Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/a5364846-2042-3eb9-9cf1-dba5f696a893.roa
File: a5364846-2042-3eb9-9cf1-dba5f696a893.roa (raw, json)
Hash identifier: aoCxfg4bA59PSclZ3B1nbZ5YtVnjvvspkjXgJWft2Hk=
Subject key identifier: D2:3C:04:00:1D:1F:49:B7:5C:E0:DA:E3:F0:C0:20:A0:33:AF:B9:2B
Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Certificate serial: 010D0C9F4328583881D55563ACCEEC29DCED5A80
Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/a5364846-2042-3eb9-9cf1-dba5f696a893.roa
Signing time: Tue 05 Jan 2021 05:00:00 +0000
ROA not before: Tue 05 Jan 2021 05:00:00 +0000
ROA not after: Mon 10 Apr 2023 04:00:00 +0000
asID: 22552
IP address blocks: 104.195.0.0/18 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:81:d5:55:63:ac:ce:ec:29:dc:ed:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Validity
Not Before: Jan 5 05:00:00 2021 GMT
Not After : Apr 10 04:00:00 2023 GMT
Subject: CN=e934ee72-e990-4929-860c-cc8211d84dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:03:95:31:44:47:a3:d1:6d:24:da:95:a2:
b3:46:03:4c:e4:8f:3a:f9:c4:a3:dc:f3:bc:a7:fb:
07:36:c9:a7:09:80:da:c3:9b:43:a2:32:18:f2:c7:
d4:27:50:c0:bd:f5:7c:7f:3a:6a:ed:64:68:c5:fa:
72:9a:96:a4:fc:41:f6:1e:58:08:d0:fc:24:75:0f:
61:62:d3:a0:28:7c:60:de:ad:01:de:7a:be:ce:c8:
6e:77:30:27:1a:ee:c7:43:0a:28:e4:56:86:2e:ef:
d2:af:f8:0f:77:97:64:4b:65:90:cd:05:0c:5b:e9:
ad:44:8c:44:51:97:56:6f:3d:51:8d:54:6c:2a:e5:
7b:5c:9e:08:ca:38:f3:14:62:f6:e7:9b:ec:51:c8:
55:0c:97:43:33:8e:20:67:b1:e1:1e:3d:5a:f9:ab:
c5:26:a4:64:3b:bc:f6:61:84:ef:a7:3c:71:52:5a:
7d:8a:e2:e0:62:4f:97:5c:8d:0c:05:59:35:1f:67:
0d:99:75:57:88:dd:12:5b:07:4b:91:32:8a:f7:24:
b4:a5:a2:c7:23:e1:8c:23:a5:68:d2:16:5f:25:57:
6d:4f:08:03:64:b2:d1:89:9d:6d:d0:f6:82:ff:73:
dc:f9:2d:1d:63:84:eb:72:1b:50:e8:f8:9e:88:88:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:04:00:1D:1F:49:B7:5C:E0:DA:E3:F0:C0:20:A0:33:AF:B9:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/a5364846-2042-3eb9-9cf1-dba5f696a893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl
X509v3 Authority Key Identifier:
keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.195.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b9:d2:05:b7:b7:fc:28:ef:84:57:61:a6:b5:ab:f2:f1:b2:
cd:c5:14:03:73:4a:76:ea:c6:49:99:75:50:21:c7:6f:2a:65:
02:f6:6a:b6:70:d0:f9:99:9e:7f:c7:5f:e8:9a:21:fc:3d:6a:
a2:0c:1a:a3:6b:9b:c7:08:10:22:de:29:2f:e9:b6:4d:f1:83:
fe:e4:3d:09:73:39:50:01:f1:38:b0:e6:23:27:71:be:4a:fb:
cd:4d:77:b9:73:9f:ae:5d:33:51:b0:d2:fc:48:c6:08:dd:71:
ab:f7:d8:63:90:51:85:a7:74:18:4a:29:fd:40:72:2b:e9:cb:
fd:fc:7d:8c:e3:cd:56:84:22:b9:b2:13:d0:27:a5:1e:a4:1b:
91:9c:be:7d:e9:93:a7:e4:eb:fa:78:92:ac:61:a5:c2:2e:1c:
72:13:dd:42:ed:24:43:33:23:90:17:37:84:44:21:e6:5e:dc:
fc:49:4a:da:14:bc:48:66:9b:c2:3d:69:ab:8b:13:79:94:95:
39:5e:74:54:bf:0a:2e:ee:f1:6d:cc:1a:70:1d:2d:22:9d:bd:
d0:f5:7d:dc:d6:02:3a:94:b4:57:2d:1c:f6:af:98:a7:85:97:
34:47:88:32:4b:df:ba:4e:e2:2b:10:c0:b3:10:9c:c9:50:2d:
7c:96:73:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDiB1VVjrM7sKdztWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh
MTJhMB4XDTIxMDEwNTA1MDAwMFoXDTIzMDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTkzNGVlNzItZTk5MC00OTI5LTg2MGMtY2M4MjExZDg0ZGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoDlTFER6PRbSTalaKzRgNM5I86+cSj3PO8
p/sHNsmnCYDaw5tDojIY8sfUJ1DAvfV8fzpq7WRoxfpympak/EH2HlgI0PwkdQ9h
YtOgKHxg3q0B3nq+zshudzAnGu7HQwoo5FaGLu/Sr/gPd5dkS2WQzQUMW+mtRIxE
UZdWbz1RjVRsKuV7XJ4IyjjzFGL255vsUchVDJdDM44gZ7HhHj1a+avFJqRkO7z2
YYTvpzxxUlp9iuLgYk+XXI0MBVk1H2cNmXVXiN0SWwdLkTKK9yS0paLHI+GMI6Vo
0hZfJVdtTwgDZLLRiZ1t0PaC/3Pc+S0dY4TrchtQ6PieiIhl2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNI8BAAdH0m3XODa4/DAIKAzr7krMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk
ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvYTUzNjQ4NDYtMjA0Mi0z
ZWI5LTljZjEtZGJhNWY2OTZhODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx
NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz
YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj
ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGaMMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACC50gW3t/wo74RXYaa1q/Lxss3FFANzSnbqxkmZdVAhx28qZQL2arZw
0PmZnn/HX+iaIfw9aqIMGqNrm8cIECLeKS/ptk3xg/7kPQlzOVAB8Tiw5iMncb5K
+81Nd7lzn65dM1Gw0vxIxgjdcav32GOQUYWndBhKKf1Acivpy/38fYzjzVaEIrmy
E9AnpR6kG5Gcvn3pk6fk6/p4kqxhpcIuHHIT3ULtJEMzI5AXN4REIeZe3PxJStoU
vEhmm8I9aauLE3mUlTledFS/Ci7u8W3MGnAdLSKdvdD1fdzWAjqUtFctHPavmKeF
lzRHiDJL37pO4isQwLMQnMlQLXyWc/c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:07 2025 by rpki-client