Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/4f1c7a2b-d197-34a3-abc8-18a096994927.roa
File: 4f1c7a2b-d197-34a3-abc8-18a096994927.roa (raw, json)
Hash identifier: 2DY6VWvxKK7F3RQ+v5WGoxHc2kyAFexndfhl4jJVIt0=
Subject key identifier: E0:08:0B:F2:CD:0C:A2:F5:65:20:05:81:AB:1A:E9:E7:36:A4:A3:6A
Certificate issuer: /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial: 010D0C9F432858380E1B0C34C92B1A0DDF2DEF80
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/4f1c7a2b-d197-34a3-abc8-18a096994927.roa
Signing time: Thu 23 Jul 2020 04:00:00 +0000
ROA not before: Thu 23 Jul 2020 04:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 20115
IP address blocks: 104.171.208.0/24 maxlen: 24
104.171.209.0/24 maxlen: 24
104.171.210.0/24 maxlen: 24
104.171.211.0/24 maxlen: 24
104.171.212.0/24 maxlen: 24
104.171.213.0/24 maxlen: 24
104.171.214.0/24 maxlen: 24
104.171.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:0e:1b:0c:34:c9:2b:1a:0d:df:2d:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Validity
Not Before: Jul 23 04:00:00 2020 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=07b41fde-f9b5-4452-836c-a97db9788453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:08:bf:a2:0b:14:c5:c6:5b:e8:63:79:ca:
94:ed:7a:32:2f:97:06:2a:43:76:e9:d1:00:d4:13:
3d:b9:c3:6f:6b:94:95:64:00:fe:88:e7:5c:30:da:
51:d4:e1:64:20:c8:5d:09:c5:53:75:28:13:3f:64:
fc:51:a7:70:40:74:05:e2:97:ed:a3:a2:6b:f2:8d:
f8:d6:48:f2:43:ba:8e:b2:52:12:ef:2f:5a:f2:d9:
5e:14:4c:13:e9:dd:12:d8:7b:09:92:8b:2b:bf:fa:
9f:7f:cd:46:78:3b:70:fb:cf:6b:3c:be:b9:12:8c:
68:2b:d6:7b:a2:51:0f:ea:95:56:e5:3d:1b:31:89:
e0:4f:df:2d:ef:f8:de:20:1a:5b:f1:fa:46:e1:c0:
69:71:6a:af:f4:ff:48:3f:c8:0d:2c:00:36:73:dd:
7a:28:08:3c:33:b0:20:68:83:3f:21:15:91:07:1b:
3b:83:45:cd:df:48:f5:16:5a:0c:a8:68:7e:5a:ce:
fb:8d:c9:17:e7:35:c0:fe:79:07:24:c0:85:f5:2c:
ed:c9:e2:77:d5:d8:1c:1a:4c:dd:24:dc:0f:bc:54:
ee:56:58:bc:85:d8:21:2f:27:99:45:ea:ff:b3:34:
67:24:7a:67:c1:4f:1f:eb:ff:df:26:ed:d6:12:85:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:0B:F2:CD:0C:A2:F5:65:20:05:81:AB:1A:E9:E7:36:A4:A3:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/4f1c7a2b-d197-34a3-abc8-18a096994927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
X509v3 Authority Key Identifier:
keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:11:ff:41:21:fe:9e:55:71:12:31:ba:26:c9:9a:e4:79:23:
88:fd:9b:5d:f4:5d:01:10:24:2a:a4:a3:48:9f:66:29:4e:be:
b0:58:61:72:78:89:05:e0:15:49:a4:0c:9a:53:d4:de:ec:2c:
7d:75:97:59:5b:a4:2a:55:fc:9f:be:a1:d1:f9:92:f3:3b:80:
16:16:de:14:f9:68:a1:00:27:32:75:d6:75:1d:60:97:e9:c5:
07:87:28:ce:ef:86:fa:34:7d:6a:c2:15:07:cb:c3:46:b6:72:
c9:0d:9c:bc:a7:a1:28:39:a0:d9:cc:48:a2:7c:f8:da:0a:8a:
a4:9c:2e:d8:1f:82:e3:6d:56:9a:cc:c4:f6:84:df:dc:2e:94:
2d:d0:65:35:2e:d4:f8:09:94:23:5d:ae:fb:36:06:14:fc:e0:
62:eb:9d:26:80:0e:64:82:59:43:42:be:c4:8d:6b:87:ed:61:
2c:00:75:97:e6:78:17:c5:5b:a9:d8:7f:f8:04:7b:a5:16:43:
8f:c7:2a:d7:54:73:e3:d6:9a:eb:2d:ad:40:d0:73:6a:5c:5c:
a2:71:33:e1:6e:a2:1d:59:7f:6c:d9:ff:53:09:70:27:6e:0d:
dd:ea:d3:73:aa:80:77:b8:fd:27:58:a1:e1:73:13:61:06:e9:
71:5e:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:03 2023 by rpki-client on console-fra.rpki-client.org