Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81699d3a-2c23-3ea7-b128-cd50d0afcd04.roa
File: 81699d3a-2c23-3ea7-b128-cd50d0afcd04.roa (raw, json)
Hash identifier: UPYJOBHJ/cfwYkJl663sYvB9YNLD7+lvGhV0idld9wk=
Subject key identifier: CF:1E:9E:90:BC:88:35:21:44:05:C4:E4:15:9E:A6:DD:9C:9F:F4:96
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5AE400DAF0094BF007200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81699d3a-2c23-3ea7-b128-cd50d0afcd04.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.97.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:ae:40:0d:af:00:94:bf:00:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=a43d587c-6a43-4549-9914-4f720c3d4609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:32:ab:5f:fd:12:d5:c0:36:b3:79:0a:42:
1f:4d:27:fb:9d:e9:8a:1f:e4:7c:91:6f:5b:2a:4f:
ac:ec:e5:29:73:81:b3:17:3e:87:49:81:25:3f:13:
8c:df:41:b1:30:f4:79:3c:fe:51:59:55:0f:5b:96:
af:de:04:97:57:99:00:74:bd:60:32:3e:8d:44:12:
73:3a:8f:f2:31:1c:d4:ad:cc:ed:69:f9:34:ae:4d:
66:34:f8:9a:4b:2b:ef:43:fc:53:05:cf:40:ba:e6:
0a:cd:73:8e:f6:38:83:25:b3:68:c6:d5:14:f5:23:
ed:a4:ee:3f:71:2d:49:30:e4:45:52:12:9f:bc:3e:
90:ad:7f:ca:69:eb:ba:90:65:2c:84:db:65:17:a8:
eb:c3:83:10:cf:c9:cd:20:b3:3a:9c:ce:f2:b8:04:
d5:e6:09:a2:26:bc:3a:d4:02:a4:d4:6c:14:0a:15:
21:de:39:1a:64:95:7f:41:1f:d8:88:38:46:d1:7b:
b4:4a:0a:47:17:77:09:d9:6c:18:cb:c8:b9:96:58:
7f:92:f1:b4:26:4d:40:01:f0:c3:26:53:06:33:9b:
6d:a5:c8:a8:db:ea:77:ef:7c:5e:dc:00:77:a9:2e:
69:82:ec:2a:53:74:ca:33:8c:fd:ec:67:c3:d5:7e:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:9E:90:BC:88:35:21:44:05:C4:E4:15:9E:A6:DD:9C:9F:F4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81699d3a-2c23-3ea7-b128-cd50d0afcd04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.97.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:31:20:21:4e:d1:09:e4:25:68:89:e2:71:a7:55:27:c3:c8:
ae:34:5c:4b:73:4e:22:0a:a9:36:3f:fc:9a:fc:52:84:be:7d:
de:95:85:a6:2d:d1:70:0f:b5:cc:c3:ad:a1:2b:c7:12:db:ba:
70:fb:13:6b:66:bc:7c:27:30:2e:b8:f3:e0:5d:33:69:f4:a1:
85:ea:5f:af:46:55:41:30:e0:cf:ab:8e:f4:66:1d:17:2c:2f:
ce:f8:4d:97:8f:97:0a:99:17:3f:cd:a5:b4:e5:e8:41:87:7d:
dd:0f:35:f7:56:9c:60:35:ef:de:93:0a:24:1f:a7:2f:e7:ea:
f1:60:34:f5:f0:81:8a:3e:e5:7e:6f:17:4e:49:1f:b4:e0:84:
a8:87:f4:f5:c8:5e:f1:63:15:05:28:08:58:42:ad:15:05:2a:
a8:b3:af:ec:fd:32:16:e7:63:23:f7:1b:3a:3b:56:4c:e3:d5:
9b:90:12:97:79:a3:d2:85:d1:05:2f:37:7d:54:2b:27:ae:d9:
db:e8:90:f5:a9:fd:7e:d0:84:16:a2:80:d9:d6:dd:18:89:16:
85:38:9e:73:4c:97:35:95:45:c8:c9:1b:7d:05:2f:33:93:10:
a7:40:e9:52:8b:ab:08:44:50:c0:2c:9b:0e:6d:47:de:e9:48:
42:d7:97:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1a5ADa8AlL8AcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YTQzZDU4N2MtNmE0My00NTQ5LTk5MTQtNGY3MjBjM2Q0NjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39Uyq1/9EtXANrN5CkIfTSf7nemKH+R8kW9b
Kk+s7OUpc4GzFz6HSYElPxOM30GxMPR5PP5RWVUPW5av3gSXV5kAdL1gMj6NRBJz
Oo/yMRzUrcztafk0rk1mNPiaSyvvQ/xTBc9AuuYKzXOO9jiDJbNoxtUU9SPtpO4/
cS1JMORFUhKfvD6QrX/Kaeu6kGUshNtlF6jrw4MQz8nNILM6nM7yuATV5gmiJrw6
1AKk1GwUChUh3jkaZJV/QR/YiDhG0Xu0SgpHF3cJ2WwYy8i5llh/kvG0Jk1AAfDD
JlMGM5ttpcio2+p373xe3AB3qS5pguwqU3TKM4z97GfD1X5VhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8enpC8iDUhRAXE5BWept2cn/SWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODE2OTlkM2EtMmMyMy0z
ZWE3LWIxMjgtY2Q1MGQwYWZjZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGEsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMxICFO0QnkJWiJ4nGnVSfDyK40XEtzTiIKqTY//Jr8UoS+fd6VhaYt
0XAPtczDraErxxLbunD7E2tmvHwnMC648+BdM2n0oYXqX69GVUEw4M+rjvRmHRcs
L874TZePlwqZFz/NpbTl6EGHfd0PNfdWnGA1796TCiQfpy/n6vFgNPXwgYo+5X5v
F05JH7TghKiH9PXIXvFjFQUoCFhCrRUFKqizr+z9MhbnYyP3Gzo7Vkzj1ZuQEpd5
o9KF0QUvN31UKyeu2dvokPWp/X7QhBaigNnW3RiJFoU4nnNMlzWVRcjJG30FLzOT
EKdA6VKLqwhEUMAsmw5tR97pSELXl9Y=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:56:14 2025 by rpki-client