Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3227a012-ce09-3387-b704-f246324348ae.roa
File: 3227a012-ce09-3387-b704-f246324348ae.roa (raw, json)
Hash identifier: yDu7YY1fO0VNSNlIteEieG/Zlp2qKEo1P7Se514ANcE=
Subject key identifier: 93:E7:0A:B8:A7:79:51:33:0D:4E:66:E1:1A:F3:57:E1:5A:05:6D:30
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328583AA7BA9F913F03F8EEAC1A3880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3227a012-ce09-3387-b704-f246324348ae.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:ba:9f:91:3f:03:f8:ee:ac:1a:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2da63e2a-06be-4dda-8c42-8bfc8d290edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:1a:8d:4b:b9:90:db:ea:18:62:82:59:41:
f2:fc:c7:9d:83:3e:7f:9b:62:28:ba:a3:a0:7a:15:
90:0a:28:67:c1:e9:75:20:1a:16:5c:86:52:c6:b0:
44:c7:b6:09:ff:7e:4d:be:bc:c0:0e:a4:e5:bb:f1:
0a:f3:26:04:92:7a:c6:c9:9a:36:b5:8a:b8:41:c7:
25:44:9f:1e:49:57:bd:11:d4:1c:fe:32:6b:37:e5:
d5:f2:f3:d8:b9:cd:86:a9:81:c3:ce:90:70:6a:37:
28:a6:66:b6:c2:fc:3b:ab:6c:f5:f1:59:39:ec:3a:
55:3c:6f:d6:5d:e6:da:95:da:81:6d:e2:84:57:48:
24:ac:77:43:47:79:94:48:4f:71:84:76:05:71:7f:
dd:4c:c9:84:4c:54:d3:79:71:91:89:8b:55:29:c5:
4a:76:eb:69:11:95:b2:ba:8f:52:37:07:3e:54:b7:
fa:de:32:ed:5b:ff:a3:a7:7f:ab:fa:a4:c0:b6:60:
31:21:6b:bb:bf:96:25:09:1f:88:98:4e:a8:83:92:
df:5f:22:ed:8a:d0:84:6a:53:f1:58:79:1e:bc:40:
e4:70:f3:68:98:a9:d6:83:7d:53:6f:cf:10:23:31:
b4:23:68:00:7d:6b:57:1a:0a:9a:78:88:bd:a8:a8:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:0A:B8:A7:79:51:33:0D:4E:66:E1:1A:F3:57:E1:5A:05:6D:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3227a012-ce09-3387-b704-f246324348ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:92:bc:d6:44:c6:f5:c7:f6:97:aa:c2:79:69:e2:ee:07:f6:
fb:1d:86:4a:c1:3d:3c:04:dd:f9:16:ac:62:c3:c6:59:46:aa:
98:1d:fc:96:59:54:6f:7d:63:b8:b9:82:da:55:83:45:a4:5f:
35:a7:27:af:55:ce:21:4d:d1:4e:6a:26:56:da:55:0a:cd:17:
61:e6:59:8b:38:69:03:5a:2d:3f:47:61:ba:be:cf:fe:3b:63:
e2:a9:4b:e3:f2:ce:08:eb:d9:aa:22:f6:38:d0:27:86:95:b6:
05:96:3d:7a:46:e9:d3:c9:bc:73:af:87:57:9b:f1:95:b9:75:
30:8b:14:9b:e9:b0:a6:47:b3:54:52:2d:3d:c6:cb:16:17:ce:
38:a3:e1:22:a6:ad:f6:a2:8b:35:1e:40:a8:a2:60:6d:4b:01:
4e:7b:bb:6c:a9:40:d4:fb:62:42:13:cd:c5:b6:3b:09:83:93:
c3:d2:ac:6e:51:d0:cb:90:a6:27:40:f2:b2:60:ad:c2:3d:c6:
56:9e:b8:e9:0b:94:67:5c:be:dd:d8:4b:e7:af:e2:5c:8d:fd:
50:9a:e5:a3:b5:94:0a:8d:e0:f7:ad:b7:0c:34:dd:55:17:a6:
cf:07:5f:c6:65:e7:c8:6a:f9:50:9c:83:45:ed:36:5e:0e:80:
2f:20:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:35 2023 by rpki-client on console-fra.rpki-client.org