Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a7bad4c-60d2-3bb4-af71-3c69b27e5272.roa
File: 2a7bad4c-60d2-3bb4-af71-3c69b27e5272.roa (raw, json)
Hash identifier: GQjCNC3xXDWQh1kZUIgcMOxyRj4OClxjGqb+Khj7if0=
Subject key identifier: 1F:6A:16:5F:68:02:BE:B9:4C:68:E2:3E:7F:D6:9C:8C:B1:B0:F4:C1
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7A814869B0498BE0F5B0080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a7bad4c-60d2-3bb4-af71-3c69b27e5272.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:a8:14:86:9b:04:98:be:0f:5b:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=9ae5428e-e398-4485-9cdb-04ecd04d83d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:13:9e:6e:d5:6c:52:1c:42:ac:5b:a6:0a:
96:2e:95:09:a7:c4:89:7e:97:11:90:cf:02:5c:c6:
12:23:02:08:10:6e:5a:4d:5f:93:1b:26:a0:d6:0c:
55:29:38:74:e0:cf:c0:f5:b5:6e:5e:7d:24:44:61:
04:c4:b6:13:de:18:08:16:d8:a2:9f:6a:03:55:57:
c3:c6:97:bc:b7:22:0f:9d:01:a8:eb:62:c8:a7:91:
b8:d9:9d:cf:fc:90:dd:76:cd:8b:ea:21:f6:4b:17:
6a:28:8f:5e:7c:e6:0d:f5:40:07:eb:9b:a8:1f:ff:
51:7f:1f:d4:83:4e:3f:be:55:f2:8c:4b:45:d9:b2:
58:88:f0:dc:11:95:3b:5d:90:b6:72:ed:e2:76:fd:
b8:e1:d1:5a:43:24:fa:2f:d6:c9:80:80:a7:01:ca:
e5:6b:33:e6:2d:f3:bd:f6:ed:83:c7:48:cc:47:0e:
f7:0d:25:07:f6:ef:04:73:ae:58:c3:57:d8:83:b7:
6e:84:30:1a:8a:48:51:66:a1:aa:33:8d:80:bd:75:
18:b2:c9:06:f8:cd:c9:56:64:c3:8c:09:95:03:fd:
99:94:a7:89:a8:2e:e6:be:3e:68:1e:cf:36:b8:56:
c8:02:97:18:ce:c4:56:39:a7:07:37:d8:16:34:fc:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:16:5F:68:02:BE:B9:4C:68:E2:3E:7F:D6:9C:8C:B1:B0:F4:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a7bad4c-60d2-3bb4-af71-3c69b27e5272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:0b:cf:66:73:d4:95:91:4b:15:53:4e:db:8a:75:1f:6d:10:
92:43:86:ea:38:e5:51:0f:3e:3b:66:55:0d:f7:b0:e9:2b:7f:
78:b2:db:aa:d2:06:16:45:42:18:99:9f:82:cd:df:43:6e:99:
24:14:33:d7:72:8b:0b:01:53:0c:22:df:1e:45:22:30:d2:b2:
8b:26:d7:32:cf:aa:cb:e2:86:61:e4:e3:5c:34:2b:9a:73:2e:
63:26:56:d9:5e:ae:14:1b:5e:e4:8c:1c:38:18:7c:36:7c:a2:
21:ad:49:d7:e1:c0:49:84:98:0c:a5:9b:dc:ab:7a:71:e7:a5:
0b:32:72:5e:0d:2c:6e:a0:fa:30:76:c6:32:ba:44:ab:00:c1:
e2:40:ad:af:69:02:89:09:00:b3:b5:0c:b3:20:2d:fd:9b:fd:
f8:a6:55:0b:42:f3:fe:11:9d:d1:2e:6f:99:8f:e0:16:fe:47:
b7:0c:90:9f:80:08:ec:8b:28:06:eb:41:a3:4e:be:78:35:ae:
57:d9:33:13:ac:33:59:7c:c1:6f:57:26:c0:56:fa:7e:da:e0:
9d:cf:eb:7b:7a:67:42:e8:58:89:49:1d:37:dc:3e:d9:2d:49:
61:5c:2e:ce:8c:5d:4f:28:d3:55:28:2c:3f:8f:8a:49:84:e7:
06:26:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org