Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22fc36b3-07f6-3096-ae48-ab4ff1578878.roa
File: 22fc36b3-07f6-3096-ae48-ab4ff1578878.roa (raw, json)
Hash identifier: eOm1WVkCI0BHMz+FYI1qhPP7+dboL+Sv9mxIJrHom2s=
Subject key identifier: BC:A8:17:4B:DD:7E:AA:EA:6D:76:98:5F:F4:CC:66:B7:86:18:55:57
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7AC7AED596FE8DB078A0900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22fc36b3-07f6-3096-ae48-ab4ff1578878.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ac:7a:ed:59:6f:e8:db:07:8a:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=f6cb42b2-f733-4267-ae84-65a28058d338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:0d:42:ee:63:43:6b:ab:64:ba:7c:da:b3:
77:90:52:d4:4c:89:bb:f5:1b:ff:a0:0e:91:c4:cc:
3d:e9:bc:4a:e3:07:c0:d9:e8:be:f6:25:31:8a:ea:
7e:b6:c2:e0:7d:d2:97:f9:76:d6:2a:3e:73:58:19:
52:4f:38:6f:dd:1e:c3:0a:07:f8:60:3a:8c:f2:6d:
f8:dd:a9:12:f3:44:dc:99:a4:62:ed:40:01:1c:4d:
8d:42:c9:aa:05:bd:5b:2b:d8:a9:70:76:1d:62:fa:
4e:19:d1:e4:d3:87:10:d9:6b:24:43:d6:bc:12:60:
9c:54:2d:e6:15:a8:5c:f3:f6:69:2a:39:1d:0b:28:
bc:85:da:1e:e4:1e:92:22:e9:d7:f0:71:25:bf:f4:
54:26:fe:41:3e:7b:e2:84:29:e1:db:0b:8a:45:0a:
58:47:56:7f:37:d0:d1:ab:ce:11:44:e2:00:49:3d:
68:73:0e:f3:b1:b7:db:6c:2a:c2:d5:10:3c:ed:4f:
7f:28:4e:d0:12:39:05:34:32:26:7a:59:ff:f6:04:
66:d6:21:51:62:a8:38:d6:f2:95:be:3f:b5:8b:32:
99:6b:5c:62:af:a4:cf:3b:57:53:ca:24:23:35:c1:
75:5a:0f:bf:9a:d7:74:e9:d1:c7:04:e9:74:61:34:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:17:4B:DD:7E:AA:EA:6D:76:98:5F:F4:CC:66:B7:86:18:55:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22fc36b3-07f6-3096-ae48-ab4ff1578878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:75:a8:61:31:3c:2b:f6:fc:cf:d0:8f:09:02:40:f2:31:39:
cd:af:55:3d:ed:a3:97:e6:24:61:ba:51:0d:c9:35:ef:43:9e:
f7:9a:ef:1e:ba:a9:3d:13:1b:17:80:19:b0:1f:03:01:dc:75:
db:5e:02:1d:d8:03:fa:c2:ea:a1:2a:30:9d:23:15:74:3f:3d:
6f:56:bc:6a:df:32:5e:54:4e:d3:aa:46:1c:2a:ed:63:af:af:
66:c5:69:78:f9:6f:7e:49:22:6f:6c:6c:75:cb:9f:ac:a3:1b:
82:f8:c3:17:4a:1f:9f:d8:b8:35:72:96:1b:ee:ec:72:9c:ca:
0c:70:dc:17:5e:ff:fc:4f:5e:fb:1b:31:c6:4f:d4:62:7d:3d:
da:a6:cc:c1:73:5f:0c:a4:1f:1e:be:bf:76:70:46:51:fc:8f:
90:a2:c8:d1:b5:ee:b1:af:32:54:05:5f:44:d3:44:00:b0:f9:
6e:19:af:bd:40:20:55:cf:dd:a2:ec:85:8b:23:42:3f:c4:91:
43:08:e5:3a:04:62:58:f9:e2:e7:77:cb:2d:76:97:fa:6c:5d:
6b:c2:86:95:56:06:52:35:c1:a4:7e:11:90:a6:69:7e:51:e3:
4a:10:a5:6f:41:02:93:62:45:92:64:26:d6:8d:a2:f8:a5:89:
bd:c4:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org