Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/205c4cea-bc03-3de2-808d-be6feef02f45.roa
File: 205c4cea-bc03-3de2-808d-be6feef02f45.roa (raw, json)
Hash identifier: pKyEIiNnfw6AQwh0ga4GcV1W/8DU+ssEZKvdcD7Mf2Q=
Subject key identifier: B7:4D:BE:70:E5:43:39:26:89:23:11:F4:3A:B5:59:66:A1:48:D9:2E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B2722473FD1B318F53EE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/205c4cea-bc03-3de2-808d-be6feef02f45.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b2:72:24:73:fd:1b:31:8f:53:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=68fc5b72-32d3-4f11-9419-868178ec0c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:81:60:ca:0d:22:a3:3f:0c:e9:d1:e5:f0:
1c:aa:3f:63:bf:04:16:b4:ce:98:03:9a:92:dd:5a:
8a:e3:4b:c8:2e:7d:0f:a6:67:74:3e:ce:c5:56:54:
63:35:02:91:74:ad:67:84:7c:50:81:7d:4b:74:c3:
ce:06:36:5b:b0:97:19:4f:dd:1f:58:10:07:c3:5a:
e4:ab:7b:ec:df:78:e2:3c:2b:af:ca:ec:82:16:b3:
f1:8e:49:2a:5c:96:b6:a2:1f:a1:a5:e4:cd:c6:a5:
e1:a3:c1:cb:6c:1e:c7:5a:71:eb:d5:fa:7a:92:9b:
d6:f3:85:f2:4a:9f:df:b3:73:68:c0:7d:fb:fa:16:
33:b1:e4:ff:d8:0f:dd:b3:ca:c8:91:eb:ea:4c:61:
b4:93:bb:99:38:f1:85:b8:0c:62:2d:be:35:73:7d:
82:66:d6:80:9f:63:12:c8:5b:02:9c:b6:66:87:1b:
11:ca:d7:c9:ef:50:2a:2e:1d:42:c5:62:a4:e7:5d:
4d:06:80:09:00:46:e6:4f:b1:59:52:5c:a4:34:90:
7e:1b:e4:05:3a:46:03:db:64:5d:66:a3:f1:8a:82:
fe:72:a4:06:cd:ff:bd:24:c5:bd:0f:6e:d3:f5:7c:
bd:15:81:fa:be:f1:bd:d6:6a:d6:22:9c:06:e6:f7:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:BE:70:E5:43:39:26:89:23:11:F4:3A:B5:59:66:A1:48:D9:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/205c4cea-bc03-3de2-808d-be6feef02f45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:88:f9:c5:c9:d2:cc:ce:0d:49:df:b1:56:e4:08:cb:34:71:
2d:1f:90:4d:62:dc:1f:10:7b:45:d0:3c:56:f7:06:8f:42:22:
02:d0:b9:61:29:4b:a8:02:42:46:27:de:d4:cf:77:5c:7d:39:
00:99:eb:7a:41:1a:f8:f0:0d:8e:0a:d4:a7:13:82:8d:6f:a3:
65:5d:01:1e:ba:72:51:06:3e:89:38:94:08:77:04:3a:68:16:
c8:6d:3c:9e:c0:0a:46:31:31:5f:c7:31:14:df:f4:c3:a2:fb:
9b:fe:72:11:0e:8c:1e:9e:bc:44:2e:82:a4:4b:bd:d8:66:24:
ab:a5:79:84:34:b0:b4:ca:41:f8:08:83:ff:17:95:8e:68:cb:
ae:80:de:b3:77:60:f4:6d:c8:20:23:8e:b3:92:ef:4e:b3:64:
0c:ed:55:e0:a7:df:de:62:fa:d4:49:f7:d7:c8:c2:74:c9:e0:
aa:c2:d5:d8:b9:37:c5:12:af:cd:69:93:4a:59:91:30:50:ab:
83:1d:bd:de:c4:b9:e7:f1:ae:c4:2e:33:c7:35:65:4e:63:fd:
09:f4:56:1c:3f:8d:9f:9e:d6:0c:2a:28:d0:8f:3e:72:13:e8:
34:05:79:66:e9:6f:28:68:3a:ff:4d:e6:ea:65:94:2b:37:98:
17:36:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org