Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/14b088aa-0b14-3a26-96e5-8b3575597fec.roa
File: 14b088aa-0b14-3a26-96e5-8b3575597fec.roa (raw, json)
Hash identifier: B6e6+ffnoqiFw3PULjJ08rUUQVekYk8sd1kjEClxBVA=
Subject key identifier: 3B:06:34:77:3E:B0:B3:DE:6A:4E:13:A1:FA:C0:B6:25:62:3A:A7:B7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AF10D157B41EFF427E2600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/14b088aa-0b14-3a26-96e5-8b3575597fec.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:af:10:d1:57:b4:1e:ff:42:7e:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3f863680-52c5-49c9-a8d6-e5a2bb758a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:57:60:ff:6b:e2:00:2a:5e:a9:1c:64:38:
7d:f3:68:ac:1e:e8:08:48:88:ec:0f:0b:78:0c:96:
c6:32:9a:02:5e:56:7f:fd:fa:dc:fb:9c:11:a7:96:
0a:6b:e8:f7:7b:cc:52:bd:97:07:4d:7d:02:e8:3f:
66:d0:22:62:61:a3:f9:4c:f8:5d:44:32:97:0c:93:
02:f6:09:4d:bf:c5:45:9d:fe:d2:c8:f5:b4:20:49:
d6:1a:7d:d4:49:9a:9d:27:7a:0e:96:25:55:9d:e4:
d6:3a:4e:1b:a2:2f:c1:f9:7c:d4:90:71:f4:5e:08:
41:9e:01:b9:77:31:82:d3:88:43:fd:3e:ae:7c:39:
88:d3:6a:34:f9:eb:c9:15:dd:6a:9a:ff:bc:3a:ae:
1d:98:95:e6:10:f3:d9:72:37:93:f2:9d:00:b5:f7:
9f:96:11:13:97:36:78:41:d1:00:1a:e5:1b:e9:80:
3e:b6:bd:88:fc:a8:a8:b5:14:a5:e3:c4:59:58:87:
5d:01:bb:b6:4f:18:94:36:be:19:e9:e5:08:2e:20:
fa:35:1b:cc:8f:6b:6c:78:25:c5:87:30:3e:fa:c5:
9e:ce:f5:b8:45:01:c3:ce:46:8c:8c:a3:80:80:d0:
73:e2:b4:bd:0a:82:59:92:9b:84:ce:3c:58:b1:d0:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:34:77:3E:B0:B3:DE:6A:4E:13:A1:FA:C0:B6:25:62:3A:A7:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/14b088aa-0b14-3a26-96e5-8b3575597fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:04:14:39:35:25:a1:6a:90:bc:70:1a:43:db:01:fb:5e:ce:
02:14:67:0f:1d:86:62:5e:d0:10:86:7a:c5:40:d0:cc:f7:63:
de:33:b8:b8:75:f3:11:b5:b6:17:49:ff:63:13:f1:05:ea:31:
8f:6b:a6:00:52:b3:59:27:e2:52:35:db:5b:1d:08:c4:46:8f:
a0:07:b4:a6:15:d7:b1:3f:b2:2c:ff:84:f3:7a:42:7c:a4:33:
85:a8:fe:88:9b:b6:1e:23:35:38:28:82:0a:57:a7:cb:89:4b:
bb:75:37:0d:b2:2f:96:08:f0:d3:23:8f:7f:8d:ed:a3:07:9b:
ed:da:a8:b2:6e:e3:d1:c0:78:2a:18:33:8e:63:96:5c:6d:ae:
c3:67:2b:5a:94:17:dc:c8:1a:1b:39:d3:90:9e:68:19:a7:95:
24:0e:7e:06:d8:22:9a:27:96:60:24:e4:6b:c3:aa:19:7d:85:
3f:98:ab:46:8f:1f:9c:c7:dc:d1:78:cf:cf:55:57:a1:1b:d8:
b3:18:6e:40:b7:da:3f:bf:62:23:2e:8b:0e:fb:4e:f6:b8:05:
6a:6b:52:5f:af:7b:b6:c4:63:de:f0:59:fd:d0:d2:be:2d:2c:
49:37:ce:f1:f9:c1:82:dc:05:eb:5d:6b:90:ea:5f:8f:e8:d8:
96:12:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org