Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ca011b6-871e-34f4-90f3-d624a316acf1.roa
File: 3ca011b6-871e-34f4-90f3-d624a316acf1.roa (raw, json)
Hash identifier: 1DIyVZmoxkQsku/8D5AhaCB/N6x07F7O+fGQWoGlvg4=
Subject key identifier: 9E:33:D2:AC:EA:11:67:FB:A5:AB:29:55:90:65:9D:D9:CF:EB:1E:A3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AA8A9C367F85B28EB79E00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ca011b6-871e-34f4-90f3-d624a316acf1.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:8a:9c:36:7f:85:b2:8e:b7:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=61e405f5-7d24-4b8f-ad29-07eac9f77e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:6a:0a:6d:e3:7f:c6:9a:6d:d6:a7:3f:40:
28:b5:e2:d8:d0:af:7e:76:76:9d:42:30:d0:58:31:
a7:9b:40:b1:bd:17:9d:70:d9:09:b0:d5:bb:f2:d8:
74:c2:be:9b:b4:e3:33:79:93:4c:40:ab:80:a4:61:
2a:db:34:bc:2d:5f:e3:92:90:be:53:05:6a:8f:0c:
2d:ae:a6:73:33:f2:1e:4d:f1:f1:ce:5d:e3:fa:22:
22:40:69:b3:ca:7f:16:a8:a5:77:d6:fe:00:e9:d8:
b7:9d:4a:58:05:8c:1a:00:9f:29:ba:5f:e7:7c:96:
46:62:fd:65:a8:0b:a8:72:00:d9:f8:e8:c4:4c:91:
39:1c:30:28:c5:8f:79:ba:a1:70:ec:68:10:55:cd:
a1:2c:55:58:99:40:82:e8:67:b8:b0:5b:86:4d:50:
9b:01:3a:65:57:25:cd:9a:ce:05:87:6b:c8:df:4b:
12:6a:02:5e:8a:14:26:6a:42:1e:45:fb:10:59:09:
39:70:fc:5f:3c:c6:13:f6:10:b0:c1:bb:43:37:a5:
2e:7e:cc:da:7c:30:18:f9:19:91:3e:df:ae:16:88:
58:c2:a1:e6:e6:79:e6:19:fd:fc:1b:27:bd:70:04:
2b:33:f0:fb:20:36:f4:7e:af:36:39:7c:a0:10:db:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:D2:AC:EA:11:67:FB:A5:AB:29:55:90:65:9D:D9:CF:EB:1E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ca011b6-871e-34f4-90f3-d624a316acf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:ea:af:09:87:cc:6b:7a:5a:f1:0e:d7:2e:b2:76:65:ee:e4:
12:93:53:59:b9:a7:90:8c:47:d2:f8:98:13:69:15:92:42:e2:
d0:4f:1c:86:0f:ee:ff:33:51:e0:81:b4:51:cb:3a:e6:ff:22:
02:71:59:ed:ae:e8:25:6a:0f:a1:ed:af:f6:ae:67:4b:45:75:
89:69:34:86:68:01:2f:cc:33:f3:3a:62:f7:bb:d4:ed:e4:73:
d2:7e:1b:60:de:6f:81:6e:f4:93:3e:d7:e2:26:0a:98:e3:73:
e7:65:9a:fd:c3:f9:8a:32:ca:16:ef:be:ec:91:7a:8a:28:9e:
a0:7c:15:35:3d:9c:b0:4a:48:a8:16:e7:5e:3e:7d:68:47:f6:
fc:59:2f:3b:e0:01:80:6d:cb:cf:42:1e:96:7c:91:8f:65:c4:
5d:0e:a5:ca:1e:cf:a7:9e:ec:c4:78:ef:df:6a:b8:c1:c7:a3:
7f:10:d4:2d:b4:93:08:f0:44:c0:63:12:db:39:cc:33:f4:8c:
55:79:4c:1c:6d:8f:51:1f:ae:14:60:3e:28:6b:77:93:e1:96:
b3:05:5f:7e:d5:22:08:11:69:33:f0:b4:0f:d3:3c:a7:bd:2c:
fa:38:24:2a:84:7b:0f:8b:ff:5a:c6:0d:f7:94:19:ff:27:1e:
49:05:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org