Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/124ab48f-d6e1-3783-8ea9-d4e86f5bf584.roa
File: 124ab48f-d6e1-3783-8ea9-d4e86f5bf584.roa (raw, json)
Hash identifier: kNpmPb8wcZeIvkI0pRtnE6rja1CQvGgux30ary4sUSE=
Subject key identifier: F2:D4:78:80:CC:F4:C7:37:35:2F:EF:2B:47:72:53:82:80:60:37:80
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7C4DFED69F9A58D8F11D400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/124ab48f-d6e1-3783-8ea9-d4e86f5bf584.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:c4:df:ed:69:f9:a5:8d:8f:11:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=72404eb5-cd29-45d0-a5bb-06eb188f84e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:5e:7d:84:77:35:97:7e:64:43:d8:61:b0:
91:41:7a:43:f1:95:2f:18:5f:d1:7b:af:e6:77:ab:
fe:6a:2f:b9:66:eb:c2:0d:06:8a:98:e8:bd:9e:08:
b4:11:5c:da:34:3b:36:11:c8:dd:94:f2:a3:49:97:
30:4b:8e:87:a1:06:9a:cd:af:53:1e:5c:e5:eb:e1:
b1:60:ab:5c:09:d6:3b:cb:24:2c:c9:5c:98:71:39:
18:44:74:21:73:52:9d:e7:94:b6:e7:68:4e:51:70:
2c:a0:96:72:94:04:ac:f9:8d:99:ad:20:51:d4:c9:
dc:45:41:a1:32:c4:38:ba:48:74:92:82:ff:36:bc:
36:ca:7a:e7:ab:46:bb:b5:1d:94:b7:3e:10:be:17:
67:80:90:9c:e4:cd:f8:b5:6d:2f:c5:29:38:b2:cc:
52:d7:97:68:d4:1e:3d:ce:1c:37:80:9e:c5:4b:a3:
c6:30:64:f5:ad:ae:34:13:0e:8e:74:39:98:a9:fb:
b4:9c:9a:93:0b:b3:ed:92:5f:26:fe:a8:cb:b2:57:
c9:c7:4d:ab:df:dc:75:c7:d7:66:cd:56:c8:d2:9e:
e9:d6:8f:5d:29:25:40:e2:b0:8d:41:91:d0:e5:d6:
57:b4:35:4c:39:14:d2:8a:df:59:82:eb:7f:7a:80:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:78:80:CC:F4:C7:37:35:2F:EF:2B:47:72:53:82:80:60:37:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/124ab48f-d6e1-3783-8ea9-d4e86f5bf584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a3:fc:94:6b:30:e3:e6:40:60:2e:33:b3:be:2c:98:c7:f9:
c8:57:bb:e4:d0:7d:9d:16:e7:31:d1:e9:c7:41:8d:56:65:10:
bc:9b:9b:e7:c6:fb:b4:99:0b:32:1a:4c:db:25:6c:65:22:b3:
6e:4d:41:58:2f:fe:e9:1c:a8:74:c6:68:fa:9a:7c:77:6a:1d:
cc:8d:da:88:be:f9:41:f4:1e:4f:d5:66:f1:5b:fb:38:25:34:
e2:7b:92:62:0f:a9:6c:90:24:79:0e:98:09:da:c9:97:80:11:
8b:28:b4:96:d6:e4:0a:f3:cb:4d:91:48:65:00:60:9b:1d:cc:
03:f3:43:e0:7b:79:60:70:86:eb:58:72:b8:98:3b:3a:b4:b3:
97:e0:d1:72:5d:2e:33:3d:d1:a2:10:e0:7f:f7:d2:35:43:59:
98:d8:40:e7:08:79:a4:35:eb:51:0e:b6:31:83:35:96:4f:79:
c4:eb:8b:e1:55:bd:e3:9c:28:07:1b:73:d1:ce:e6:30:0d:8a:
29:b9:0b:d4:d3:9f:d3:9d:f6:fb:51:19:cb:4b:5e:f2:1a:95:
d5:e4:5c:59:71:95:96:1a:b6:1b:91:36:91:2f:1d:2c:1e:d4:
db:c2:7a:46:0f:98:f0:2b:41:1f:66:27:66:c9:f3:72:76:e8:
64:e4:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org