Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13bfd6a5-0f2a-3500-8e84-6f1709d88fcf.roa
File: 13bfd6a5-0f2a-3500-8e84-6f1709d88fcf.roa (raw, json)
Hash identifier: BkAe/jG2NZz4NmK977sykv+E4ErTYXslg+3GugQItG8=
Subject key identifier: B1:D8:52:5E:94:30:43:CA:77:78:22:63:6C:06:AA:60:3D:6B:41:7C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A35B6251AC0F735D0F8FC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13bfd6a5-0f2a-3500-8e84-6f1709d88fcf.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.148.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a3:5b:62:51:ac:0f:73:5d:0f:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=78f09d03-2701-46c8-a94d-1998b9099ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:b8:47:c1:26:ff:9e:a2:f9:3e:31:61:25:
6b:0e:e9:1a:d3:46:de:0a:aa:61:7f:34:7d:54:34:
8d:ee:27:15:ce:e3:e8:94:4e:8c:32:d1:ef:26:9e:
1e:f1:f3:78:65:be:0b:7a:63:92:95:d3:04:87:62:
e3:12:cb:f3:9a:a5:57:7c:4b:95:0b:d5:ac:e2:bf:
6d:27:90:3a:aa:28:da:e5:cb:fe:d3:5d:54:c0:7a:
98:90:99:a5:2f:ce:0b:f3:bd:98:5a:a3:1c:22:bd:
16:19:0f:46:23:a2:0d:11:66:27:5d:f2:04:7b:4c:
91:5c:11:91:4b:da:26:c4:4a:04:6b:1a:90:08:bb:
62:57:86:44:9f:5b:92:33:01:c4:13:7a:8a:49:fe:
e6:da:a3:01:32:7f:11:a1:04:f7:f7:6a:eb:b6:df:
81:c4:1d:59:60:0d:ea:ce:0e:56:71:e5:23:05:bf:
e8:47:c0:e0:53:07:1c:92:4f:94:03:15:4e:e2:0b:
e9:49:17:7f:75:76:8c:9d:d4:32:3c:78:35:ec:b1:
f7:37:7b:cf:be:7f:98:39:3d:40:d2:ee:70:66:7f:
97:2d:b5:ff:5a:29:61:f6:09:c3:5d:0b:bd:b9:14:
5a:04:d9:15:6f:40:7e:c3:40:63:71:c5:0d:9a:d3:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:52:5E:94:30:43:CA:77:78:22:63:6C:06:AA:60:3D:6B:41:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13bfd6a5-0f2a-3500-8e84-6f1709d88fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b6:bd:cd:ab:f9:71:61:8c:62:02:dd:10:b4:63:d6:c1:cb:
41:c7:a4:0b:74:e2:98:e5:cc:26:0b:32:75:b6:c2:bf:ee:da:
92:95:80:94:61:78:21:c5:e6:38:29:f9:bf:7d:43:7d:30:76:
c5:bb:b6:85:4b:fb:41:9c:f5:4b:3a:01:9d:41:67:cd:c6:90:
71:bd:a7:a8:08:b5:bc:a3:6e:f8:66:80:0d:a7:ca:be:fd:80:
fb:b1:ea:02:62:c9:11:d2:51:9a:3a:4a:1f:fe:f3:05:c6:ae:
99:16:0f:b7:4f:92:39:94:2f:a9:43:fe:12:6d:d4:27:fb:17:
86:50:56:d0:1a:f8:23:27:30:a6:69:ac:c5:f9:cc:68:71:27:
6a:26:1b:71:f8:e1:ab:10:22:aa:48:54:ba:c8:c1:78:3e:a6:
d3:8b:b4:f0:ee:ff:80:db:2c:07:7b:4b:68:33:88:c8:f4:28:
c8:66:58:f2:4d:5b:cb:5e:d0:33:61:ea:7f:fe:2c:78:f6:03:
dc:65:d0:a5:67:4b:0f:be:df:a6:8a:6b:bb:cc:f8:71:42:da:
9f:fb:be:33:64:7a:a7:ac:32:35:37:ad:96:68:d7:26:8c:1a:
b4:10:29:2d:6f:29:3b:69:d4:9a:e8:12:da:d5:f0:24:25:60:
5e:05:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org