Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/61dd4b75-5a56-34cf-92ab-b8a9a9b0ee14.roa
File: 61dd4b75-5a56-34cf-92ab-b8a9a9b0ee14.roa (raw, json)
Hash identifier: OteT+V2qQMKGR6BzYUSIAf+qh0ibw92mrngEjGkTYUA=
Subject key identifier: 14:7E:96:10:E1:68:06:47:7E:A1:9A:44:01:E1:99:AA:6C:89:49:F6
Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Certificate serial: 010D0C9F4328576D51CC73C042CFC16FF3D767F9
Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/61dd4b75-5a56-34cf-92ab-b8a9a9b0ee14.roa
Signing time: Thu 30 Jan 2020 00:26:17 +0000
ROA not before: Thu 26 Dec 2019 05:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 64236
IP address blocks: 104.254.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:f3:d7:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Validity
Not Before: Dec 26 05:00:00 2019 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=00020c94-80aa-49fc-8626-841208d69a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:5c:71:aa:3a:43:ac:16:2c:6a:f5:d4:e3:
a4:7e:d5:bc:bb:d7:c4:bd:36:83:0d:78:34:1b:cf:
be:3c:72:cb:d6:88:55:ec:92:5e:f9:ac:d5:03:2a:
0d:64:0e:90:aa:e2:b0:ee:44:8b:1b:0b:2f:e8:b1:
01:14:e0:10:8b:d7:29:be:11:40:4f:6a:8f:39:1b:
16:8f:61:2e:ce:0c:ca:00:9b:15:12:cc:e9:07:03:
6d:ac:0a:f7:b6:ab:3f:fc:ae:f9:79:62:eb:9b:28:
83:a6:d4:1d:a6:03:14:7c:d7:7e:0f:fa:a3:9a:34:
e3:fa:6b:1f:46:df:c1:47:12:b8:50:a4:40:d2:8f:
f9:85:56:66:a6:cd:39:17:4a:8d:d2:85:5a:f5:00:
c0:df:8f:40:6f:d2:a6:a9:e9:86:f1:51:81:6d:90:
1b:73:40:b8:56:3d:d9:00:26:bf:be:32:e4:54:72:
2b:fa:a3:09:f0:b1:c8:07:1c:bd:b2:ce:ff:a7:55:
32:56:d3:b3:44:82:61:9b:ce:4d:a5:f1:00:50:9e:
cc:d6:0f:b5:b3:2c:38:f0:a6:70:1a:e9:48:33:17:
f7:64:f8:df:76:39:98:3e:38:78:77:4c:b5:39:16:
63:3c:bf:91:5f:66:41:35:d8:ac:42:db:45:c6:f4:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:96:10:E1:68:06:47:7E:A1:9A:44:01:E1:99:AA:6C:89:49:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/61dd4b75-5a56-34cf-92ab-b8a9a9b0ee14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl
X509v3 Authority Key Identifier:
keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:f2:37:da:20:c2:07:f4:f2:a0:6a:2f:5d:16:01:12:de:78:
04:db:5e:9e:f2:12:b4:8a:0e:c4:12:a5:ed:b7:e4:19:08:c8:
96:f2:e9:b6:11:2c:6a:d6:4f:80:d9:74:a2:63:16:20:60:fa:
ac:79:b5:3b:c9:24:9a:20:cd:e8:11:89:cd:2c:23:2d:66:48:
8d:69:99:da:58:39:41:f7:fd:0c:0f:0c:5d:1d:83:59:d2:df:
19:98:71:52:97:6d:f1:30:e5:cb:f5:4f:e7:67:92:fd:b8:59:
06:75:1d:fb:2b:5c:6f:23:f6:d9:6b:76:87:8d:a9:4e:6b:1a:
b2:8e:ed:cc:84:5b:6e:85:92:35:5e:43:57:b1:11:5a:9f:e3:
27:5e:87:69:f3:a5:e4:c4:65:f5:a3:9a:c5:c1:a6:57:65:1b:
59:cf:eb:f3:91:1b:b1:01:22:9b:d8:85:a1:62:5e:68:e8:22:
72:57:25:9f:08:0b:fe:84:f2:2c:39:11:74:b4:9b:70:78:9b:
c2:f1:91:6a:e3:8f:8a:4b:20:c5:cc:2a:71:58:bd:8c:3f:84:
2a:25:34:2c:ed:ae:4e:af:20:29:99:8a:e5:c5:ee:82:1b:d7:
89:a7:b8:e9:8e:ee:56:4c:c0:0a:39:3c:b3:e2:b8:59:df:96:
34:2b:3f:6a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bb/PXZ/kwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJlOGY5
NTAeFw0xOTEyMjYwNTAwMDBaFw0yMjA1MDMwNDAwMDBaMC8xLTArBgNVBAMTJDAw
MDIwYzk0LTgwYWEtNDlmYy04NjI2LTg0MTIwOGQ2OWE3NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMW8XHGqOkOsFixq9dTjpH7VvLvXxL02gw14NBvP
vjxyy9aIVeySXvms1QMqDWQOkKrisO5EixsLL+ixARTgEIvXKb4RQE9qjzkbFo9h
Ls4MygCbFRLM6QcDbawK97arP/yu+Xli65sog6bUHaYDFHzXfg/6o5o04/prH0bf
wUcSuFCkQNKP+YVWZqbNORdKjdKFWvUAwN+PQG/SpqnphvFRgW2QG3NAuFY92QAm
v74y5FRyK/qjCfCxyAccvbLO/6dVMlbTs0SCYZvOTaXxAFCezNYPtbMsOPCmcBrp
SDMX92T433Y5mD44eHdMtTkWYzy/kV9mQTXYrELbRcb0qjkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQUfpYQ4WgGR36hmkQB4ZmqbIlJ9jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQw
NjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4Zjk1LzYxZGQ0Yjc1LTVhNTYtMzRj
Zi05MmFiLWI4YTlhOWIwZWUxNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1YmU0MDY4LWY3ZTUtNDA0Yi05Njkz
LWRjZmY0YjJlOGY5NS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThm
OTUuY3JsMB8GA1UdIwQYMBaAFMebTSVKi/tSTztultLYAmLRqQfPMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRi
MmU4Zjk1LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2j+GDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAmfI32iDCB/TyoGovXRYBEt54BNtenvIStIoOxBKl7bfkGQjIlvLpthEsatZP
gNl0omMWIGD6rHm1O8kkmiDN6BGJzSwjLWZIjWmZ2lg5Qff9DA8MXR2DWdLfGZhx
Updt8TDly/VP52eS/bhZBnUd+ytcbyP22Wt2h42pTmsaso7tzIRbboWSNV5DV7ER
Wp/jJ16HafOl5MRl9aOaxcGmV2UbWc/r85EbsQEim9iFoWJeaOgiclclnwgL/oTy
LDkRdLSbcHibwvGRauOPiksgxcwqcVi9jD+EKiU0LO2uTq8gKZmK5cXughvXiae4
6Y7uVkzACjk8s+K4Wd+WNCs/ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org