Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c1e1c2c-3b8e-302e-adf8-f6de91eb8b38.roa
File: 1c1e1c2c-3b8e-302e-adf8-f6de91eb8b38.roa (raw, json)
Hash identifier: D+or3YF8qT6/oetCPybp8uoGLOmpSxIFh8dNQDYBGaI=
Subject key identifier: 7F:BE:6C:D1:1D:1D:EC:B6:A7:82:D3:B6:DF:33:63:A6:5D:B1:C5:B6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583C2A5F8FFF19DE3297C3449480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c1e1c2c-3b8e-302e-adf8-f6de91eb8b38.roa
Signing time: Mon 06 Dec 2021 05:00:00 +0000
ROA not before: Mon 06 Dec 2021 05:00:00 +0000
ROA not after: Sat 09 Mar 2024 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.188.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:2a:5f:8f:ff:19:de:32:97:c3:44:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 6 05:00:00 2021 GMT
Not After : Mar 9 05:00:00 2024 GMT
Subject: CN=03e45b63-047e-460b-8b83-c9411afede2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:99:dd:3b:e2:5c:94:9d:3b:4e:7b:d7:0d:
a3:90:7e:22:bc:23:5f:13:89:77:89:d2:c5:9d:54:
42:22:f3:96:00:b4:c3:cc:c4:b4:ae:e5:82:e2:13:
d5:9c:4c:20:01:4a:20:0b:6a:16:cb:8e:5d:56:00:
8c:99:11:2e:c2:22:60:e5:f9:e3:52:2c:c0:dd:2c:
b4:77:ff:2d:3f:f7:55:68:9a:8b:a1:9b:7e:e9:1d:
74:cb:a2:3c:aa:90:f3:6a:7f:8e:4c:ea:1d:85:6d:
9b:aa:94:68:61:f4:1a:b3:b5:83:d5:11:89:16:64:
ed:de:4d:63:6a:ec:80:08:73:10:d3:2b:4e:d7:8c:
4f:59:cf:f8:69:ee:48:6b:d7:cd:13:b0:d4:6c:38:
70:4f:f6:b8:75:a1:83:7a:2c:c6:af:93:af:53:48:
9f:68:ef:43:e8:7b:9f:1b:2c:9b:97:60:36:b3:ee:
32:1c:cc:d4:d8:3e:df:48:0b:e3:8d:12:31:6b:10:
f6:e5:dd:76:f3:3c:2a:0d:86:e3:ef:75:98:2f:ff:
93:a6:b3:ff:00:f4:31:49:fd:ef:aa:53:04:fb:58:
ab:f7:c5:c2:e0:e5:49:8f:a8:25:f6:2b:4f:34:fd:
b3:00:5e:a8:e7:1c:de:bf:16:ca:7d:97:95:b6:70:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:6C:D1:1D:1D:EC:B6:A7:82:D3:B6:DF:33:63:A6:5D:B1:C5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c1e1c2c-3b8e-302e-adf8-f6de91eb8b38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:cc:28:4a:b7:5b:c5:da:17:b2:c4:ac:1f:06:6f:5c:17:6e:
7f:b5:50:2d:89:12:cf:41:8a:b8:42:82:10:87:be:43:65:b7:
b1:0c:bd:89:ad:20:3c:7d:b7:c0:5d:e8:40:52:a9:56:7e:cf:
92:b0:d7:ce:7b:d6:c4:fd:aa:7e:c3:7f:aa:9a:06:f4:d2:32:
9f:c7:9b:2c:c3:a0:cd:57:ed:31:7a:3e:56:65:55:8e:ca:76:
bc:04:38:cb:7e:60:f0:b7:4b:bc:7a:cd:12:90:dd:be:86:9b:
52:e7:c3:db:22:39:43:da:5b:b0:3f:51:b7:1d:07:23:c0:35:
c2:70:f7:d5:b3:6f:b8:e7:70:b5:3a:b7:c3:d3:d5:2a:f3:33:
52:18:f1:1f:f0:57:31:1e:43:3e:d8:aa:fd:c5:68:bf:00:e2:
5d:b2:1c:d4:f5:fe:0f:e1:9d:0d:06:5c:c6:fd:78:a2:46:af:
a8:39:6f:b9:ba:d0:d6:b9:89:8a:d4:8f:0d:87:d2:c5:92:44:
9c:8c:9d:fa:1e:69:1b:35:96:ad:19:06:a5:73:a5:01:ae:2b:
0e:14:6d:7b:38:49:92:1d:87:44:be:5c:9e:eb:c9:65:13:44:
4e:76:76:4c:c9:2a:0c:d3:05:ff:e2:85:0a:c2:df:e7:2d:c1:
f7:db:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 05:38:57 2024 by rpki-client on console-fra.rpki-client.org