Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/930cbc37-0a08-3194-bb08-333172130b05.roa
File: 930cbc37-0a08-3194-bb08-333172130b05.roa (raw, json)
Hash identifier: gD7M0pjjJBfjFlb7nDZORQX/AaWlD1WZ+VsTbmKrIhg=
Subject key identifier: CF:F5:0B:1B:63:76:99:90:F3:E0:77:0D:18:C3:CA:8D:6F:42:6F:2E
Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial: 010D0C9F43285838260F570FB6A059AEFF925CC0
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/930cbc37-0a08-3194-bb08-333172130b05.roa
Signing time: Tue 01 Dec 2020 05:00:00 +0000
ROA not before: Tue 01 Dec 2020 05:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 135356
IP address blocks: 104.171.225.0/24 maxlen: 32
104.171.239.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:26:0f:57:0f:b6:a0:59:ae:ff:92:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Validity
Not Before: Dec 1 05:00:00 2020 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=efaa3fac-7866-470a-abb3-94d24bc1f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:60:4c:20:ec:62:a9:59:76:f4:57:09:7c:
14:76:24:a7:51:94:fe:03:e6:e5:4a:9a:a0:01:26:
64:b7:8f:55:ef:57:39:1e:ca:71:3d:88:4d:9b:95:
50:5a:d1:e2:13:e6:92:ae:6e:f2:07:51:00:8d:eb:
31:24:be:b1:91:dd:09:06:d0:45:31:ac:ce:7e:86:
5a:1e:c4:f9:7e:cb:8d:37:95:c1:e0:62:32:d8:76:
75:e9:53:ee:96:f5:1f:5a:17:86:cd:c1:a9:0b:70:
4c:91:16:96:f4:af:ca:83:f0:1f:74:4a:5d:7b:64:
9c:6f:76:e3:cb:1f:29:da:a7:63:be:f3:7b:c9:e5:
9a:8c:85:d5:d6:2e:54:ed:96:94:43:c4:d4:52:7a:
24:58:14:4b:6d:f7:d3:82:db:93:af:6f:78:c2:a1:
38:ad:dd:47:a4:f0:8e:cd:f0:b4:83:a1:4a:ad:c5:
e2:55:6e:9f:40:e5:01:54:d6:6c:5d:0a:98:86:8b:
e5:98:da:a3:d0:2f:55:0d:c3:a8:86:68:18:72:9a:
46:ec:a5:5f:dd:64:20:57:34:d2:44:55:96:9c:4b:
c5:76:0e:c9:7d:7f:68:ae:1c:aa:ad:7a:21:3b:09:
90:9f:86:d6:2f:ce:3d:4b:ee:d3:bd:09:42:87:e1:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:0B:1B:63:76:99:90:F3:E0:77:0D:18:C3:CA:8D:6F:42:6F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/930cbc37-0a08-3194-bb08-333172130b05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl
X509v3 Authority Key Identifier:
keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.225.0/24
104.171.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:dc:4d:c4:5f:2c:f4:04:1e:f4:da:3b:30:dc:56:cf:8a:ff:
83:58:a6:76:33:4a:11:7f:15:aa:09:7d:e6:65:f2:5b:1c:19:
10:92:c7:8a:70:79:bf:c2:41:e2:0a:05:9a:e4:d8:cd:89:ad:
d7:dd:54:37:c1:23:28:53:94:73:f6:69:5f:79:11:ed:62:5c:
d0:ed:9e:a4:63:0d:4f:41:08:c5:60:ec:ff:67:13:8b:00:07:
ca:d1:b3:25:8c:97:2b:66:bb:9c:9d:91:2e:e3:f9:de:d9:30:
93:eb:45:df:15:16:ba:fa:cc:81:2a:13:58:c3:9c:f3:b3:69:
3e:59:2e:ff:6e:23:5b:3c:00:4f:bf:4f:95:37:c1:e8:b1:89:
98:bc:a7:86:8b:27:29:c6:0d:6b:d3:40:97:e3:bf:e0:c4:17:
2b:89:d7:e1:ff:f1:cd:bb:e4:d0:ae:ad:ec:43:d9:4d:68:7a:
dc:4b:4b:c0:44:90:03:6b:09:0e:4c:84:eb:83:07:9a:da:61:
30:9a:39:a2:02:9b:d2:09:63:66:1d:cc:46:88:71:47:f6:b6:
c3:3b:82:3a:c3:71:d6:b3:a3:94:31:cc:3e:66:d6:23:2f:54:
0b:a6:68:87:65:4c:dc:db:22:44:d5:60:73:9c:ca:9e:3e:d0:
10:60:05:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org