Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2853fa52-cd9b-3a96-8e97-96be3f8b0117.roa
File: 2853fa52-cd9b-3a96-8e97-96be3f8b0117.roa (raw, json)
Hash identifier: gKOoXLKpjy4K2WptIvH/VS/2srUrlyuABjn5bxApLZQ=
Subject key identifier: 95:B1:F8:8A:D9:15:E7:86:F6:F1:AA:14:90:06:53:11:E4:94:A2:B9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A28FD2AE59C0E95A115140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2853fa52-cd9b-3a96-8e97-96be3f8b0117.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a2:8f:d2:ae:59:c0:e9:5a:11:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=3d83d1b7-5fc3-4b06-9cfd-81eb0b883f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:97:b7:7a:fd:bf:fb:c7:01:1b:4b:14:9d:
1d:a8:b9:61:42:88:95:9d:83:35:69:21:a6:81:0b:
8c:34:a7:6c:1d:d6:52:6b:01:cc:83:ec:40:8e:c8:
da:f5:eb:cb:df:31:0a:96:1b:6a:7c:93:dd:0c:91:
17:9d:33:79:f0:3b:0d:a3:6f:06:b1:42:fa:44:0d:
8f:af:3d:74:43:ec:fa:d0:51:dd:1a:75:ba:82:29:
aa:cb:b9:19:cb:78:ab:d1:78:9a:3e:cc:ed:40:6f:
7d:53:1a:9a:c2:e8:5c:36:0f:ee:91:ae:97:aa:3e:
4d:01:48:2a:d5:ec:54:17:8c:15:e2:5a:aa:50:e8:
3e:33:3b:31:c0:03:1d:b1:0e:22:8e:a3:35:f1:25:
ae:cc:9e:8e:8e:79:ef:bb:9b:7c:b9:95:35:a3:f5:
82:ba:fc:a1:ba:75:6d:c8:10:71:df:9d:22:a6:2d:
3d:64:a1:42:19:1a:4f:61:5f:ee:77:fc:2a:bd:94:
e7:fc:7d:5f:7a:17:f8:03:f5:03:ff:ed:87:a5:1b:
6c:16:fd:9b:b9:69:ea:bd:43:3e:26:de:91:5c:0c:
a9:3b:7a:2e:5b:7c:8b:d1:be:4b:0b:0b:df:dc:5d:
89:99:ec:fa:76:53:fe:9a:95:2e:41:65:9f:7f:b8:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:F8:8A:D9:15:E7:86:F6:F1:AA:14:90:06:53:11:E4:94:A2:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2853fa52-cd9b-3a96-8e97-96be3f8b0117.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:2e:f1:2f:b0:b7:b4:eb:34:85:d5:7f:a5:4a:95:48:86:6a:
d2:cc:85:66:43:9f:1d:aa:61:3c:63:d2:c6:f4:42:0b:8c:e1:
db:4d:2d:08:b2:2a:35:fd:69:cd:21:d9:70:bb:fa:cb:71:f4:
fe:6b:c7:e1:fd:89:ad:fd:ce:81:a8:f6:f8:cb:16:66:fa:96:
6a:42:40:ab:79:91:e7:40:cb:68:3c:ed:3a:f7:c8:e2:6d:e3:
06:a6:21:a5:e8:d1:85:f4:21:2f:8d:9b:ec:07:49:f1:df:a7:
6e:39:b0:f6:27:50:28:cf:c8:3a:b0:e9:cf:4e:ff:fe:14:ff:
14:f1:4f:a1:1d:2f:3b:b1:8c:7f:bd:8d:77:93:56:08:b0:27:
1b:5a:0b:0c:1c:91:9a:48:be:00:30:fd:af:86:fb:f5:cc:4a:
ee:fa:d5:98:62:8b:8c:23:1c:33:36:aa:9e:d9:28:65:f3:eb:
5d:d5:35:88:65:41:ce:23:9c:d8:cf:11:9a:a4:70:b5:70:7d:
6e:93:fa:a2:94:dd:8d:2d:31:b6:09:47:e3:db:b0:c2:01:50:
da:08:3d:b4:a8:0f:63:cf:47:dc:54:c4:49:80:e6:a9:97:e6:
6a:9f:a6:6b:2a:f9:76:f1:ed:59:c0:b5:07:26:f8:53:b9:26:
4e:56:66:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org