38:
b8:36:8c:2f:fe:24:ad:23:54:72:c0:e8:6c:10:9f:
cb:61:c7:19:14:fa:be:4c:f1:32:ec:04:7f:49:f1:
d5:ee:e0:b2:7e:2f:38:4a:3c:51:3c:35:e4:27:cb:
57:bd:6e:bf:82:93:0d:25:0b:2e:81:2a:2c:e6:26:
a7:ee:2b:94:fd:d7:3a:94:97:c9:a5:01:4d:6e:68:
7b:9f:82:45:48:c3:fb:ff:da:34:6e:84:b9:cb:b3:
0c:43:d4:89:3a:30:cf:bf:ae:ce:98:9d:26:a1:1b:
9f:f5:d5:69:56:d0:18:79:07:48:fc:a2:53:44:37:
06:ab:14:ca:94:a2:5e:2e:3b:50:dc:04:38:77:f4:
a9:a5:d3:57:7b:7d:29:b1:71:70:b8:79:8a:25:ef:
77:e0:c2:d2:d1:55:50:b3:29:a7:8d:d0:f7:85:2a:
51:20:f7:e8:4c:2b:c3:fb:19:29:c0:e0:d9:29:b4:
56:5b:4a:c1:33:c2:ee:6a:2e:3c:bf:7e:58:82:c3:
d4:9f:76:d1:62:69:dd:c3:95:03:04:05:d1:47:e8:
99:af:51:d7:81:0a:50:13:8d:f3:4a:93:67:40:57:
01:2c:05:18:16:72:ff:c9:e2:c2:cc:30:5c:aa:2c:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:59:29:F0:67:76:FB:1E:38:97:22:09:52:65:C0:5C:C0:B5:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a9a63c80-1f17-318c-a06f-5cab5419beac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
104.237.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:3d:ef:74:ba:b3:6f:39:b2:6e:a1:a1:06:5d:8c:6e:fa:3e:
15:2b:d4:a9:36:99:d4:f4:5f:01:c1:c8:7b:74:c9:05:f8:65:
b0:4d:95:df:65:a9:56:7d:7b:93:7b:13:3d:e3:6d:93:0e:68:
e5:27:51:5a:49:8b:16:bd:be:e0:bb:43:c9:35:48:fd:e1:6b:
69:3d:2f:b6:83:cb:66:ba:b9:0d:6b:2e:e3:1e:88:e4:dc:f2:
df:27:5b:ea:6d:69:6d:0a:14:0a:b6:7d:f5:64:bb:ba:eb:9f:
fa:2b:b8:4f:20:29:5c:52:b4:f4:83:43:f9:34:4c:25:31:61:
56:00:a9:37:2c:5c:6d:ed:7e:60:72:2a:ab:24:82:0e:68:80:
9f:c5:85:6f:db:1f:28:b4:1d:4c:1e:7c:c7:68:ab:22:c3:7d:
f3:4f:3b:4c:03:38:7e:41:91:91:39:ec:ea:8d:49:d1:00:c2:
68:38:1a:c1:44:e0:5b:70:21:db:62:65:74:ab:b2:ed:ae:66:
4f:22:6d:a0:1f:f9:8f:00:f1:45:eb:23:56:e7:9e:4a:e2:78:
ab:b8:dd:51:01:02:a6:3b:7d:e5:16:15:bb:7c:9d:6f:de:64:
0a:ba:6c:c0:a4:f6:49:4d:bf:1b:f3:d1:63:dd:76:01:f1:90:
c1:c9:ab:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnoT5/ns3ja48etIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YzMyMjk1NjMtZjU4MS00OTIxLThjMmMtOWU3YzMzNzhkZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4tK6SF4vPxIroMYxTi4Nowv/iStI1RywOhs
EJ/LYccZFPq+TPEy7AR/SfHV7uCyfi84SjxRPDXkJ8tXvW6/gpMNJQsugSos5ian
7iuU/dc6lJfJpQFNbmh7n4JFSMP7/9o0boS5y7MMQ9SJOjDPv67OmJ0moRuf9dVp
VtAYeQdI/KJTRDcGqxTKlKJeLjtQ3AQ4d/SppdNXe30psXFwuHmKJe934MLS0VVQ
symnjdD3hSpRIPfoTCvD+xkpwODZKbRWW0rBM8Luai48v35YgsPUn3bRYmndw5UD
BAXRR+iZr1HXgQpQE43zSpNnQFcBLAUYFnL/yeLCzDBcqiwbWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaRWSnwZ3b7HjiXIglSZcBcwLUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTlhNjNjODAtMWYxNy0z
MThjLWEwNmYtNWNhYjU0MTliZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO28MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACY973S6s285sm6hoQZdjG76PhUr1Kk2mdT0XwHByHt0yQX4ZbBNld9l
qVZ9e5N7Ez3jbZMOaOUnUVpJixa9vuC7Q8k1SP3ha2k9L7aDy2a6uQ1rLuMeiOTc
8t8nW+ptaW0KFAq2ffVku7rrn/oruE8gKVxStPSDQ/k0TCUxYVYAqTcsXG3tfmBy
Kqskgg5ogJ/FhW/bHyi0HUwefMdoqyLDffNPO0wDOH5BkZE57OqNSdEAwmg4GsFE
4FtwIdtiZXSrsu2uZk8ibaAf+Y8A8UXrI1bnnkrieKu43VEBAqY7feUWFbt8nW/e
ZAq6bMCk9klNvxvz0WPddgHxkMHJq04=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:56 2024 by rpki-client on console-fra.rpki-client.org