Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/66d53abd-9bc6-36a8-8ecb-cc44ff36e258.roa
File: 66d53abd-9bc6-36a8-8ecb-cc44ff36e258.roa (raw, json)
Hash identifier: sGoG0uOzOMMUJ3zWx4w2mrAWLuxm6hRKe1+cAR/zvQY=
Subject key identifier: 23:43:B5:93:B7:3B:E3:0D:CD:45:87:F9:C6:DF:51:55:DC:64:52:89
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F4328583A2760B40C7683CDBB94568080
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/66d53abd-9bc6-36a8-8ecb-cc44ff36e258.roa
Signing time: Fri 14 Feb 2020 05:00:00 +0000
ROA not before: Fri 14 Feb 2020 05:00:00 +0000
ROA not after: Thu 07 Sep 2023 04:00:00 +0000
asID: 22773
IP address blocks: 104.36.84.0/22 maxlen: 24
216.126.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:27:60:b4:0c:76:83:cd:bb:94:56:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Feb 14 05:00:00 2020 GMT
Not After : Sep 7 04:00:00 2023 GMT
Subject: CN=1e9a50a0-9d0a-4acb-9cb2-3127e78d2bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:cb:c6:60:98:a8:f2:ca:ea:68:ca:cd:5c:
f2:bb:79:d3:58:38:87:05:cb:97:28:ee:7c:3d:5d:
0e:78:36:84:84:22:5e:6e:ce:0b:65:d6:1f:88:b9:
f5:7c:08:7d:f2:98:c9:ae:cb:45:7b:06:6d:f8:5e:
4d:f5:b9:ee:48:d8:bf:30:ea:3c:b8:af:3f:ae:32:
3d:81:2e:02:50:6f:c0:8f:b9:73:e3:7a:4a:73:61:
3e:d0:71:28:0a:7c:66:90:07:d3:81:f8:bd:60:c8:
dc:92:7b:74:b9:da:d1:6f:82:03:7b:37:ad:ea:6b:
f7:58:1b:a5:20:de:b8:7a:9e:41:58:79:d6:4c:e6:
ec:8f:6f:82:ac:39:1f:30:3a:23:cc:1a:50:27:5b:
ff:15:0b:b8:0c:17:f7:f6:c1:78:e2:b9:bb:d1:10:
cd:6d:05:b1:9d:53:52:bb:98:b2:80:65:68:d5:ea:
70:c6:bd:a7:47:2e:ab:b1:5f:d8:71:21:74:e4:e0:
ec:41:df:15:6c:b3:f6:37:f3:8c:75:75:4b:b7:b5:
13:50:47:47:83:c6:08:e2:2b:aa:b2:90:49:28:41:
7c:da:4c:6c:09:7f:c6:e9:20:42:1c:27:ab:d5:1b:
88:80:31:f3:62:7b:4f:a9:f8:99:ca:91:e2:94:e9:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:43:B5:93:B7:3B:E3:0D:CD:45:87:F9:C6:DF:51:55:DC:64:52:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/66d53abd-9bc6-36a8-8ecb-cc44ff36e258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.84.0/22
216.126.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:b4:29:84:03:f7:16:6c:81:a5:1a:8a:70:c7:3d:a8:ae:6e:
ed:10:ef:7a:9b:af:69:a5:b1:64:e9:4b:a8:79:c8:d4:31:57:
1e:b5:87:49:52:8c:76:27:54:b7:0e:ef:ed:cc:1e:5a:7a:02:
7a:56:fb:df:b1:d7:6c:07:41:d8:69:99:5b:6a:80:99:19:03:
13:13:52:42:4c:7e:37:d5:9d:a5:64:a1:8a:4d:f3:92:37:40:
ab:1c:07:7a:59:56:f1:93:c1:60:98:cc:6c:ca:10:8c:90:17:
c7:de:ac:fb:0b:2e:12:75:85:12:77:cf:cb:ad:54:82:26:50:
7c:d7:ce:3e:b3:67:d9:30:5c:41:d2:21:74:54:de:7e:e5:a5:
9e:a3:bb:42:7a:5b:a2:20:cf:a6:ae:6a:b7:02:a7:79:00:bd:
92:18:d2:c4:3d:37:55:bd:ab:04:5c:2b:e2:13:ac:e8:c4:f4:
de:8e:53:14:3c:c0:81:bb:83:88:d2:ef:c2:6b:b6:d7:6a:b7:
2b:15:c7:2e:cd:80:45:3f:09:92:90:3d:26:df:af:3e:d8:d4:
88:8f:bd:32:ce:00:7b:a5:38:95:76:ad:2a:89:db:77:76:21:
75:76:68:e4:5c:04:12:6f:f8:c1:f2:d4:06:b2:8b:2a:9a:c6:
c3:b2:6f:b5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWDonYLQMdoPNu5RWgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTIwMDIxNDA1MDAwMFoXDTIzMDkwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MWU5YTUwYTAtOWQwYS00YWNiLTljYjItMzEyN2U3OGQyYmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3PLxmCYqPLK6mjKzVzyu3nTWDiHBcuXKO58
PV0OeDaEhCJebs4LZdYfiLn1fAh98pjJrstFewZt+F5N9bnuSNi/MOo8uK8/rjI9
gS4CUG/Aj7lz43pKc2E+0HEoCnxmkAfTgfi9YMjcknt0udrRb4IDezet6mv3WBul
IN64ep5BWHnWTObsj2+CrDkfMDojzBpQJ1v/FQu4DBf39sF44rm70RDNbQWxnVNS
u5iygGVo1epwxr2nRy6rsV/YcSF05ODsQd8VbLP2N/OMdXVLt7UTUEdHg8YI4iuq
spBJKEF82kxsCX/G6SBCHCer1RuIgDHzYntPqfiZypHilOn0QQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCNDtZO3O+MNzUWH+cbfUVXcZFKJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvNjZkNTNhYmQtOWJjNi0z
NmE4LThlY2ItY2M0NGZmMzZlMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaCRUAwQA
2H7vMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEG0KYQD9xZsgaUainDHPaiubu0Q73qbr2mlsWTpS6h5yNQx
Vx61h0lSjHYnVLcO7+3MHlp6AnpW+9+x12wHQdhpmVtqgJkZAxMTUkJMfjfVnaVk
oYpN85I3QKscB3pZVvGTwWCYzGzKEIyQF8ferPsLLhJ1hRJ3z8utVIImUHzXzj6z
Z9kwXEHSIXRU3n7lpZ6ju0J6W6Igz6auarcCp3kAvZIY0sQ9N1W9qwRcK+ITrOjE
9N6OUxQ8wIG7g4jS78JrttdqtysVxy7NgEU/CZKQPSbfrz7Y1IiPvTLOAHulOJV2
rSqJ23d2IXV2aORcBBJv+MHy1AayiyqaxsOyb7U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org