Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/209fcd4e-3794-3a3b-a00a-c26c76943958.roa
File: 209fcd4e-3794-3a3b-a00a-c26c76943958.roa (raw, json)
Hash identifier: kA1A+4L0bW7UNp0iJmk0UHk5wcWuCYlZIS5SlcNJjaI=
Subject key identifier: 62:4B:BE:74:2A:97:F3:07:CD:F9:62:86:C0:C5:F1:84:1D:F2:38:F8
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A09296C2205657F5BE1040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/209fcd4e-3794-3a3b-a00a-c26c76943958.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a0:92:96:c2:20:56:57:f5:be:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=b8789a8e-47b8-4b4d-91d2-99d8a79421c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:8a:c3:ac:f6:cb:fb:5c:3a:3a:e3:d2:38:
58:cf:4e:24:14:09:52:6a:c2:6e:52:5c:d9:31:02:
9e:b9:4e:37:8b:1e:90:1d:c2:f0:42:df:ee:14:bb:
d9:7a:0c:0d:ff:5f:d1:99:46:5d:6f:eb:3a:10:f3:
b5:88:fb:66:f8:03:cf:77:a5:d6:3f:fa:80:c8:cb:
e5:4b:9d:f6:3c:27:ca:35:f6:be:6d:b0:7c:b1:90:
71:79:16:77:4a:0b:7c:de:60:ad:df:94:ba:8c:15:
45:17:45:d9:c5:a1:8f:82:3b:a9:a9:2f:fd:bc:f7:
08:6a:24:75:9c:9f:85:42:00:d0:4e:21:22:64:c2:
1c:f2:51:c9:bf:ea:ab:4f:8a:74:46:e6:74:13:1d:
ec:14:f2:fc:f9:82:6e:6b:8b:57:7c:fb:c9:cd:0c:
ac:8a:eb:d3:93:87:04:e3:30:74:a6:e3:47:af:af:
75:55:ce:3c:3a:34:61:c4:9d:bb:84:dc:ad:13:5b:
77:67:95:78:89:56:06:3c:12:ad:aa:21:e3:35:da:
f0:16:be:4f:7b:f3:71:c0:5e:fe:43:fb:c7:cc:b5:
87:fe:fe:0c:87:bb:81:97:8c:c4:0b:97:70:94:3f:
3d:93:d1:9a:73:0a:6e:bc:e1:40:69:3a:9f:3a:cc:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:BE:74:2A:97:F3:07:CD:F9:62:86:C0:C5:F1:84:1D:F2:38:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/209fcd4e-3794-3a3b-a00a-c26c76943958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:bf:04:9c:e9:7e:bd:40:8c:a9:86:2a:9e:1e:13:72:f6:bb:
3b:0b:d9:e5:58:a0:18:73:ab:51:e4:37:37:2d:a1:53:c6:9c:
32:0d:43:26:ef:a6:c9:0d:04:79:e3:d4:0d:ce:38:5d:c1:f2:
41:c5:79:f4:21:72:0b:42:f9:ee:e9:ed:80:79:d2:d1:3b:5a:
1a:a0:2d:b5:e4:7c:03:70:c7:27:a6:35:d8:7d:c1:86:03:f6:
06:af:be:8e:0b:73:f6:3a:d1:0b:a0:5a:a8:07:98:2b:1a:8a:
fa:c0:fc:ff:f4:d0:fd:36:de:41:c2:55:33:97:b0:02:3b:dd:
8f:bf:50:d4:4b:da:e1:11:b3:e6:f9:dc:83:40:ac:ad:93:b0:
82:7c:b8:96:6c:57:17:90:3c:e8:f2:9a:ca:cf:39:05:14:bc:
8d:c4:1d:ff:41:06:58:41:ea:e2:b5:bb:e4:37:5e:fa:3b:ba:
87:b7:8a:06:d0:fa:7f:17:0e:40:76:b1:63:2b:70:79:60:ee:
29:e4:ca:a7:f3:37:20:34:29:99:c1:e2:03:f1:f1:8f:ca:20:
da:58:c8:52:df:8c:0d:cd:e5:1b:47:c1:0b:af:86:cd:b7:77:
3c:a6:5b:1e:d4:09:45:16:5f:6e:2c:09:f8:c5:ff:c4:92:fe:
1e:29:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org