Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2de7eb42-91f8-3480-9aae-b0457b14a0d6.roa
File: 2de7eb42-91f8-3480-9aae-b0457b14a0d6.roa (raw, json)
Hash identifier: QIbW4QKbAglLhJNmoGG93SuYcHyTfgpViw5i+FyDMaQ=
Subject key identifier: 8D:4C:E5:93:E2:7D:51:B1:87:C2:B7:25:A0:E1:67:F2:81:CC:3F:83
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7B73112CAD4673961355740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2de7eb42-91f8-3480-9aae-b0457b14a0d6.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b7:31:12:ca:d4:67:39:61:35:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=15b9b52b-2bd2-44c1-a7a0-2b95554aebac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:94:b6:9a:04:56:fb:e1:26:f5:c3:06:96:
25:61:e4:ed:42:10:3e:5f:84:a4:0c:95:54:0d:90:
67:d4:4f:53:86:61:01:4a:f8:29:ac:2e:a2:1f:43:
74:da:40:e1:ee:eb:79:ce:7b:b2:f9:d9:6f:34:74:
b7:fe:a8:1a:b3:fb:c9:e4:1f:19:c1:84:30:fd:84:
13:82:67:18:be:87:54:c1:ef:ae:21:0a:ff:7b:3f:
c0:fc:46:0f:5a:3f:5c:f3:30:80:31:12:5e:17:d8:
53:63:b6:c6:53:69:d4:5e:e3:6e:a3:00:05:2a:97:
8d:1c:e1:fe:91:22:17:a7:71:b2:ed:48:5e:eb:5b:
59:d0:44:64:0b:97:96:78:50:1c:0b:23:0e:1a:8d:
7d:51:8c:de:d6:44:9c:73:36:59:46:1d:d7:b9:33:
df:00:15:d1:dc:61:a6:8e:ae:b7:fb:24:2c:fe:50:
52:80:0d:d4:61:ff:e1:77:61:84:6a:7a:7f:93:fc:
a3:6d:06:11:42:9b:32:05:78:3d:eb:08:59:e8:67:
70:ce:be:a6:18:aa:d3:c5:e6:f6:e9:ef:74:a8:eb:
6b:f5:1c:71:4c:65:07:e1:91:04:03:9e:57:8c:ca:
b4:69:19:48:4a:4b:f4:a4:fc:98:7e:72:0a:09:d1:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:E5:93:E2:7D:51:B1:87:C2:B7:25:A0:E1:67:F2:81:CC:3F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2de7eb42-91f8-3480-9aae-b0457b14a0d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:a8:f0:1a:37:3f:10:5c:86:32:4c:9b:cc:b6:8c:b4:0c:60:
21:59:5b:d7:17:87:0f:3d:0a:e2:c5:ad:39:a2:1e:cc:ec:0d:
3b:22:39:cf:9e:c3:05:a8:95:59:e0:b8:16:3f:b7:92:d7:28:
74:10:42:90:3b:cb:d0:ae:6f:0e:3b:19:04:33:33:83:38:53:
fe:3c:bc:06:c6:93:97:e7:8a:91:0f:cc:91:ca:da:9e:a9:a0:
26:3a:22:6f:f5:6d:e0:28:85:fe:c8:26:5f:92:d5:70:f3:a7:
8e:07:ec:a4:33:bf:f9:45:dc:83:86:0f:7f:da:6b:9f:21:2c:
de:28:ec:2a:43:fc:4a:31:a0:4e:a2:ea:66:6e:25:7f:da:9e:
08:f8:08:28:bc:13:5c:d4:14:ea:c7:46:1b:b2:d2:87:43:6b:
08:ac:df:9e:39:3d:b1:3c:2c:d2:e6:a7:4a:43:3b:52:8f:66:
a8:a5:cd:e2:5e:73:48:89:e6:07:66:e5:ec:37:ae:dd:22:d6:
8b:ad:a6:b7:f8:ee:f9:87:ea:30:f4:4f:88:ea:04:3a:ba:60:
5d:fc:6a:8d:fc:ee:b4:af:48:60:51:5d:14:b0:da:74:ac:0f:
9d:17:76:d0:d1:e9:1d:60:b8:f2:7c:36:1b:d6:c2:22:5c:48:
5d:3c:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org