Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1d0b49f8-264c-3ec1-bfd5-eb602bcb89d4.roa
File: 1d0b49f8-264c-3ec1-bfd5-eb602bcb89d4.roa (raw, json)
Hash identifier: FjOVOhmrDpQn9PSXNLEeZ4TdDSkeaK+T9bzxEX6c0Bs=
Subject key identifier: DC:E2:B0:64:44:5B:A1:09:1F:2E:6A:EC:19:87:7A:2F:FE:19:5E:0D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BB0BBE75A43367DD093EC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1d0b49f8-264c-3ec1-bfd5-eb602bcb89d4.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bb:0b:be:75:a4:33:67:dd:09:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=6314a383-77c2-4b02-b878-cd32b8c5811e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:8d:da:b6:c5:0c:b3:f6:df:0c:f3:12:68:
b3:27:86:fe:55:df:8c:3e:f6:36:12:c4:7a:bb:ab:
24:f6:fc:2a:1a:f0:65:d9:54:41:f5:94:08:73:5a:
e9:aa:f5:33:98:ea:5a:29:bb:0d:c9:4f:a9:05:dd:
6d:39:a3:72:b0:7e:69:9e:34:27:98:41:c7:41:e5:
b7:6f:16:0f:3e:31:2a:6b:f6:c3:0c:60:50:5a:49:
41:c9:dd:cf:89:16:2e:c2:8a:33:82:a2:3f:28:df:
9d:df:c6:6b:cd:c7:00:b6:b7:76:d1:45:02:a3:fc:
42:16:2c:05:96:27:b9:3c:ec:dd:f5:a7:ac:24:a5:
86:53:cc:aa:9a:bf:05:e5:a6:95:d1:be:fb:0c:2f:
ef:27:05:da:5e:f9:68:e3:0a:c4:32:fc:1f:59:7b:
17:4f:24:76:a6:b8:cd:af:80:1b:1a:34:45:6a:a4:
9c:ff:98:6e:50:a4:43:73:56:16:e7:62:ce:7e:21:
9c:46:fb:4e:21:df:fb:d6:fe:c5:9e:ca:66:52:09:
f7:1f:b8:7a:f3:82:81:de:77:83:89:df:95:ba:81:
87:08:69:7e:4f:92:bb:05:8b:53:c9:ab:fb:9a:95:
42:a7:61:a6:06:d8:cf:77:ed:6b:a7:f1:d6:36:a4:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:B0:64:44:5B:A1:09:1F:2E:6A:EC:19:87:7A:2F:FE:19:5E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1d0b49f8-264c-3ec1-bfd5-eb602bcb89d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:b7:f0:bf:0d:a7:5b:47:bf:3c:22:cb:92:c8:88:e8:81:59:
24:3b:43:93:92:55:68:8b:33:4f:a2:1d:09:5e:b4:3f:3f:4d:
1d:36:96:d7:4e:3c:d3:94:ef:ee:cd:c8:58:a6:74:a6:db:6d:
a8:f8:3d:61:82:ac:a8:07:7c:c5:97:59:02:c1:5a:27:fa:f9:
bd:08:8e:e7:f3:c9:88:db:c3:95:e0:8d:b1:8c:44:e8:38:9a:
33:54:d8:4b:44:6f:ab:8b:77:0c:b2:a0:9f:ee:ba:8a:e0:02:
24:46:81:ff:0b:c1:dd:cb:a2:14:57:03:5d:2f:4a:76:80:72:
fc:b9:f1:c7:6d:0c:8a:5e:f5:f8:47:88:bb:32:df:70:9d:cb:
e6:31:b0:e3:2f:b6:df:dc:0c:4c:89:85:93:af:63:68:c1:d6:
55:c6:82:36:45:a4:23:9a:07:79:8d:6d:50:43:76:c7:ef:a3:
45:1c:9e:c2:ac:44:3f:c3:70:61:a4:ad:47:b4:cb:bb:fd:5b:
29:a6:a2:10:14:3d:74:be:b6:67:16:92:24:30:86:71:a0:0e:
24:e0:b4:fa:e7:74:23:6a:52:ee:f3:aa:18:bc:c6:d3:e6:c0:
e0:d9:b7:b5:d5:25:40:05:c0:be:9f:e1:e3:f6:ba:15:b1:a6:
55:17:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:02:12 2023 by rpki-client on console-ams.rpki-client.org