Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4bfdaea3-b56d-3f83-a013-bd01af0af7f8.roa
File: 4bfdaea3-b56d-3f83-a013-bd01af0af7f8.roa (raw, json)
Hash identifier: jxnKsFOa9nCuazwrhXcl5tKe71TzhkvEDscF+kAMqsc=
Subject key identifier: 4A:CF:2B:85:A3:0B:00:7D:18:E1:B3:69:11:43:25:BB:C8:8A:2F:D6
Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial: 010D0C9F43285839954E4A73FE3447C9832D8600
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4bfdaea3-b56d-3f83-a013-bd01af0af7f8.roa
Signing time: Thu 08 Apr 2021 04:00:00 +0000
ROA not before: Thu 08 Apr 2021 04:00:00 +0000
ROA not after: Mon 17 Jul 2023 04:00:00 +0000
asID: 1239
IP address blocks: 104.249.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:95:4e:4a:73:fe:34:47:c9:83:2d:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
Validity
Not Before: Apr 8 04:00:00 2021 GMT
Not After : Jul 17 04:00:00 2023 GMT
Subject: CN=86ad4b6c-311f-4e82-bbeb-b67e9c4afebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:28:d0:f5:97:14:f5:9b:07:bc:54:74:dd:
a7:12:84:a7:8c:f4:fb:f5:b9:2f:c6:f7:71:6e:44:
c3:87:c7:a6:10:e9:39:0d:88:73:27:f4:39:0b:3f:
7a:ed:aa:85:38:aa:f3:45:08:fa:57:66:52:8b:dc:
6a:71:f8:e2:20:66:cf:c4:61:27:99:20:fa:64:a1:
bd:4b:90:3a:b4:ec:91:fe:95:cd:a0:a7:22:17:4e:
0a:d4:cc:59:07:06:e9:7f:c6:d4:b5:9f:77:ee:b7:
49:51:61:1c:2e:ec:d7:6a:ad:39:7b:cd:b7:88:50:
2f:4f:11:82:84:ca:9c:61:61:b8:d7:a4:20:6a:d4:
63:08:c2:22:61:c9:26:27:f2:33:d5:43:82:a8:d8:
35:36:50:70:6c:ae:56:62:5c:97:79:ec:2c:86:17:
52:db:e9:f7:ab:53:39:c4:93:b4:ee:a0:af:ec:7d:
03:ba:7b:28:90:18:92:ee:4d:4e:43:a7:aa:62:f1:
ff:ff:39:45:a9:81:cf:3e:76:6b:71:ca:4d:70:d0:
d7:ef:58:0a:1e:65:40:c5:a3:f9:dc:25:4b:35:37:
a9:c7:d3:28:34:53:cc:fd:73:f6:47:92:94:b0:7a:
6b:9e:10:c7:53:0b:27:c8:39:9b:a7:0e:ac:fc:7c:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:2B:85:A3:0B:00:7D:18:E1:B3:69:11:43:25:BB:C8:8A:2F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/4bfdaea3-b56d-3f83-a013-bd01af0af7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
X509v3 Authority Key Identifier:
keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:af:d4:8e:7d:d7:28:49:f7:2e:3c:e0:8f:37:6b:4c:6c:b5:
5c:60:1e:2d:99:f6:03:20:2d:42:42:0c:31:3a:d7:df:a8:fb:
ea:74:de:5c:b6:bb:59:ca:4c:b4:b7:c7:76:88:23:93:49:b8:
8e:4c:22:dc:30:63:4d:96:c0:fe:0c:a1:e7:96:81:6c:18:ae:
54:ff:c6:fe:8d:e8:84:f4:ea:cb:da:80:ab:be:fe:37:83:e4:
5f:96:b3:ae:a4:dd:12:61:ce:19:19:58:21:f0:62:0f:03:7a:
75:c8:61:75:47:50:66:15:3b:e1:90:eb:f2:6c:94:97:43:9c:
f1:40:58:b4:90:d4:d9:b1:fd:ef:f9:15:48:a6:dc:26:6a:fb:
2e:15:04:1f:0a:89:a2:4c:7f:35:1d:ac:84:c2:c9:7b:95:ab:
6e:e3:52:e7:86:e9:59:a4:a5:fc:3a:7b:ce:8b:49:63:a0:fe:
f0:41:11:93:91:7c:d7:0c:fd:d6:e3:f8:8a:da:ef:3a:90:e8:
ed:f2:1d:fd:82:31:aa:54:ff:82:43:b6:30:ea:00:59:21:12:
e0:5a:73:9c:a7:6a:9e:bb:34:b4:9a:2f:0b:be:10:85:0b:92:
a5:86:16:e1:35:80:e9:d1:79:92:dc:a8:cb:62:c3:bb:16:ce:
ad:5a:80:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDmVTkpz/jRHyYMthgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3
MTBhMB4XDTIxMDQwODA0MDAwMFoXDTIzMDcxNzA0MDAwMFowLzEtMCsGA1UEAxMk
ODZhZDRiNmMtMzExZi00ZTgyLWJiZWItYjY3ZTljNGFmZWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSAo0PWXFPWbB7xUdN2nEoSnjPT79bkvxvdx
bkTDh8emEOk5DYhzJ/Q5Cz967aqFOKrzRQj6V2ZSi9xqcfjiIGbPxGEnmSD6ZKG9
S5A6tOyR/pXNoKciF04K1MxZBwbpf8bUtZ937rdJUWEcLuzXaq05e823iFAvTxGC
hMqcYWG416QgatRjCMIiYckmJ/Iz1UOCqNg1NlBwbK5WYlyXeewshhdS2+n3q1M5
xJO07qCv7H0DunsokBiS7k1OQ6eqYvH//zlFqYHPPnZrccpNcNDX71gKHmVAxaP5
3CVLNTepx9MoNFPM/XP2R5KUsHprnhDHUwsnyDmbpw6s/HzuOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErPK4WjCwB9GOGzaRFDJbvIii/WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz
ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvNGJmZGFlYTMtYjU2ZC0z
ZjgzLWEwMTMtYmQwMWFmMGFmN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx
MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0
NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz
YjU4NDcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+v1I591yhJ9y484I83a0xstVxgHi2Z9gMgLUJCDDE619+o++p03ly2
u1nKTLS3x3aII5NJuI5MItwwY02WwP4MoeeWgWwYrlT/xv6N6IT06svagKu+/jeD
5F+Ws66k3RJhzhkZWCHwYg8DenXIYXVHUGYVO+GQ6/JslJdDnPFAWLSQ1Nmx/e/5
FUim3CZq+y4VBB8KiaJMfzUdrITCyXuVq27jUueG6Vmkpfw6e86LSWOg/vBBEZOR
fNcM/dbj+Ira7zqQ6O3yHf2CMapU/4JDtjDqAFkhEuBac5ynap67NLSaLwu+EIUL
kqWGFuE1gOnReZLcqMtiw7sWzq1agHw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org