Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/19675709-04cf-323e-8ae2-7e46546ebe54.roa
File: 19675709-04cf-323e-8ae2-7e46546ebe54.roa (raw, json)
Hash identifier: IbExuUGGdSNQTGxd3f75UP6vkHAZbLexZjSBwwQO6EE=
Subject key identifier: D6:0E:B9:1E:DD:03:63:6D:18:94:BF:5E:A9:9B:1B:FD:66:2C:FF:DE
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BB4B63DD87470272A40C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/19675709-04cf-323e-8ae2-7e46546ebe54.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:4b:63:dd:87:47:02:72:a4:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=1c9513a5-9e01-4cf5-86c3-f2f98da7ef2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:03:20:37:e4:a5:91:db:39:12:2d:81:77:
47:1a:f0:85:8c:42:c7:56:02:0c:b0:76:ba:93:15:
c1:16:d8:51:c8:74:3f:bf:a4:a0:fe:7a:b8:5a:5a:
72:30:92:21:05:bf:8f:e6:00:b1:f8:e3:99:d7:1a:
17:d0:5c:80:2c:03:84:d3:9a:ae:ab:21:2e:ad:c0:
61:7a:68:2c:a9:2b:d8:cb:98:9e:89:eb:7f:84:77:
82:e5:92:97:c6:54:23:e0:e3:97:8e:88:01:cf:99:
75:dd:6e:b3:34:76:c4:0f:13:4b:ea:92:51:9a:66:
5c:12:1f:9d:57:0d:43:de:b8:80:77:60:ad:f0:90:
d7:be:6e:c5:b0:4f:ff:40:9e:02:ba:46:51:32:2e:
7f:9d:0b:22:56:d9:ae:ef:11:de:44:37:79:9c:67:
ad:66:aa:fd:a4:b7:5d:2d:14:27:fd:6b:a7:43:0d:
bc:cb:93:6f:f2:a4:82:42:5f:1c:75:09:ba:81:c2:
78:ae:73:76:ad:a7:a4:b9:2d:45:38:28:13:88:57:
b0:de:0a:f3:8d:c1:67:20:d2:33:eb:ea:cf:ec:bb:
ea:0d:b1:6f:9e:7d:fc:ae:77:57:b3:e2:ad:ae:54:
fd:92:06:2c:f1:bd:f0:ac:37:d6:4b:dd:ba:34:a2:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:B9:1E:DD:03:63:6D:18:94:BF:5E:A9:9B:1B:FD:66:2C:FF:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/19675709-04cf-323e-8ae2-7e46546ebe54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d7:a3:06:be:96:10:18:8c:eb:38:35:93:2e:c6:e9:ea:80:
14:1f:bb:5a:13:80:73:6a:05:8f:d4:17:fe:fd:47:96:5c:b6:
a9:e0:17:3e:81:e7:71:fa:c1:51:8b:cd:69:04:21:55:dc:ca:
23:7e:06:20:53:89:b5:fb:12:2e:c2:f5:f4:9a:74:c8:03:db:
0b:0c:fc:4a:3b:cc:2b:1b:89:61:54:6d:4b:b7:20:06:a8:d7:
1f:58:bf:0b:06:bd:17:1a:83:39:09:7b:92:bf:0a:70:55:b3:
af:af:a6:02:07:e2:d9:ef:77:8d:ea:b4:d2:82:a5:a1:77:af:
9f:2e:5e:34:dc:a3:8e:8a:56:63:0b:66:c6:b5:0a:c3:f1:0e:
55:a9:73:c3:49:9d:93:6e:a7:47:e3:73:9a:b8:03:24:c7:5b:
cd:4f:4a:a6:51:33:a7:3e:58:27:fb:87:20:bb:5c:74:f9:c2:
15:57:c9:df:a5:b5:13:ac:37:77:26:58:4e:2a:2b:27:5e:dd:
b8:e5:9f:ea:ed:27:eb:be:4d:5f:de:7e:01:89:0d:fa:30:26:
ab:96:cf:64:6e:8e:2f:c8:66:6c:13:ff:17:fa:96:2e:ef:57:
4b:32:e4:b0:b2:21:07:d4:19:49:c2:4d:d1:78:77:7f:22:4e:
dd:1e:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org