Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/07c79b55-63b9-3a34-ac28-1e12b13b6ecc.roa
File: 07c79b55-63b9-3a34-ac28-1e12b13b6ecc.roa (raw, json)
Hash identifier: nvi9p6sXTEAK/2E4F1pbY5lwnfsvlLJ86TGDOVB/xDU=
Subject key identifier: 8C:2D:99:0D:56:72:2A:0A:AC:0A:9F:83:7D:7C:2C:01:26:B8:BF:3A
Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial: 010D0C9F4328583C19B7923F9AE84472C2130C00
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/07c79b55-63b9-3a34-ac28-1e12b13b6ecc.roa
Signing time: Sat 01 Jan 2022 05:00:00 +0000
ROA not before: Sat 01 Jan 2022 05:00:00 +0000
ROA not after: Thu 30 Jun 2022 04:00:00 +0000
asID: 3356
IP address blocks: 205.236.104.0/22 maxlen: 22
104.159.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:19:b7:92:3f:9a:e8:44:72:c2:13:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Validity
Not Before: Jan 1 05:00:00 2022 GMT
Not After : Jun 30 04:00:00 2022 GMT
Subject: CN=09591b2b-4f7f-451d-b304-e86686204f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:b6:77:c9:cf:b6:46:d5:56:6f:a3:d8:e8:
85:f5:d5:53:ab:e4:f5:e4:46:19:b8:d2:4b:32:a6:
75:3b:b2:7b:51:85:e6:61:55:bd:3d:d9:a3:22:30:
f8:c4:57:3e:87:b2:16:b4:e2:28:6c:f8:ca:2a:f1:
08:b2:9d:80:c5:5d:bb:55:20:e6:fb:fa:23:41:a1:
50:9e:05:de:3c:89:17:b5:4b:31:70:dc:48:9c:e3:
b2:32:c9:37:84:c6:25:fe:37:95:71:da:aa:f7:21:
c7:ad:44:22:02:e3:f1:e8:e9:77:13:a0:c2:34:8d:
34:1e:53:91:f5:00:42:0b:3c:ff:78:37:0e:77:27:
20:94:ae:80:ec:5b:ea:8f:04:9b:7a:95:bb:dd:73:
a6:eb:c6:27:05:20:39:c1:ae:01:4a:d7:93:a3:eb:
7d:4c:cc:65:5e:8c:33:01:62:99:ac:14:83:ec:1f:
08:e4:09:72:34:12:58:f6:e8:36:5b:00:ed:40:e3:
50:54:f7:9d:2d:26:c3:cf:1f:03:a8:8c:07:26:e6:
23:90:9e:53:22:11:ca:ee:de:9e:21:ce:7e:dc:30:
b9:43:0a:7a:ab:0c:b5:41:52:49:7b:45:9d:8e:a3:
f5:11:72:fc:0c:07:85:13:25:e0:29:c4:9e:b6:6e:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:99:0D:56:72:2A:0A:AC:0A:9F:83:7D:7C:2C:01:26:B8:BF:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/07c79b55-63b9-3a34-ac28-1e12b13b6ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
X509v3 Authority Key Identifier:
keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
sbgp-ipAddrBlock: critical
IPv4:
104.159.20.0/22
205.236.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:2a:aa:69:02:4a:9e:da:f7:cb:11:24:3f:98:1c:d3:b1:9f:
cc:a3:e4:2e:3c:f1:f2:35:f6:fd:3c:8a:e8:fe:3c:6a:2e:f5:
85:3e:97:cc:c7:6c:e1:43:8d:69:b2:60:03:f7:48:7a:60:af:
35:e6:25:e3:44:8b:ca:91:e0:ee:fb:02:26:a3:e7:3e:f2:a1:
4b:24:9f:81:5b:5e:1c:73:15:b8:17:23:f2:50:ff:75:fe:74:
c9:5d:fb:2f:64:54:4f:ea:fc:76:e7:af:c0:b2:d5:c0:24:ec:
94:ac:ee:e8:dd:ac:9d:c4:0e:d3:06:3a:f6:31:f7:b7:4b:d3:
98:d3:42:25:88:1f:27:41:3c:16:8d:51:f3:0b:91:0f:dc:24:
74:de:b6:7d:e1:8a:48:99:dc:6d:6b:58:c7:38:07:5e:b0:a2:
6e:26:52:78:84:7a:93:1e:2b:17:0f:12:da:9f:93:ab:03:01:
71:5c:57:2f:da:de:3f:d1:39:c3:6f:2a:42:20:09:cd:f4:97:
23:9b:b8:d7:34:f7:f0:ef:1a:63:98:4a:2a:ed:47:74:69:f5:
2d:c5:06:ac:62:cd:a3:fe:eb:fb:b4:1b:e2:7c:18:f8:f6:34:
59:67:67:df:8b:ee:0e:ed:74:af:b1:43:34:41:6e:68:7b:14:
06:d7:55:91
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWDwZt5I/muhEcsITDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm
Mzg2MB4XDTIyMDEwMTA1MDAwMFoXDTIyMDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MDk1OTFiMmItNGY3Zi00NTFkLWIzMDQtZTg2Njg2MjA0ZjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglG2d8nPtkbVVm+j2OiF9dVTq+T15EYZuNJL
MqZ1O7J7UYXmYVW9PdmjIjD4xFc+h7IWtOIobPjKKvEIsp2AxV27VSDm+/ojQaFQ
ngXePIkXtUsxcNxInOOyMsk3hMYl/jeVcdqq9yHHrUQiAuPx6Ol3E6DCNI00HlOR
9QBCCzz/eDcOdycglK6A7FvqjwSbepW73XOm68YnBSA5wa4BSteTo+t9TMxlXowz
AWKZrBSD7B8I5AlyNBJY9ug2WwDtQONQVPedLSbDzx8DqIwHJuYjkJ5TIhHK7t6e
Ic5+3DC5Qwp6qwy1QVJJe0WdjqP1EXL8DAeFEyXgKcSetm7oeQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIwtmQ1WcioKrAqfg318LAEmuL86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx
ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvMDdjNzliNTUtNjNiOS0z
YTM0LWFjMjgtMWUxMmIxM2I2ZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj
ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1
ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz
NzQwNWYzODYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaJ8UAwQC
zexoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH0qqmkCSp7a98sRJD+YHNOxn8yj5C488fI19v08iuj+PGou
9YU+l8zHbOFDjWmyYAP3SHpgrzXmJeNEi8qR4O77Aiaj5z7yoUskn4FbXhxzFbgX
I/JQ/3X+dMld+y9kVE/q/Hbnr8Cy1cAk7JSs7ujdrJ3EDtMGOvYx97dL05jTQiWI
HydBPBaNUfMLkQ/cJHTetn3hikiZ3G1rWMc4B16wom4mUniEepMeKxcPEtqfk6sD
AXFcVy/a3j/ROcNvKkIgCc30lyObuNc09/DvGmOYSirtR3Rp9S3FBqxizaP+6/u0
G+J8GPj2NFlnZ9+L7g7tdK+xQzRBbmh7FAbXVZE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-ams.rpki-client.org