Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/001ec11a-6ac1-304e-adab-5ac01d5a9626.roa
File: 001ec11a-6ac1-304e-adab-5ac01d5a9626.roa (raw, json)
Hash identifier: 6wqJwEQkJ8XcHPog/bYDOKDLRlKgAxnteEQ2tmy7oH0=
Subject key identifier: 1E:0E:66:9D:49:AA:3D:F8:45:3A:84:10:75:CC:F6:EB:47:85:BF:5E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AA86034C58B4AE3DE37040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/001ec11a-6ac1-304e-adab-5ac01d5a9626.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:aa:86:03:4c:58:b4:ae:3d:e3:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=d34dca65-5a6a-42aa-825f-605e2dbde303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:22:51:ac:f1:9a:17:2b:27:ac:57:2a:d6:
b7:cd:28:c0:3a:da:28:a4:71:79:41:43:7a:94:1c:
ba:e9:07:1f:99:90:75:10:5a:02:64:40:a6:93:63:
23:3a:4e:3d:cf:6d:2a:d2:dc:38:ad:54:ee:c2:94:
ea:ed:85:eb:13:5a:04:89:f6:65:21:51:6e:db:81:
15:8c:a2:67:07:34:8c:bd:14:d8:c1:e1:65:9d:4a:
0f:9c:56:33:2d:73:78:c4:52:3e:9d:b0:0a:7b:c2:
ca:12:eb:8c:0a:42:d5:23:53:f4:39:c0:1d:c4:45:
ae:1e:f4:dc:11:61:9d:20:32:49:ef:59:15:2f:e9:
a2:4d:72:26:18:f6:82:88:f0:ed:10:93:bb:10:ec:
ad:ee:ac:c4:3c:6f:73:b7:8d:5e:55:5d:43:a5:11:
4a:2e:d3:fc:a4:f0:d3:d8:25:db:7c:80:be:94:3b:
60:70:c7:30:44:f8:9e:24:5d:97:ac:69:c3:9e:b8:
91:85:dd:3f:c9:84:59:de:ca:11:e7:a3:14:ac:07:
4d:09:a7:89:bd:bf:c8:fc:c0:e2:4a:ca:36:ff:82:
24:e9:01:26:10:59:48:27:fa:dc:9b:e9:96:22:e8:
6a:e8:75:09:12:0d:e6:b4:af:ee:d6:3d:2e:fe:3f:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:66:9D:49:AA:3D:F8:45:3A:84:10:75:CC:F6:EB:47:85:BF:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/001ec11a-6ac1-304e-adab-5ac01d5a9626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:e7:f3:c0:a0:c3:37:41:70:fb:de:00:90:41:46:9c:a7:1b:
21:fa:f5:e0:d9:26:36:74:6c:01:5f:78:31:bd:63:0d:94:78:
16:13:f3:c3:95:2b:eb:e8:38:06:f9:3a:53:36:24:0d:a9:7e:
cb:6a:02:fe:97:75:19:a7:ec:9c:00:91:92:6e:12:26:30:f1:
f2:2d:5b:14:b8:e8:2e:43:07:2d:a1:fb:3b:0a:42:92:04:b4:
bb:e3:e6:d5:07:7d:96:0d:83:e7:7c:80:f1:c8:b9:8a:9b:89:
f2:e6:b8:25:93:3f:cc:5f:59:4f:1c:ad:ae:54:09:1f:58:0c:
fc:45:89:3d:b5:28:f1:36:c1:ac:94:50:df:9b:b0:7c:d5:5b:
b4:d2:a8:ef:51:8a:8c:36:4b:2e:6b:56:29:01:74:f1:28:87:
7e:c7:da:4b:b7:59:42:49:4b:37:45:81:63:c0:7a:95:fb:19:
49:41:e0:4e:be:60:76:e7:f0:aa:2c:b4:5d:a9:9c:fb:cf:17:
96:1d:7d:8a:cd:b5:cc:68:3d:c8:e4:20:d7:bb:b1:33:66:87:
14:d5:af:63:bf:a6:ff:9a:b2:0d:58:05:bd:db:a9:c4:9a:48:
b0:cd:de:9b:54:fe:0b:4d:06:9d:1b:24:11:cc:68:2c:13:da:
4e:58:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:11 2023 by rpki-client on console-ams.rpki-client.org