Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a08aa45-cb86-3b31-8509-7cba72242639.roa
File: 1a08aa45-cb86-3b31-8509-7cba72242639.roa (raw, json)
Hash identifier: T6Y0EyccNypMpM9r15wpptiB2Ds9NyGngZAVN+5JsXg=
Subject key identifier: 30:0E:E6:39:02:56:BC:60:A0:36:49:3B:3D:58:53:84:A5:7D:6E:52
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AB694DB5CFC31C24DE83A4
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a08aa45-cb86-3b31-8509-7cba72242639.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ab:69:4d:b5:cf:c3:1c:24:de:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=c4dd396a-7236-41af-946b-26dee71a9007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:ee:c1:b0:d8:2d:c0:34:2d:1e:8d:81:94:
2a:64:45:f3:aa:85:47:cb:81:bb:83:c8:7f:52:69:
db:b3:4b:b6:ff:b8:d7:5a:df:f3:76:b8:80:b2:ad:
22:eb:1e:8e:07:f8:a5:f3:ba:b1:c1:06:c0:3c:0e:
0d:0a:7e:0e:c5:f6:0d:28:c9:fd:6f:43:20:73:ae:
c5:9a:08:6f:cf:cf:4f:29:9d:0a:2e:7e:f4:a8:6e:
5a:ac:56:ce:9a:cb:05:6d:2f:27:e7:f7:d5:6e:7c:
98:8e:59:dc:b3:9b:0c:38:07:ae:4f:93:34:48:c4:
27:1e:6c:fa:24:3e:3a:35:ab:ea:e6:7b:7c:58:b9:
f4:94:ea:d0:88:f0:0e:e8:15:51:4f:3e:ca:fe:94:
b2:77:4a:d5:61:62:94:ea:68:6f:73:ed:a7:29:e8:
65:9c:de:83:19:90:55:12:74:60:0a:b3:aa:66:89:
63:4e:b4:a7:87:6f:1f:4c:eb:9a:3e:8a:de:6f:68:
d7:0f:57:cb:b0:68:29:2f:a2:e0:e2:04:e0:04:15:
bf:03:20:b8:92:79:1c:1a:75:a0:7c:1c:9b:08:c1:
3e:f7:b8:02:ed:b9:de:e6:91:11:41:e8:52:be:c4:
3e:40:62:eb:22:93:09:05:22:cc:d0:d8:99:86:4a:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:E6:39:02:56:BC:60:A0:36:49:3B:3D:58:53:84:A5:7D:6E:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a08aa45-cb86-3b31-8509-7cba72242639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:1e:08:dd:bf:4d:41:8c:26:3e:c6:dd:e6:0f:1e:6d:52:c8:
72:c6:9a:8e:e5:52:35:bd:d7:60:bd:41:d3:13:88:c3:1b:8d:
0d:18:17:82:78:7e:01:f5:94:47:80:26:45:d4:38:b4:c2:a0:
eb:fa:dc:eb:76:61:08:19:60:24:38:86:85:9b:f3:7f:fe:1c:
d6:66:da:78:00:69:2c:88:07:ed:d1:6f:bf:d6:66:e4:c4:80:
02:dd:ed:08:10:82:de:0c:84:18:c0:fd:a5:bf:2d:c4:22:45:
6b:02:83:92:71:fd:c3:21:cf:1b:ad:0e:66:9c:78:78:cf:f7:
c7:2f:5a:5e:63:fb:30:6b:9a:dd:14:e4:92:90:fc:f7:88:7c:
95:9d:68:7b:3c:cc:c5:7d:25:09:ca:1e:d1:fa:7d:1b:50:d5:
23:70:80:9a:be:71:80:06:c9:e2:10:3b:54:48:61:31:7d:77:
bc:df:47:48:23:f9:2a:8f:cf:7d:5e:8f:04:6d:ff:a9:eb:16:
57:c2:34:37:80:81:1e:4b:7b:fd:fb:d7:28:0a:d9:42:ec:a9:
2b:62:77:85:ad:b5:b2:cc:4e:c4:a6:77:4e:65:ff:53:f3:16:
dc:f8:4c:e9:11:a4:19:ec:10:30:ad:93:54:4e:71:97:8d:2b:
4d:af:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:11 2023 by rpki-client on console-ams.rpki-client.org